Project – The Influence of Cybersecurity Awareness on Cybercrime Prevention Among University Students: A Study of Selected Undergraduates at a Nigerian University.

CHAPTER ONE

INTRODUCTION

1.1 BACKGROUND TO THE STUDY

The increasing use of digital technologies has transformed communication, education, financial transactions, information sharing, and academic activities in contemporary society. Universities increasingly depend on digital platforms for online registration, learning management systems, electronic library services, research collaboration, communication, and the storage of students’ personal information. Although these technologies provide significant educational benefits, they also expose users to cybersecurity threats that may compromise the confidentiality, integrity, and availability of information. The International Telecommunication Union (ITU, 2024) identifies cybersecurity as a multidimensional concern involving legal measures, technical capabilities, organisational arrangements, capacity development, and cooperation. This broad perspective demonstrates that protecting digital environments requires more than technological tools; it also requires people to understand security risks and adopt responsible online practices. For university students, who routinely interact with websites, social media, email, digital payment platforms, and online academic resources, cybersecurity awareness is therefore an important component of safe and responsible participation in the digital environment.

Cybercrime refers broadly to unlawful activities involving computers, digital devices, networks, or online platforms, either as the target of an offence or as a means through which the offence is committed. Examples include phishing, identity theft, online financial fraud, unauthorised access to computer systems, cyberstalking, account compromise, and the distribution of malicious software. University students may encounter these threats through fraudulent scholarship announcements, fake admission or examination information, impersonation of lecturers and university officials, deceptive links, compromised social media accounts, and requests for passwords or verification codes. Hadlington (2017) explains that human factors, including users’ knowledge, attitudes, and behaviour, are important in understanding cybersecurity vulnerabilities. This suggests that cybercrime prevention cannot rely exclusively on software and technical controls because users’ decisions may create or reduce opportunities for cyber offenders. Understanding suspicious messages, verifying the authenticity of online requests, securing accounts, and recognising common fraud techniques are practical behaviours that may reduce students’ exposure to cybercrime.

Cybersecurity awareness involves the knowledge and understanding individuals possess about digital threats, protective measures, and the consequences of unsafe online behaviour. It also includes the ability to recognise suspicious activities and apply appropriate security practices when using digital systems. The National Institute of Standards and Technology (NIST) emphasises that cybersecurity and privacy learning programmes should be designed to develop knowledge, encourage behaviour change, and build a sustained culture of security rather than treating training as a one-time activity (Merritt et al., 2024). In a university environment, cybersecurity awareness may include knowledge of strong passwords, multifactor authentication, phishing detection, privacy settings, secure browsing, software updates, data protection, and appropriate reporting procedures. However, possessing general knowledge about online threats does not necessarily mean that an individual will consistently practise safe digital behaviour. For this reason, the relationship between students’ awareness and their actual preventive practices deserves systematic investigation.

The effectiveness of cybersecurity awareness in preventing cybercrime depends partly on whether knowledge is translated into practical behaviour. Students may be aware that suspicious links are dangerous but still click on them because a message appears urgent, comes from a familiar account, or promises a financial reward. Similarly, a student may understand the importance of password security but reuse the same password across several platforms for convenience. Hadlington (2017) highlights the significance of human behaviour in cybersecurity, supporting the need to consider the relationship between what users know and what they do when facing potential threats. Merritt et al. (2024) likewise recommend learning programmes that incorporate behaviour change, evaluation, and continuous improvement. These perspectives indicate that the effectiveness of cybersecurity awareness should be examined through indicators such as threat recognition, password management, account protection, responsible sharing of personal information, verification of online communications, and reporting of suspicious activities, rather than awareness alone.

University students constitute an important population for cybersecurity research because their academic and social lives often involve frequent interaction with digital platforms. They may use institutional portals, email accounts, online examination systems, digital payment services, social networks, and cloud-based applications, sometimes across multiple devices and locations. These activities can expose students to threats involving account theft, fraudulent transactions, personal-data misuse, and social engineering. The ITU (2024) identifies capacity development and public awareness as important dimensions of national cybersecurity efforts, while Merritt et al. (2024) emphasise that security education should be continuous, evaluated, and adapted to users’ needs. Applied to higher education, these principles suggest that universities have a role in providing practical cybersecurity information and establishing accessible mechanisms for reporting digital incidents. Nevertheless, students’ existing knowledge, access to training, personal online habits, and willingness to follow recommended security practices may vary, making it necessary to investigate awareness and preventive behaviour among undergraduates rather than assuming that frequent technology use automatically produces cybersecurity competence.

