Jennifer Klütsch

Privacy-invasive apps and social media phishing pose emerging online risks to young adults. Hybrid nudges, which combine simple nudges with educational aspects directly within related mobile interactions, represent a promising intervention to support informed decisions when confronted with security and privacy (S&P) risks. However, they are rarely adapted to the user-specific vulnerabilities and needs of young adults, which may limit their real-world uptake. In four workshops involving fourteen students aged 20-27, we explored risk perceptions influencing young adults' S&P decisions and obtained end-user feedback to research-based hybrid nudge designs. Participants emphasized the behavior of relevant others and platform-provided social indicators as key risk factors. However, social influence was also discussed as a key resource, with participants stating that previous experiences of others increased their risk awareness. Our findings further indicate that the appropriate level of information and friction may depend on the type and perceived immediacy of the respective S&P risk. Based on our findings, we discuss design implementations for integrating S&P support into mobile app stores and social media interfaces. In addition, we discuss design directions for future user research and intervention paths beyond nudging.

Phishers exploit the social nature of social media, thereby targeting young adults, who are highly susceptible to phishing. This study focuses on two under-researched factors influencing young adults’ susceptibility to social media phishing: the user’s relation to the message sender and Fear of Missing Out (FoMO). In an online vignette study, 193 young adults were presented with Instagram chat messages from either known or unknown senders, accompanied by varying consequences for not clicking. These ranged from missing an event with no other user (no consequences) to missing an event with one (low) or several other users (high consequences). The analysis focused on intended behaviour and suspicion, while also capturing young adults’ situational fear of missing out on the scenario-based event with the message sender (State FoMO) and their individual Trait FoMO. The results highlight that the user-sender relation is a strong predictor of phishing susceptibility and a crucial contributor to State FoMO. Furthermore, young adults who are high in Trait FoMO exhibited lower suspicion towards phishing attempts. These findings are discussed along with methodological considerations. In addition, strategies to mitigate the identified vulnerabilities are suggested, focusing on areas where social media phishing is most likely to affect young adults.

Digital participation formats could offer great potential to support the process of current citizen participation and to counteract the barriers that arise. Based on two focus groups with a total of 12 participants between the ages of 25 and 70, we investigated the barriers experienced and potential for optimisation of previous citizen participation as well as the expectations and preferences for digital citizen participation. The aim is to develop digital participation formats in a participatory manner based on the needs of citizens and thus utilize the potential of digital citizen participation. In the focus groups, we identified a lack of awareness of and identification with participation processes as possible personal barriers for citizens. A perceived lack of transparency and communication in participation processes were, among others, identified as barriers arising from project coordinators, which can lead to a lack of trust and frustration. In order to promote transparent and comprehensible participation processes in the future, the focus groups offer valuable information on the design of future citizen participation, both for process optimisation and for increasing awareness of citizen participation.

With the rising usage of contactless work options since COVID-19, users increasingly share their personal data in digital tools at work. Using an experimental online vignette study (N = 93), we examined users’ willingness to use a video conferencing tool, while systematically varying the context of use (personal vs. low trustworthiness work vs. high trustworthiness work) and the type of information shared (low vs. medium vs. high sensitivity). We also assessed users’ perceived responsibility in work and personal contexts of use and their self-assessed digital competence. Our results highlight employer trustworthiness as an important factor in the willingness to use a third-party video conferencing tool, with increased willingness to use these tools in work contexts of use with high trustworthiness compared to those with low trustworthiness. This effect seems to be reduced when the data to be shared is of high sensitivity, compared to medium and low sensitivity data. Furthermore, despite reduced responsibility for data protection in work compared to personal contexts of use, the willingness to use a video conferencing tool did not decrease between trustworthy work and personal contexts of use. We discuss our findings and their methodological implications for future research and derive implications for privacy decisions at work.

Social networking and messaging applications, such as WhatsApp, have become an essential social environment for adolescents and young adults (AYA). While facilitating connectivity, they also bear hazards, including cyber-aggression. This study investigates the impact of (aggressive) group norms on AYA's propensity to expect cyberaggressive behaviors within different group chats. Based on a vignette scenario, realistically simulated WhatsApp group chats enabled scrutinizing, if and how exemplary reactions (funny, aggressive, friendly) of group members influence AYA's conformity to cyber-aggression (N = 500, aged 16 to 29). Additionally, we examined the effect of chat group type—close friends versus fellow students—on the anticipation of aggressive reactions. Sociodemographic, social, and developmental-psychological factors were evaluated for potential effects. Multilevel logistic regression analyses indicated that aggressive group norms significantly predict cyber-aggression anticipation, while no effect of chat group type was observed. Controlling for the size and vivacity of participant’s friend group, gender, age, and educational status were significant predictors: males, younger participants, and non-university students expected higher levels of cyber-aggression conformity. This study underlines the importance of group dynamics on perceptions of cyber-aggression and hints at individual risk factors for AYA's digital communication behavior.