I would rather pay money for a new computer than pay a ransom to criminals: Examining willingness to pay among individuals after ransomware victimisation

• In Event: Cybercrime Offenders & Victims (part 1)

Abstract

Background
In today’s digitalized society, individuals increasingly spend time online and rely on information technology. This also increases the risk of victimisation of cybercrime, including ransomware. However, little is currently known about how individuals respond to ransomware victimisation and what motivations and factors contribute to the decision to pay a ransom demand.

Methods
This study uses two surveys to gain more insight into the motivations and factors that are related to the decision to pay a ransom demand. The first survey was conducted among Dutch individuals who were victimised by ransomware (n=856), to gain insight into their experiences with and responses to victimisation, including the decision to pay a ransom. The second survey was conducted among Dutch individuals who were not previously victimised by ransomware (n=4.088) and included a vignette experiment to gain insight into the factors that are related to the willingness to pay a ransom in the event of ransomware victimisation.

Results
Findings show that about 4% of the respondents that were victimised by ransomware paid the ransom demand, citing various reasons for doing so. In addition, respondents in the vignette experiment were unlikely to pay the ransom demand. The affordability of the ransom, the threat of data being leaked and being advised to pay was significantly related to the likelihood of paying the ransom in the vignette experiment. The findings provide insight into what makes ransomware victims vulnerable to extortion.

Authors

• Sifra Matthijsse, The Hague University of Applied Sciences

• Susanne van 't Hoff-de Goede, The Hague University of Applied Sciences

• Rutger Leukfeldt, NSCR