In Nigeria, cybersecurity is an important concern because digital services support financial activities, communication, education, business, and public administration. The Cybercrimes (Prohibition, Prevention, etc.) Act, 2015, as amended in 2024, provides a legal framework for addressing specified cyber-related offences and related matters in Nigeria (Federal Republic of Nigeria, 2015, 2024). The existence of a legal framework is important for defining offences and supporting law enforcement, but legal provisions alone cannot ensure that individual users recognise threats or avoid risky online practices. The ITU (2024) reports that countries increasingly use awareness campaigns and capacity-development initiatives as part of their cybersecurity efforts. These approaches are relevant to Nigerian universities, where students need practical knowledge of common online threats, responsible handling of personal information, and procedures for responding to suspicious digital activities. Consequently, examining cybersecurity awareness among undergraduates can help establish whether students understand relevant threats and whether their awareness is associated with the precautions they take to prevent cybercrime.

Despite growing attention to cybersecurity education, the presence of awareness messages or training activities does not automatically demonstrate that they have reduced risky behaviour or exposure to cybercrime. NIST recommends evaluating cybersecurity learning programmes through defined objectives, appropriate assessment methods, and continuous improvement so that organisations can determine whether learning initiatives are achieving their intended outcomes (Merritt et al., 2024). Similarly, the ITU (2024) stresses capacity development and awareness-raising as important elements of broader cybersecurity efforts. These recommendations highlight the need to distinguish between students’ exposure to cybersecurity information, their actual level of knowledge, their preventive practices, and their reported experiences of cyber threats. Accordingly, this study examines the influence of cybersecurity awareness on cybercrime prevention among selected undergraduates at a Nigerian university. It focuses on students’ awareness of common cyber threats, their knowledge of protective practices, their online security behaviour, and the challenges that may limit the practical application of cybersecurity knowledge.

1.2 STATEMENT OF THE PROBLEM

The increasing dependence on digital technologies in higher education has created opportunities for learning, research, communication, and administrative efficiency, but it has also introduced security risks for university students. Students may encounter phishing messages, fraudulent online offers, account impersonation, identity theft, malicious links, and other forms of cybercrime while using academic and social platforms. Although technical security measures can help protect digital systems, the behaviour of individual users remains an important consideration in cybersecurity management. Hadlington (2017) identifies human factors as relevant to understanding cybersecurity vulnerabilities, suggesting that users’ decisions and online habits can affect their exposure to digital threats. The problem, therefore, is not simply whether undergraduates use digital technologies but whether they possess the knowledge and practical skills required to recognise and respond appropriately to cyber threats.

A further concern is that students may have different levels of cybersecurity awareness despite their frequent use of digital devices and online services. Some students may understand the importance of strong passwords, account privacy, secure browsing, and verification of online information, while others may have limited knowledge of phishing, social engineering, data privacy, or secure account management. Moreover, knowledge of security principles does not necessarily guarantee compliance with recommended practices. Merritt et al. (2024) emphasise the importance of cybersecurity learning programmes that promote behaviour change and evaluate learning outcomes. This raises an important question about whether cybersecurity awareness among undergraduates is sufficiently developed to encourage preventive behaviour or whether a gap exists between what students know about online threats and the precautions they actually take.

Another aspect of the problem concerns the adequacy of cybersecurity education and support available to students within the university environment. Students may obtain cybersecurity information from university notices, social media, peers, online tutorials, or formal training, but these sources may differ in accuracy, completeness, and practical usefulness. Without regular education, accessible reporting channels, and clear guidance on responding to suspicious activities, students may struggle to apply appropriate security measures when confronted with cyber threats. The ITU (2024) identifies capacity development and cybersecurity awareness as important elements of national cybersecurity efforts, while Merritt et al. (2024) recommend continuous learning and evaluation. However, the existence of general recommendations does not establish the extent to which selected undergraduates at the university have access to effective cybersecurity education or whether available information influences their online behaviour.

The central problem addressed by this study is the need for empirical evidence on the influence of cybersecurity awareness on cybercrime prevention among selected undergraduates at a Nigerian university. Although cybersecurity awareness is widely regarded as an important component of digital protection, its practical contribution must be assessed within the population and institutional setting being studied. Evidence from international cybersecurity guidance cannot independently establish the awareness levels, preventive practices, or challenges experienced by students at a particular Nigerian university. The study will therefore investigate students’ awareness of common cyber threats, the relationship between cybersecurity knowledge and preventive practices, the security behaviours adopted by undergraduates, and the challenges that may limit effective cybercrime prevention. The findings are expected to provide a basis for identifying areas where cybersecurity education, awareness campaigns, and institutional support may be strengthened.

1.3 AIM AND OBJECTIVES OF THE STUDY

The aim of this study is to examine the influence of cybersecurity awareness on cybercrime prevention among selected undergraduates at a Nigerian university.

The specific objectives are to:

1. Assess the level of cybersecurity awareness among selected undergraduates at the Nigerian university.
2. Examine the influence of students’ knowledge of common cyber threats on their cybercrime-prevention practices.
3. Determine the relationship between students’ cybersecurity awareness and their adoption of safe online behaviours.
4. Identify the major challenges that hinder the application of cybersecurity awareness to cybercrime prevention among the selected undergraduates.

