Consumer Trust, Data Privacy, and Emerging Cybersecurity in Islamic Digital Banking: A Bibliometric and Systematic Review
This study conducts a bibliometric and systematic review of 34 peer-reviewed articles to reveal a critical research gap in Islamic digital banking, where the tension between the religious duty of *Amanah* and emerging cybersecurity threats remains largely unaddressed, prompting the authors to propose a new conceptual framework and research agenda to bridge this disconnect.
Original paper licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
In the vast world of finance, there is a growing sector built on a foundation of trust that goes beyond simple contracts. Islamic banking operates on the principle of Amanah, a deep ethical duty where the institution acts as a faithful steward of its customers' assets. This is not just about keeping money safe in a vault; in the modern era, it extends to protecting the digital footprints, transaction histories, and personal data that flow through mobile apps and online portals. As billions of people around the world shift their banking to these digital platforms, a critical question arises: does the technology keep pace with this sacred promise? When a bank fails to protect a customer's data, it is not merely a technical glitch; for the faithful, it can feel like a breach of a spiritual covenant. Yet, while the industry grows rapidly, scholars have struggled to understand how Muslim consumers actually think about these digital risks. They have studied how people choose to use these apps, but they have rarely looked at what happens when trust is broken by a cyber threat.
A team of researchers set out to map this uncharted territory by gathering and analyzing every available academic study on the subject. They scoured a major database of scientific journals, starting with 200 records related to Islamic banking, data privacy, and security. After a rigorous screening process to ensure only high-quality, peer-reviewed articles were included, they were left with a final collection of 34 papers published between 2013 and June 2025. This small number itself tells a story: the field is young and still finding its footing. The researchers then examined these papers to see what questions were being asked, what theories were being used, and, perhaps more importantly, what was missing. They found that the vast majority of existing research focuses on why people decide to adopt new banking technology, treating trust as a simple, positive feeling that helps people sign up. However, almost none of these studies investigate what happens when that trust is shattered by a security failure.
The most striking discovery was a significant gap in the tools researchers use to understand human behavior. In the broader world of cybersecurity, experts rely on specific models to explain how people react to danger. One such model, known as Protection Motivation Theory, looks at how people weigh the severity of a threat against their ability to protect themselves. Another, called Privacy Calculus, examines how people decide if the benefits of sharing their data are worth the risks. The researchers found that neither of these models appeared in any of the 34 papers they reviewed. Instead, the field is dominated by theories designed for marketing and adoption, which assume that trust is a steady, unchanging force. This means that while we know a lot about how Muslims start using Islamic digital banks, we know very little about how they react when those banks fail to keep their data safe. The studies also revealed that the research is heavily concentrated in a few countries, particularly Indonesia and Jordan, leaving huge markets in South Asia and the Middle East largely unexplored.
To fill this void, the authors proposed a new way of thinking about the problem, built on three connected layers. The first layer is the ethical foundation: the idea that protecting data is a religious obligation, a duty to preserve the property and identity of the customer. The second layer suggests that when a threat appears, a Muslim consumer's reaction is amplified by this religious duty; a data breach isn't just an inconvenience, it feels like a violation of a sacred trust. The third layer looks at the decision-making process, suggesting that consumers might be willing to share their data if they believe the bank is truly fulfilling its spiritual duty to protect them. This belief acts as a kind of spiritual benefit that can balance out the fear of privacy loss. The researchers did not prove these ideas are true; rather, they identified that the current literature is silent on them and offered these concepts as a roadmap for future studies.
The paper concludes by outlining a specific agenda for the next generation of research. It calls for studies that track how trust changes over time, especially before and after a security incident, rather than just taking a single snapshot of consumer opinion. It urges scholars to look at the differences between traditional banks that have moved online and new, digital-only banks, as their approaches to security and trust may differ. Most importantly, it suggests that regulators and bank leaders need to treat data protection not just as a technical requirement, but as a core part of their religious governance. By integrating these ethical duties with modern psychological models, the field can move beyond simply counting how many people use the apps to truly understanding how to keep the trust of the people who rely on them. The work serves as a reminder that in the digital age, the most important security system may be the one that aligns technology with the deepest values of the people it serves.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.