Understanding Social Engineering Victimisation on Social Networking Sites: A Comprehensive Review of Factors Influencing User Susceptibility to Cyber-Attacks

The widespread adoption of social networking sites (SNSs) has brought social-engineering victimisation (SEV) to the forefront as a significant concern in recent years. Common examples of social-engineering attacks include phishing websites, fake user accounts, fraudulent messages, impersonation of close friends, and malicious links shared through comments or posts on SNS platforms. The increasing number of SNS users is closely linked to a rise in SEV incidents. Consequently, it is essential to explore relevant theories, frameworks, and contributing factors to better understand this phenomenon. This study systematises and analyses 47 scholarly works on SEV in SNSs, examining theories, frameworks, and influencing factors. A total of 90 independent variables were identified and grouped into seven perspectives: socio-demographics, personality traits, socio-emotional factors, habitual factors, perceptual/cognitive factors, message characteristics, and sender characteristics; these were considered alongside mediating variables. The correlations between these variables and victimisation outcomes were evaluated, uncovering factors that increase vulnerability and highlighting contradictory findings in existing studies. This systematised analysis emphasises the limitations in current research and identifies future research directions in order to deepen the understanding of the factors influencing SEV. By addressing these gaps, this study aims to advance mitigation strategies and provide actionable insights to reduce SEV in SNS contexts.