Abstract
This article examines the modus operandi of phishing for information related to bank accounts in The Netherlands, by composing crime scripts based on 93 Dutch court transcripts. The analysis resulted in two overarching crime scripts of phishing. In the first crime script, criminals aim to steal victims' ATM cards and pin numbers. In crime script two, criminals aim to steal victims' personal data and verification codes—codes needed to confirm transfers—in order to deposit money from the bank accounts of victims to third parties' bank accounts, or to persuade victims to do this themselves. In conclusion, the modus operandi of phishing has not changed much in recent years, meaning that interventions targeting bottlenecks in the crime script can still very well be implemented. Furthermore, the results indicate that the modus operandi seems to become less technical, contradicting the idea that digitalization leads to more technically sophisticated phishing methods.
Similar content being viewed by others
References
Anti-Phishing Working Group (2021) Phishing activity trends report 2nd quarter 2021. https://docs.apwg.org/reports/apwg_trends_report_q2_2021.pdf
Australian Cyber Security Centre [ACSC] (2021) ACSC Annual Cyber Threat Report: 1 July 2020 to 30 June 2021. ACSC, Kingston
Bekkers L, Schiks J, Leukfeldt ER (2020) Naar een interventie tegen geldezels. Een pilot in de gemeente Haarlem. Centre of Expertise Cybersecurity, Haagse Hogeschool, Den Haag
Borrion H (2013) Quality assurance in crime scripting. Crime Sci 2(6):1–12. https://doi.org/10.1186/2193-7680-2-6
Bouchard M, Soudijn M, Reuter P (2021) Conflict management in high-stakes illegal drugtransactions. Br J Criminol 61(1):167–186. https://doi.org/10.1093/bjc/azaa054
Braun V, Clarke V (2006) Using thematic analysis in psychology. Qual Res Psychol 3(2):77–101. https://doi.org/10.1191/1478088706qp063oa
Brayley H, Cockbain E, Laycock G (2011) The value of crime scripting: Deconstructing internal child sex trafficking. Policing 5(2):132–143. https://doi.org/10.1093/police/par024
Caesar E (2021) The takedown of a dark-web marketplace. The New Yorker. https://www.newyorker.com/news/news-desk/the-takedown-of-a-dark-web-marketplace
Centraal Bureau voor de Statistiek [CBS] (2019) "Bezorgdheid over internetveiligheid maaktmensenalert." https://www.cbs.nl/nl-nl/nieuws/2019/44/bezorgdheid-over-internetveiligheid-maakt-mensen-alert
Centraal Bureau voor de Statistiek [CBS] (2020a) Veiligheidsmonitor 2019. CBS, Den Haag
Centraal Bureau voor de Statistiek [CBS] (2020b) "Ondervonden delicten; Persoonskenmerken." https://opendata.cbs.nl/#/CBS/nl/dataset/83096NED/table
Centraal Bureau voor de Statistiek [CBS] (2020c) "Bevolking: Kerncijfers." https://opendata.cbs.nl/statline/#/CBS/nl/dataset/37296NED/table?fromstatweb
Centrum voor Criminaliteitspreventie en Veiligheid (2021) "Halt biedt middelbare scholen les aan over cybercriminaliteit." https://hetccv.nl/nieuws/halt-biedt-middelbare-scholen-les-aan-over-cybercriminaliteit/
Chiu YN, Leclerc B (2017) An examination of sexual offenses against women by acquaintances: The utility of a script framework for prevention purposes. In: Leclerc B, Savona EU (eds) Crime prevention in the 21st century: Insightful approaches for crime prevention initiatives. Springer, Switzerland
Chiu YN, Leclerc B, Townsley M (2011) Crime script analysis of drug manufacturing in clandestine laboratories: Implications for prevention. Br J Criminol 51(2):355–374. https://doi.org/10.1093/bjc/azr005
Choi K, Lee J, Chun Y (2017) Voice phishing fraud and its modus operandi. Secur J 30(2):454–466. https://doi.org/10.1057/sj.2014.49
Clarke RV (1995) Situational crime prevention. Crime Justice 19:91-150. https://doi.org/10.1086/449230
Clarke RV (2017) Situational crime prevention. In: Wortley R, Townsley M (eds) Environmental criminology and crime analysis, 2nd edn. Routledge, Abingdon
Clarke RV, Cornish DB (1985) Modeling offenders’ decisions: A framework for research and policy. Crime Justice 6:147–185. https://doi.org/10.1086/449106
Collier B, Thomas DR, Clayton R, Hutchings A (2019) Booting the booters: Evaluating the effects of police interventions in the market for denial-of-service attacks. In Proceedings of the Internet Measurement Conference (pp. 50–64). Presented at the IMC ’19: ACM Internet Measurement Conference, Amsterdam Netherlands: ACM. https://doi.org/10.1145/3355369.3355592
