Social Engineering, Multidimensional Harm, and Sustained Safe Continuance Among Kenyan Social Media Users: An Integrated Framework
DOI:
https://doi.org/10.59952/tdn5q561Keywords:
Social engineering, Financial harm, Cyber resilience, Sustained safe continuance, Digital wellbeingAbstract
Social engineering has become the dominant mode of attack against social media users, yet its consequences are typically studied one harm at a time and rarely connected to the protective behaviors through which users sustain safe participation. This study developed and empirically validated an integrated framework linking motivational engagement, exposure to social engineering, four distinct harms, protective capability, and sustained safe continuance among Kenyan social media users. A convergent parallel mixed-methods design combined a cross-sectional survey of 304 users with ten focus-group discussions. Survey data were analyzed through structural equation modelling, and focus-group data through reflexive thematic analysis. Of fifteen hypothesized paths, eleven were supported. Social motivations, but not technological factors, significantly drove engagement, which in turn increased exposure. Exposure produced all four harms, binding most strongly to financial harm, then psychological harm, digital wellbeing, and platform trust. Protective behavior formed an ordered progression from foundational hygiene through proactive defense and advanced protection to recovery and help-seeking. Sustained safe continuance was supported by foundational hygiene rather than advanced protection. The qualitative findings corroborated these patterns and explained the limited contribution of help-seeking by reference to the inadequacy of formal support. The framework advances a differentiated, developmental, and contextually grounded account of how users experience and resist social engineering in a mobile-money environment.
References
Abubakari, Y., & Oseh-Ovarah, V. (2025). The gamification of online romance fraud through offenders' cards. Digital Threats: Research and Practice, 6(4). https://doi.org/10.1145/3773289
Al-Azawei, A. (2018). Predicting the adoption of social media: An integrated model and empirical study on Facebook usage. Interdisciplinary Journal of Information, Knowledge, and Management, 13, 233–252. https://doi.org/10.28945/4106
Burruss, G., Weber, C., Fisk, N., & Giovannetti, F. (2026). Pandemic and predation: An analysis of economic stressors and online scam susceptibility during COVID-19. Journal of Crime and Justice, 49(3), 291–310. https://doi.org/10.1080/0735648X.2025.2464015
Frauenstein, E. D. (2019). An investigation into students' responses to various phishing emails and other phishing-related behaviors. Communications in Computer and Information Science, 973, 44–59. https://doi.org/10.1007/978-3-030-11407-7_4
Goliath, S., Tsibolane, P., & Snyman, D. (2026). Exploring the cybersecurity–resilience gap: An analysis of student attitudes and behaviors in higher education. Communications in Computer and Information Science, 2661, 185–200. https://doi.org/10.1007/978-3-032-09660-9_19
Hasan, M. M., Rahman, K. M., Nath, A., Fuad, M. N., Inthakab, K. S. M., & Emee, A. F. (2025). Understanding user adoption of cybersecurity practices through awareness and perception for enhancing network security in Bangladesh. 2025 IEEE 2nd International Conference on Computing, Applications and Systems (COMPAS 2025). https://doi.org/10.1109/COMPAS67506.2025.11381666
Kaur, S., Nancy, & Kumar, P. (2024). Detection of fake URLs using deep LSTM architecture over social media. Lecture Notes in Networks and Systems, 1048, 30–41. https://doi.org/10.1007/978-3-031-64650-8_3
Lin, H., Fan, W., & Chau, P. Y. K. (2014). Determinants of users' continuance of social networking sites: A self-regulation perspective. Information and Management, 51(5), 595–603. https://doi.org/10.1016/j.im.2014.03.010
Liu, X., & Li, Y. (2025). Exploring the impact of persuasion techniques on social media users' response behavior to phishing attacks. Lecture Notes in Business Information Processing, 551, 233–247. https://doi.org/10.1007/978-3-031-94190-0_20
Naeem, N.-I.-K., & Mushibwe, C. P. (2025). Navigating digital worlds: A scoping review of skills and strategies for enhancing digital resilience among higher education students on social media platforms. Discover Education, 4(1). https://doi.org/10.1007/s44217-025-00432-7
Ngo, F. T., Agarwal, A., & Holman, K. (2026). Cyber hygiene and cyber victimization among limited English proficiency (LEP) internet users: A mixed-method study. Victims and Offenders, 21(5), 969–991. https://doi.org/10.1080/15564886.2024.2329765
Pushpavalli, R., Rengaramanujam, P., Berna, I. E., Suseela, D., Dilli, B. M., & Vignesh, R. S. (2026). Detection of cyber threats on social media using optimized sentiment-aware deep learning models. International Journal of Engineering Trends and Technology, 74(3), 336–345. https://doi.org/10.14445/22315381/IJETT-V74I3P123
Saleem, M., Kumar, R., Chawla, C., & Singh, M. (2024). Understanding the human factors in the psychology of cyber threats. In Human impact on security and privacy: Network and human security, social media, and devices (pp. 39–58). https://doi.org/10.4018/979-8-3693-9235-5.ch003
Sirma, J., Wamunyu, P. K., & Ndirangu, D. (2026). Factors contributing to vulnerability towards social engineering attacks among Kenyan social media users. Kabarak Journal of Research & Innovation, 16(2), 335–350. https://doi.org/10.58216/kjri.v16i2.676
Suet Ching, C., Sinnappan, S., & Periyayya, T. (2026). The relationship between risk factors and susceptibility to investment scams among Malaysian young adults. Journal of Financial Crime, 33(1–2), 37–52. https://doi.org/10.1108/JFC-07-2025-0228
Tarhini, A., Alalwan, A. A., Cao, D., & Al-Qirim, N. (2021). Integrating emotional attachment, resource sharing, communication and collaboration into UTAUT2 to examine students' behavioral intention to adopt social media networks in education. International Journal of Technology Enhanced Learning, 13(1), 1–23. https://doi.org/10.1504/IJTEL.2021.111588
Yeng, P. K., Fauzi, M. A., Yang, B., & Nimbe, P. (2022). Investigation into phishing risk behavior among healthcare staff. Information, 13(8), Article 392. https://doi.org/10.3390/info13080392
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Julius Sirma, Patrick K Wamunyu, Dr. Dalton Ndirangu
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.