AI Enabled Cybercrime Awareness and Preventive Behaviour among Law Students in Bangladesh
This study of Bangladeshi law students finds that while daily AI use correlates with better cybersecurity practices, general awareness of AI-enabled threats does not significantly predict protective behaviors, highlighting the need for more nuanced educational approaches and validated measurement tools.
Original paper licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
In the modern digital world, the line between a genuine message and a clever forgery is becoming increasingly difficult to draw. Artificial intelligence has reached a point where it can write emails, mimic voices, and create images that look and sound exactly like real people, making it a powerful tool for scammers. This new reality creates a specific challenge for anyone who uses technology: knowing that a threat exists is different from actually spotting it when it appears, and knowing how to spot it is different from having the habit of checking before acting. Researchers are interested in whether simply being aware of these dangers is enough to change how people behave, or if awareness is just a first step that often fails to lead to real protection. This question is particularly important for students training to become lawyers, as their future work will depend heavily on verifying digital information and protecting sensitive data.
A team of researchers in Bangladesh set out to investigate this exact gap between knowing and doing. They focused on law students, a group whose education requires them to be critical thinkers and careful evaluators of evidence. The researchers wanted to see if these students, who are likely to encounter complex digital information in their careers, could distinguish between recognizing a potential AI-powered scam and actually taking steps to protect themselves. They surveyed 253 law students, asking them a series of questions about their daily habits and their confidence in spotting fraud. The study looked at two main things: whether the students could identify that artificial intelligence could be misused for deception, and whether they reported doing specific safety actions, such as double-checking unusual requests for money or passwords, or using strong security settings on their accounts.
The results revealed a clear and somewhat surprising disconnect. While a large majority of the students reported that they had safety habits in place, fewer than half felt confident that they could recognize when artificial intelligence was being used to trick them. Specifically, about 82 percent of the students said they used security practices like strong passwords, and roughly 81 percent said they verified unusual requests. However, only about 49 percent said they could recognize AI misuse for phishing, and just over half felt confident in their ability to spot scam warning signs. This suggests that the students were following protective routines, perhaps out of general caution or habit, without necessarily feeling that they had the specific skill to identify sophisticated, AI-generated threats.
When the researchers analyzed the data to see if awareness actually drove these protective behaviors, the connection was far weaker than one might expect. They found that simply knowing about the danger of AI scams or feeling confident in one's ability to spot them did not significantly predict whether a student would actually check an unusual request or use security measures. In other words, the students who felt they were good at spotting scams were not necessarily the ones who were more likely to take safety steps, and those who felt less confident were not necessarily less careful. The study suggests that for this group, the act of protecting themselves was happening independently of their specific awareness of AI threats.
The only factor that showed a clear link to better safety habits was how often the students used artificial intelligence in their daily lives. Those who reported using AI tools every day were more likely to say they verified unusual requests and maintained strong security practices. This does not mean that using AI makes someone safer by itself, but rather that frequent users might have developed a different relationship with the technology, perhaps becoming more accustomed to its quirks or more aware of the need for caution through regular interaction. The researchers noted that this association was consistent, but they could not prove that daily use caused the safer behavior; it is also possible that students who are naturally more security-conscious are simply more likely to use these tools frequently.
The study also looked at whether formal training on artificial intelligence made a difference. The data showed no clear link between having received training and having better safety habits. This does not mean training is useless, but rather that the specific type of training recorded in the survey—which ranged from short orientations to full courses—was not measured in a way that could show its effectiveness. The researchers emphasized that the survey relied on what students said they did, not on observing their actual behavior, and that the questions about awareness and action were not strong enough to be combined into a single score. Because the students' answers about awareness and their answers about actions did not move together as a single pattern, the researchers concluded that these are separate issues that need to be studied and taught differently.
Ultimately, the research highlights that being aware of a threat is not the same as being protected from it. For law students in Bangladesh, and likely for students elsewhere, the habit of checking a suspicious message or securing an account appears to be a separate skill from the ability to identify an AI-generated lie. The study suggests that educational programs should not assume that teaching students about the dangers of artificial intelligence will automatically lead them to adopt safer habits. Instead, educators may need to focus on building specific, repeatable routines for verification and security, treating these as practical skills that require their own practice and instruction, distinct from the theoretical knowledge of how the technology works. The findings serve as a reminder that in the face of evolving digital threats, knowing the rules is only half the battle; the other half is having the discipline to follow them every time.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.