Cornish D (1994) The procedural analysis of offending and its relevance for situational prevention. In: Clarke RV (ed) Crime Prevention Studies. Criminal Justice Press, Monsey
Cornish DB, Clarke RV (2017) The rational choice perspective. In: Wortley R, Townsley M (eds) Environmental criminology and crime analysis, 2nd edn. Routledge, Abingdon
Court of Gelderland (June 8, 2021) "ECLI:NL:RBGEL:2021:2685." https://uitspraken.rechtspraak.nl/inziendocument?id=ECLI:NL:RBGEL:2021:2685
Court of Midden-Nederland (August 26, 2020a) "ECLI:NL:RBMNE:2020a:3467." https://uitspraken.rechtspraak.nl/inziendocument?id=ECLI:NL:RBMNE:2020:3467
Court of Midden-Nederland (November 19, 2020b) "ECLI:NL:RBMNE:2020b:5038." https://uitspraken.rechtspraak.nl/inziendocument?id=ECLI:NL:RBMNE:2020:5038
Court of Overijssel (April 30, 2019) "ECLI:NL:RBOVE:2019:1346." https://uitspraken.rechtspraak.nl/inziendocument?id=ECLI:NL:RBOVE:2019:1346
Court of The Hague (July 15, 2016) "ECLI:NL:RBDHA:2016:8097." https://uitspraken.rechtspraak.nl/inziendocument?id=ECLI:NL:RBDHA:2016:8097
Court of The Hague (June 29, 2020) "ECLI:NL:RBDHA:2020:5798." https://uitspraken.rechtspraak.nl/inziendocument?id=ECLI:NL:RBDHA:2020:5798
Court of Utrecht (March 30, 2012) "ECLI:NL:RBUTR:2012:BV9722." https://uitspraken.rechtspraak.nl/inziendocument?id=ECLI:NL:RBUTR:2012:BV9722
Dehghanniri H, Borrion H (2021) Crime scripting: A systematic review. Eur J Criminol 18(4):504–525. https://doi.org/10.1177/1477370819850943
Diesfeldt A (2016) De rechterlijke macht. In: Bolhuis MP, Schoenmakers YMM, Beijers WMEH (eds) Actoren in de strafrechtspleging, 3rd edn. Boom Criminologie, Den Haag
Europol (n.d.) "Money muling: Public awareness and prevention." https://www.europol.europa.eu/activities-services/public-awareness-and-prevention-guides/money-muling
Europol (2021) "Darkmarket: World's largest illegal dark web marketplace taken down." https://www.europol.europa.eu/media-press/newsroom/news/darkmarket-worlds-largest-illegal-dark-web-marketplace-taken-down
Felson M (2017) The routine activity approach. In: Wortley R, Townsley M (eds) Environmental criminology and crime analysis, 2nd edn. Routledge, Abingdon
Hartel PH, Junger M, Wieringa RJ (2010) Cyber-crime Science = Crime Science + Information Security (CTIT Technical Report Series; No. 10–34). Centre for Telematics and Information Technology (CTIT), Enschede
Holt TJ, Lampke E (2010) Exploring stolen data markets online: Products and market forces. Crim Justice Stud 23(1):33–50. https://doi.org/10.1080/14786011003634415
Hutchings A, Holt TJ (2015) A crime script analysis of the online stolen data market. Br J Criminol 55(3):596–614. https://doi.org/10.1093/bjc/azu106
Koenes R, Voskuil K (2017) "Politie neemt deel darkweb over: Honderden verdachten in beeld." Algemeen Dagblad. https://www.ad.nl/binnenland/politie-neemt-deel-darkweb-over-honderden-verdachten-in-beeld~ae77cb7f/
Kronenberg MJ, De Wilde B (2015) Grondtrekken van het Nederlandse strafrecht, 6th edn. Wolters Kluwer, Deventer
Kruisbergen EW, Roks RA, Kleemans ER (2019) Georganiseerde criminaliteit in Nederland: daders, verwevenheid en opsporing. Rapportage in het kader van de vijfde ronde van de Monitor Georganiseerde Criminaliteit. WODC, Den Haag
Lastdrager EEH (2014) Achieving a consensual definition of phishing based on a systematic review of the literature. Crime Sci 3(9):1–10. https://doi.org/10.1186/s40163-014-0009-y
Lavorgna A (2013) Transit crimes in the internet age: How new online criminal opportunities affect the organization of offline transit crimes (Doctoral dissertation, University of Trento, Italy) https://core.ac.uk/download/pdf/35317313.pdf
Lavorgna A (2014) Internet-mediated drug trafficking: towards a better understanding of new criminal dynamics. Trends Organ Crim 17:250–270. https://doi.org/10.1007/s12117-014-9226-8
Leclerc B (2017) Script analysis and the SCRIPT acronym. In: Leclerc B, Savona EU (eds) Crime prevention in the 21st century: Insightful approaches for crime prevention initiatives. Springer, Switzerland
Leukfeldt ER (2014) Cybercrime and social ties. Trends Organ Crime 17:231–249. https://doi.org/10.1007/s12117-014-9229-5
Leukfeldt ER, Kleemans, ER (2019) Cybercrime, money mules and situational crime prevention: Recruitment, motives and involvement mechanisms. In: Hufnagel S, Moiseienko A (eds) Criminal networks and law enforcement: Global perspectives on illegal enterprise, 1st edn. Routledge, New York
