Understanding the Impact of Risk Perception, Competence, and Knowledge on Trust and Social Engineering Susceptibility in Mobile Banking

This quantitative study explores the factors influencing the susceptibility of Indonesian mobile banking users to social engineering attacks. Data were obtained from 521 respondents, primarily consisting of Generation Z users, during May 2025 and analyzed using the SmartPLS method. The findings highlight that risk perception plays a pivotal role in shaping users' competence, trust, and ultimately, their vulnerability to social engineering. Furthermore, knowledge of threats was found to be a significant determinant in shaping online security management behaviors. Interestingly, the study revealed that while users may exhibit strong security management practices and technical competence, these factors did not significantly reduce their susceptibility to social engineering attacks. This outcome suggests that psychological and perceptual variables may play a more dominant role than behavioral or technical factors. One possible explanation for the limited significance of competence and management practices lies in the restricted geographic scope of the sample, which may not fully represent the diverse characteristics of the wider population. Nevertheless, the demographic composition of the sample aligns with the study’s focus on young digital-native users. Future research is encouraged to examine broader industry sectors and adopt larger, more diverse samples to enhance generalizability and strengthen strategies for mitigating social engineering threats in an increasingly digital society.