A Review on the Application of Lifestyle-Routine Activity Theory in Cyber Criminology

Related Literature

Reyns BW [1] - “Online Routines and Identity Theft Victimization” • Reyns BW [1] investigated how daily online routines influence the risk of identity theft. The study found that individuals who engage in high-risk online activities (e.g., online shopping, social networking) are more likely to become victims of identity theft. It also validated L-RAT by demonstrating that exposure to potential offenders and target suitability significantly impact victimization rates.

Holt TJ, et al. [2] - “Examining the Applicability of Lifestyle- Routine Activities Theory for Cybercrime Victimization” • Holt and Bossler explored the relevance of L-RAT in explaining the victimization of individuals who engage in online activities. The study highlighted that routine activities such as frequent use of the internet and participation in social networking sites increase exposure to cyber threats.It supported L-RAT by showing a positive correlation between risky online behaviors and cybercrime victimization.

Mesch GS (2009) - “Parental Mediation, Online Activities, and Cyberbullying” • Mesch examined the role of parental mediation in adolescents’ online activities and their exposure to cyberbullying. The results indicated that adolescents who spend more time on social media and engage in risky online behaviors are more likely to experience cyberbullying. This study reinforced L-RAT by linking the frequency and nature of online activities with increased victimization risk.

Ngo FT, et al. [3] - “Cybercrime Victimization: An Examination of Individual and Situational Level Factors” • Ngo and Paternoster analyzed individual and situational factors contributing to various forms of cybercrime victimization. They found that personal characteristics (e.g., age, gender) and online routines (e.g., social networking, online shopping) are significant predictors of victimization. Their findings supported L-RAT, emphasizing the importance of routine activities in understanding cybercrime victimization.

Leukfeldt ER, Yar M (2016) - “Applying Routine Activity Theory to Cybercrime: A Theoretical and Empirical Analysis” • Leukfeldt and Yar conducted a theoretical and empirical analysis of L-RAT’s application to cybercrime. The study confirmed that online routine activities, such as frequent internet use and engagement in social networks, increase the risk of becoming a victim of various cybercrimes. It validated L-RAT’s applicability to cyber contexts by demonstrating how routine activities create opportunities for cybercriminals.

The Lifestyle Routine Activity Theory (LRAT), which stems from criminology, posits that the likelihood of becoming a victim of crime is influenced by everyday activities and lifestyle choices. Applying this framework to social media oversharing can help explain why certain individuals are more prone to disclosing excessive personal information online. According to LRAT, the more frequently individuals engage in activities that expose them to potential threats, the higher their risk of victimization. On social media, individuals who spend a significant amount of time online and frequently share updates about their lives are more exposed to the risks associated with oversharing. This constant online presence increases the chances of sharing sensitive information inadvertently [4].

LRAT also suggests that individuals who possess valuable or desirable characteristics are more likely to be targeted by offenders. In the context of social media, users who share information about their wealth, possessions, or personal achievements may become attractive targets for criminals seeking opportunities for theft, fraud, or other malicious activities [5].

The theory emphasizes the importance of capable guardians, people or mechanisms that can protect potential victims from harm. On social media, the absence of such guardians can lead to oversharing. For instance, without proper privacy settings, guidance on safe online behavior, or awareness of the risks, users are more likely to share personal information freely. It considers the physical or virtual proximity to potential offenders. Social media platforms bring users into closer virtual proximity with a vast array of individuals, including those with malicious intent. This increased interaction heightens the likelihood of encountering someone who might misuse the shared information [6].

It is observed Individuals daily routines and habits influence their patterns of social media use. Those with routines that include frequent social media check-ins, updates, and interactions are more likely to develop habits of oversharing. This consistent behavior can make it easier for malicious actors to predict and exploit vulnerabilities [7, 8, 9, 10].

Understanding LRAT and its implications for social media behavior can help users navigate online interactions more safely and reduce the likelihood of negative consequences from oversharing. Sharing personal Information on Social Media platforms like Facebook, Twitter, Instagram, and LinkedIn are vital for communication, self-expression, and networking. However, the increasing tendency to overshare personal information on these platforms brings with it significant risks. These risks include threats to privacy, identity theft, professional consequences, mental health issues, data exploitation, security risks, and strained relationships. One of the primary concerns of oversharing on social media is the threat to personal privacy. Users frequently post sensitive details such as home addresses, phone numbers, and daily routines without fully considering the potential risks. This information can be easily accessed by malicious individuals or organizations, leading to privacy breaches and exposing users to unwanted attention or harm. Once shared, the digital footprint is challenging to erase, making it vital for users to carefully consider what they post online [11].

Another severe consequence of oversharing is identity theft. Cybercriminals can compile seemingly innocuous details shared on social media to steal identities, leading to financial loss, damaged credit scores, and a long, arduous process to reclaim one’s identity. For example, sharing information such as birthdates, mother’s name, or pet names—often used in security questions—can provide criminals with the information needed to access personal accounts [12].

Oversharing can also have significant professional repercussions. Security threats are also heightened by oversharing. Announcing vacations or significant purchases on social media can alert burglars to opportunities. For instance, posting about an upcoming trip can signal that a home will be unoccupied, making it an easy target for theft. Similarly, sharing photos of expensive new gadgets can attract the attention of criminals [13, 14, 15, 16].

Inadequate cybersecurity practices can greatly compromise the security of systems and sensitive data. A common issue is the use of weak passwords, which are often easy to guess or reused across different sites, making it easier for cybercriminals to gain unauthorized access. Another significant vulnerability is the absence of two-factor authentication, which adds an essential layer of security [17, 18]. Without this, accounts are more prone to being breached through password attacks. Failing to keep software and applications up to date is another major risk, as outdated software can have known vulnerabilities that cybercriminals can exploit. Furthermore, not maintaining regular backups can worsen the effects of ransomware attacks, potentially forcing victims to pay ransoms to regain access to their data [19, 20].

User behavior also significantly contributes to cybersecurity risks. Users who frequently click on unverified links are at a higher risk of phishing and malware attacks. Similarly, downloading software from unofficial or untrusted sources can lead to the installation of malicious programs like malware or spyware. Ignoring security warnings from browsers or systems about potential threats can also result in exposure to harmful websites and software. To address these issues, organizations need to implement robust cybersecurity policies, provide regular training, and maintain vigilance in following best practices.