1.4 RESEARCH QUESTIONS

The following research questions will guide the study:

1. What is the level of cybersecurity awareness among selected undergraduates at the Nigerian university?
2. How does students’ knowledge of common cyber threats influence their cybercrime-prevention practices?
3. What relationship exists between students’ cybersecurity awareness and their adoption of safe online behaviours?
4. What major challenges hinder the application of cybersecurity awareness to cybercrime prevention among the selected undergraduates?

1.5 RESEARCH HYPOTHESIS

The following null hypothesis will be tested at the appropriate level of significance:

H₀: There is no statistically significant relationship between cybersecurity awareness and cybercrime-prevention practices among selected undergraduates at the Nigerian university.

1.6 SIGNIFICANCE OF THE STUDY

This study is expected to be useful to university management, students, information technology personnel, cybersecurity practitioners, policymakers, and future researchers. By examining students’ cybersecurity awareness and preventive practices, the research may provide evidence that can guide the development of practical approaches to reducing cybercrime risks in higher education.

University Management: The findings may help university administrators assess the need for cybersecurity awareness programmes, student sensitisation campaigns, secure digital learning systems, and accessible channels for reporting cyber incidents. The results may also support the inclusion of cybersecurity guidance in student orientation and other university activities.

Undergraduates: The study may encourage students to pay greater attention to password security, suspicious links, online impersonation, privacy settings, secure browsing, and the protection of personal information. It may also improve their understanding of the importance of translating cybersecurity knowledge into everyday online practices.

Information Technology and Cybersecurity Personnel: The research may provide useful information about students’ knowledge gaps and common security challenges. This could assist relevant personnel in developing targeted training, improving incident-reporting procedures, and communicating security advice in ways that are appropriate for students’ online activities.

Government and Policymakers: The findings may contribute to discussions on cybersecurity education and cybercrime prevention in Nigerian tertiary institutions. They may also provide locally relevant evidence to complement broader national efforts to promote digital safety and cybersecurity capacity development.

Researchers and Students: The study may contribute to academic literature on cybersecurity awareness, human behaviour, and cybercrime prevention in higher education. It may serve as a reference for future research on digital safety, cybercrime victimisation, cybersecurity education, and online risk management.

1.7 SCOPE OF THE STUDY

The study is limited to selected undergraduate students at a Nigerian university. The geographical scope will be the particular university identified by the researcher before data collection. The subject scope covers students’ cybersecurity awareness, knowledge of common cyber threats, adoption of safe online behaviours, cybercrime-prevention practices, and challenges affecting the application of cybersecurity knowledge. The study may consider threats such as phishing, online fraud, account compromise, identity theft, cyberstalking, and unauthorised access. The research will focus on the experiences and responses of the selected undergraduate respondents and will not automatically generalise its findings to every university student in Nigeria.

1.8 LIMITATIONS OF THE STUDY

The study may encounter limitations relating to time, financial resources, access to respondents, and students’ willingness to disclose personal experiences of cybercrime. Some respondents may not remember incidents accurately or may be reluctant to report situations involving financial loss, compromised accounts, or unsafe online behaviour. If the study uses a questionnaire, responses may reflect self-reported knowledge and practices rather than independently verified behaviour. In addition, findings from one university may not represent students in institutions with different digital resources, curricula, or cybersecurity policies. To reduce these limitations, the researcher should assure respondents of confidentiality, use clear and neutral questions, explain the purpose of the study, and interpret the findings within the boundaries of the selected population and research design.

1.9 OPERATIONAL DEFINITION OF TERMS

Cybersecurity: The practices, technologies, and procedures used to protect digital devices, networks, accounts, and information against unauthorised access, misuse, disruption, or attack.

Cybersecurity Awareness: The knowledge and understanding students possess concerning cyber threats, digital security risks, and the precautions required to protect themselves and their information online.

Cybercrime: An unlawful activity in which computers, digital devices, networks, or online platforms are used as tools or targets of an offence.

Cybercrime Prevention: Measures and behaviours intended to reduce exposure to cyber threats, prevent cyber offences, protect digital accounts and personal information, and respond appropriately to suspicious activities.

Undergraduates: Students currently enrolled in undergraduate programmes at the selected Nigerian university.

Phishing: A deceptive technique in which an offender attempts to obtain sensitive information, such as passwords or financial details, by impersonating a trustworthy person or organisation.

Safe Online Behaviour: Responsible digital practices such as using strong and unique passwords, enabling multifactor authentication where available, verifying suspicious communications, protecting personal information, and avoiding unsafe links or downloads.

Cybersecurity Knowledge: An individual’s understanding of digital threats, protective measures, security procedures, and appropriate responses to potential cyber incidents.

Cybercrime-Prevention Practices: The specific actions students take to protect their accounts, devices, personal information, and online activities from cyber threats.

Project – The Influence of Cybersecurity Awareness on Cybercrime Prevention Among University Students: A Study of Selected Undergraduates at a Nigerian University.