Confirmatory Factor Analysis of Phishing Susceptibility in Indonesia

This study analyzes phishing susceptibility among Indonesian internet users through Confirmatory Factor Analysis (CFA) and covariance-based Structural Equation Modeling (SEM). The latent factors examined include perceived severity of the threat (PST), perceived barriers (PBR), perceived benefits (PBN), self-efficacy (SE), past success in detection (PSD), and phishing desensitization (PD), with phishing susceptibility (PS) as the dependent variable, derived from survey data of 150 respondents who had encountered phishing attacks. CFA results indicate a good model fit (RMSEA=0.064, CFI=0.92, etc.), while tests of six hypotheses reveal no significant positive correlations between these factors and PS. These findings challenge prior literature assumptions and underscore the need for mediating factors such as digital literacy or cultural norms to mitigate phishing vulnerability in Indonesia, offering implications for internet service providers and government policy.

@article{Simaremare2026,
  title     = {Confirmatory Factor Analysis of Phishing Susceptibility in Indonesia},
  journal   = {International Journal of Advanced Computer Science and Applications},
  volume    = {17},
  number    = {6},
  year      = {2026},
  publisher = {The Science and Information Organization},
  author    = {Harris Simaremare and Muhammad Fikri and Zarina Shukur},
  doi       = {10.14569/IJACSA.2026.0170638},
  url       = {https://doi.org/10.14569/IJACSA.2026.0170638}
}