Open Access Academic Publisher•
Contact Office|Publication Ethics
NextGen Innovation & Research Journals
NextGen Advanced AI & Information Technology Reviews
NextGen Advanced AI & Information Technology Reviews
Vol. 1, No. 1 (2026)•Open Access
RESEARCH ARTICLE

Cybersecurity Awareness, Everyday Practices and Privacy Behaviour among Students of the University of Lagos: A Survey-Based Case Study

Chuks Emmanuel OKOLO 1CorrespondingiD
1UGTF Detroit, Michigan , Nigeria
DOI:https://doi.org/10.5281/zenodo.23624575ZenodoZenodo Record
Published: October 24, 2026•Peer-Reviewed•0 Downloads7 Views
Download PDF

Abstract

Nigerian students do their banking, learning, borrowing and socialising on the same phone, which makes them easy and frequent targets for online fraud. This article reports an anonymous online survey of 384 students of the University of Lagos, drawn from undergraduate and postgraduate levels, on what they know about cybersecurity, what they actually do, what has happened to them, and what they expect from the university. Knowledge was uneven. Nearly everyone (99.2%) knew that a bank never asks for an OTP, yet fewer than half answered correctly on password reuse (26.3%), the padlock icon (23.7%), public Wi-Fi (29.2%) and antivirus software (45.8%). The same pattern showed in behaviour: 99.2% lock their devices and 95.1% never share OTPs, but 78.6% often use their school password on other sites and 92.2% sometimes use public Wi-Fi for banking. Incident exposure was high, with 62.2% reporting loan-app harassment, 54.9% a phishing or scam message and 26.6% money lost to online fraud. Almost all respondents (99.5%) had seen a deepfake, while 2.9% felt able to tell AI-written scam messages from genuine ones. Some 99.2% asked for more training. Six structured problems and matching recommendations are set out. The data are self-reported, cross-sectional and drawn from a convenience sample, so the results describe stated knowledge and habits, not measured security outcomes.
Keywords:
cybersecurity awareness; phishing; password reuse; privacy; higher education; Nigeria; loan apps; deepfakes

Declarations & Editorial Statements

Conflict of Interest

The authors declare no competing financial or non-financial interests.

Funding Information

This research was supported through institutional academic funding.

Data Availability Statement

All analytical datasets and materials are available upon reasonable request.

Publishing License

Published under Creative Commons Attribution 4.0 International (CC BY 4.0). Authors retain copyright.

References (49)

  1. Acquisti, A., Brandimarte, L., & Loewenstein, G. (2015). Privacy and human behavior in the age of information.
  2. Science, 347(6221), 509-514.
  3. Channels TV. (2025). FCCPC unveils rules to end loan app harassment, impose ₦100m sanctions. Retrieved
  4. October 2026, from https://www.channelstv.com/?p=955420
  5. Chesney, R., & Citron, D. K. (2019). Deep fakes: A looming challenge for privacy, democracy, and national
  6. security. California Law Review, 107(6), 1753-1820.
  7. Cialdini, R. B. (2009). Influence: Science and practice (5th ed.). Pearson.
  8. Cochran, W. G. (1977). Sampling techniques (3rd ed.). Wiley.
  9. Creswell, J. W., & Creswell, J. D. (2018). Research design: Qualitative, quantitative, and mixed methods
  10. approaches (5th ed.). SAGE.
  11. Das, A., Bonneau, J., Caesar, M., Borisov, N., & Wang, X. (2014). The tangled web of password reuse.
  12. Proceedings of the Network and Distributed System Security Symposium (NDSS).
  13. Dhamija, R., Tygar, J. D., & Hearst, M. (2006). Why phishing works. Proceedings of the SIGCHI Conference on
  14. Human Factors in Computing Systems, 581-590.
  15. Dunning, D., & Kruger, J. (1999). Unskilled and unaware of it: How difficulties in recognizing one's own
  16. incompetence lead to inflated self-assessments. Journal of Personality and Social Psychology, 77(6), 1121-
  17. 1134.
  18. Egelman, S., & Peer, E. (2015). Scaling the security wall: Developing a security behavior intentions scale (SeBIS).
  19. Proceedings of the 33rd Annual ACM Conference on Human Factors in Computing Systems, 2873-2882.
  20. Etikan, I., Musa, S. A., & Alkassim, R. S. (2016). Comparison of convenience sampling and purposive sampling.
  21. American Journal of Theoretical and Applied Statistics, 5(1), 1-4.
  22. Federal Republic of Nigeria. (2023). Nigeria Data Protection Act, 2023.
  23. Grassi, P. A., Fenton, J. L., Newton, E. M., et al. (2017). Digital identity guidelines: Authentication and lifecycle
  24. management (NIST Special Publication 800-63B). National Institute of Standards and Technology.
  25. Ion, I., Reeder, R., & Consolvo, S. (2015). "...no one can hack my mind": Comparing expert and non-expert
  26. security practices. Proceedings of the Symposium on Usable Privacy and Security (SOUPS), 327-346.
  27. KPMG Nigeria. (2023). The Nigeria Data Protection Act, 2023. Retrieved October 2026, from
  28. https://kpmg.com/ng/en/home/insights/2023/09/the-nigeria-data-protection-act--2023.html
  29. Kumaraguru, P., Sheng, S., Acquisti, A., Cranor, L. F., & Hong, J. (2010). Teaching Johnny not to fall for phish.
  30. ACM Transactions on Internet Technology, 10(2), Article 7.
  31. Likert, R. (1932). A technique for the measurement of attitudes. Archives of Psychology, 22(140), 1-55.
  32. Nairametrics. (2023). Loan apps defy FCCPC, as customer defamation and harassment continues. Retrieved
  33. October 2026, from https://nairametrics.com/?p=457794
  34. Nederhof, A. J. (1985). Methods of coping with social desirability bias: A review. European Journal of Social
  35. Psychology, 15(3), 263-280.
  36. Norberg, P. A., Horne, D. R., & Horne, D. A. (2007). The privacy paradox: Personal information disclosure
  37. intentions versus behaviors. Journal of Consumer Affairs, 41(1), 100-126.
  38. Podsakoff, P. M., MacKenzie, S. B., Lee, J.-Y., & Podsakoff, N. P. (2003). Common method biases in behavioral
  39. research: A critical review of the literature and recommended remedies. Journal of Applied Psychology, 88(5),
  40. 879-903.
  41. Rogers, R. W. (1975). A protection motivation theory of fear appeals and attitude change. Journal of Psychology,
  42. 91(1), 93-114.
  43. Sheng, S., Holbrook, M., Kumaraguru, P., Cranor, L. F., & Downs, J. (2010). Who falls for phish? A demographic
  44. analysis of phishing susceptibility and effectiveness of interventions. Proceedings of the SIGCHI Conference
  45. on Human Factors in Computing Systems, 373-382.
  46. Verizon. (2024). 2024 Data Breach Investigations Report. Verizon Business.
  47. Wash, R. (2010). Folk models of home computer security. Proceedings of the Symposium on Usable Privacy and
  48. Security (SOUPS), Article 11.
  49. Yin, R. K. (2018). Case study research and applications: Design and methods (6th ed.). SAGE