Knowledge-Action Gap and Optimism Bias in Digital Scam Prevention in the Royal University of Bhutan
DOI:
https://doi.org/10.17102/zmv9.i1.014Keywords:
Optimism bias, knowledge-action gap, cyber scams, digital self-efficacy, cybersecurityAbstract
The ongoing digital transformation in Bhutan has led to an increase in the number of digital scams. Despite public awareness campaigns conducted regularly by the Royal Bhutan Police and Bhutan Cyber Incident Response Team, individuals still fall for digital scams. Understanding the link between optimism bias and digital scams is critical for mitigating digital security threats. In this study, we explore the knowledge-action gap regarding digital scams. Specifically, we investigated the prevalence of optimism bias, its associated behaviors, and its relationship with vulnerability to digital scams at the Royal University of Bhutan. Data were collected from 330 participants through a cross-sectional survey, along with two scam-simulation scenarios. In this study, we compared generational differences and associations between campaign recall, bias levels, and preventive behaviors. This study found that the sample demonstrated widespread optimism bias and consistently overrated the susceptibility of peers compared to themselves. Unlike some studies, a comparison of bias levels across generations using Welsh’s t-test showed no differences in optimism between youth and adults. Similarly, there was no association between general awarenessm of campaigns and high optimism bias, but the specific recall of campaign messages was connected to optimism bias. This study highlights the importance of targeted education to bolster self-efficacy among digital users. Unlike the prevalent assumptions, the two digital scam-simulation scenarios did not confirm that a high bias level was linked to increased vulnerability. However, our findings indicate that optimism bias is a proxy for self-efficacy in digital environments. This study provides a foundation for large-scale national surveys and may support concerned agencies in creating effective cybersecurity strategies.
