PHISHING EXPERIENCE SURVEY
UTS HREC ref: ETH23-8060
Have you recently been hacked or scammed via a Phishing email?
The University of Technology, Sydney is carrying out research into Phishing email scams. If you have recently been hacked or scammed or fallen for a Phishing email, then we invite you to take part in this important work.
The survey will take approximately 15 minutes to complete and will ask a range of questions about the nature of the email, what you thought about as you responded and then a number of questions about you and your decision-making process. Participation is entirely anonymous and voluntary. We will not collect any personal identifying information - so you can respond with complete confidence that you will not be identified in any way.
For resources and help with identifying Phishing emails in future, click here.
Please note that this not a formal channel for reporting this event to authorities and is for research purposes only. If you wish to report such an attack, please see the resources here.
WHO IS CONDUCTING THIS RESEARCH?
My name is Dan Conway and I am a PhD student at the University of Technology Sydney. My supervisor is Kun Yu.
WHAT IS THE RESEARCH ABOUT?
The purpose of this research/online survey is to investigate the thought processes that play out when people are subject to Phishing email scams. You have been invited to participate because you have recently been subjected to a Phishing scam. This study has been approved by the University of Technology, Sydney Human Research Ethics Committee, ref: ETH23-8060
WHAT DOES MY PARTICIPATION INVOLVE?
If you decide to participate, you will be asked to complete the survey via the link below. The survey will ask questions about how you received the email, what the context was, what you thought about it, and some information about you. Completing the survey will take about 15 minutes.
You can change your mind at any time and stop completing the survey/s without consequences.
ARE THERE ANY RISKS/INCONVENIENCE?
There is a slight risk that some of these questions may cause you some distress. If this is the case you are free to immediately discontinue - and if so your data will be discarded and not used in this research.
Furthermore if you feel and any distress and you are in NSW, please call NSW mental health support line: 1800 011 511. You can also access their website here: https://www.health.nsw.gov.au/mentalhealth/pages/mental-health-line.aspx
We will remind you of these services at the conclusion of the survey.
DO I HAVE TO TAKE PART IN THIS RESEARCH PROJECT?
Participation in this study is voluntary. If you decide not to participate, or to withdraw from the study, it will not affect your relationship with the researchers or the University of Technology Sydney or your organisation/school. Participation or non-participation will have no bearing on student course progression or assessment.
WHAT IF I WITHDRAW FROM THIS RESEARCH PROJECT?
If you wish to withdraw from the study once it has started, you can do so at any time without having to give a reason, by simply be closing your browser window. If you withdraw from the study, no data from your participation will be recorded.
WHAT WILL HAPPEN TO INFORMATION ABOUT ME?
Access to the online questionnaire is via the button above. Final submission of the online questionnaire/s is an indication of your consent. The information you provide will be entirely anonymous, no personally identifying information will be collected, so we ask that you answer as honestly as you can.
This website is hosted by https://vercel.com. Data from your submission will be managed by Qualtrix and is encrypted at rest and in transit and stored on secure servers in Australia. Further information on privacy can also be found in the Qualtrics privacy statement.
In accordance with relevant Australian and/or NSW Privacy laws, you have the right to request access to the information about you that is collected and stored by the research team. You also have the right to request that any information with which you disagree be corrected. Please inform the research team member named at the end of this document if you would like to access your information. This will only be possible if you provide personal information which may individually identify you, or be reasonably identifiable (e.g. if any open-text responses contextually identify or re-identify you).
It is anticipated that the results of this research project will be published and/or presented in a variety of forums. The results of this research may also be shared through open access (public) scientific databases, including internet databases as well as industry and professional forums such as blogs and reports. This will enable other researchers to use the data to investigate other important research questions. Results shared in this way will always be de-identified by removing any contextual information that could identify you.
WHAT IF I HAVE ANY QUERIES OR CONCERNS?
If you have any queries about the research that you think I can help you with, please feel free to contact me via Daniel.Conway@student.uts.edu.au.
If you would like to talk to someone who is not connected with the research, or if you have any concerns or complaints about any aspect of the conduct of this research that you wish to raise independently of the research team, please contact the Ethics Secretariat on +61 (0)2 9514 2478 or Research.ethics@uts.edu.au and quote the UTS HREC reference number. Any matter raised will be treated confidentially, investigated and you will be informed of the outcome.