Leukfeldt R, Kleemans E, Stol W (2017) The use of online crime markets by cybercriminal networks: A view from within. Am Behav Sci 61(11):1387–1402. https://doi.org/10.1177/0002764217734267
Leung L (2015) Validity, reliability, and generalizability in qualitative research. J Family Med Prim Care 4(3):324–327. https://doi.org/10.4103/2249-4863.161306
Levi M, Maguire M (2004) Reducing and preventing organised crime: An evidence-based critique. Crime Law Soc Chang 41:397–469. https://doi.org/10.1023/B:CRIS.0000039600.88691.af
Liukku A (2021) "Politie jaagt op ‘geldezels’, maar biedt ook hulp: ‘De gevolgen zijn ingrijpend’." Algemeen Dagblad. https://www.ad.nl/rotterdam/politie-jaagt-op-geldezels-maar-biedt-ook-hulp-de-gevolgen-zijn-ingrijpend~a3285f2e/
McGuire M, Dowling S (2013a) Chapter 1: Cyber-dependent crimes. Home Office UK, London
McGuire M, Dowling S (2013b) Chapter 2: Cyber-enabled crimes. Home Office UK, London
Meijer PC, Verloop N, Beijaard D (2002) Multi-method triangulation in a qualitative study on teachers’ practical knowledge: An attempt to increase internal validity. Qual Quant 36:145–167. https://doi.org/10.1023/A:1014984232147
NU.nl (2021) "Autoriteiten halen marktplaats met miljoenen gestolen inloggegevens offline." NU.nl. https://www.nu.nl/tech/6138966/autoriteiten-halen-marktplaats-met-miljoenen-gestolen-inloggegevens-offline.html
Office for National Statistics [ONS] (2021) Crime in England and Wales: Year Ending June 2021. ONS, London
O’Hara AC, Ko RKL, Mazerolle L, Rimer JR (2020) Crime script analysis for adult image- based sexual abuse: A study of crime intervention points for retribution-style offenders. Crime Sci 9(26):1–26. https://doi.org/10.1186/s40163-020-00130-9
Police (2021a) Eerste vijfentwintig geldezels aangepakt. https://www.politie.nl/nieuws/2021/maart/29/07-eerste-25-geldezels-aangepakt.html
Police (2021b) Opnieuw 24 geldezels aangepakt. https://www.politie.nl/nieuws/2021b/april/22/07-opnieuw-24-geldezels-aangepakt.html
Raza MS, Zhan Q, Rubab S (2020) Role of money mules in money laundering and financial crimes a discussion through case studies. J Financ Crime 27(3):911–931. https://doi.org/10.1108/JFC-02-2020-0028
Smith MJ, Clarke RV (2012) Situational crime prevention: Classifying techniques using “good enough” theory. In: Farrington DP, Welsh BC (eds) The oxford handbook of crime prevention. Oxford University Press, New York
Soudijn MRJ, Zegers BCHT (2012) Cybercrime and virtual offender convergence settings. Trends Organ Crime 15:111–129. https://doi.org/10.1007/s12117-012-9159-z
Tompson L, Chainey S (2011) Profiling illegal waste activity: using crime scripts as a data collection and analytical strategy. Eur J Crim Policy Res 17:179–201. https://doi.org/10.1007/s10610-011-9146-y
Van Toor DAG (2018) Het dossier als fundament voor de rechterlijke beslissing. Tijdschrift Modernisering Strafvordering 2:1–29. https://doi.org/10.5553/PMSV/258950952018001010001
Weulen Kranenbarg M, Van der Wagen W (2020) Criminologische theorieën en cybercriminaliteit. In: Van der Wagen W, Oerlemans JJ, Weulen Kranenbarg M (eds) Basisboek cybercriminaliteit. Boom criminologie, Den Haag
Author information
Authors and Affiliations
Contributions
All authors made a substantial contribution to the study conception and design. Data collection was performed by Joeri Loggen as part of his master thesis at VU University Amsterdam. Data analysis was done by Joeri Loggen under the supervision of Rutger Leukfeldt. Rutger Leukfeldt was responsible for writing the first draft of this manuscript. Both authors made revisions, and read and approved the final manuscript.
Corresponding author
Ethics declarations
Conflict of interest
The authors have no competing interests to declare that are relevant to the content of this article.
Ethical approval
This article does not contain any studies with human participants performed by any of the authors.
Additional information
Publisher's note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Rights and permissions
About this article
Cite this article
Loggen, J., Leukfeldt, R. Unraveling the crime scripts of phishing networks: an analysis of 45 court cases in the Netherlands. Trends Organ Crim 25, 205–225 (2022). https://doi.org/10.1007/s12117-022-09448-z
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s12117-022-09448-z