ScamsNOW!

The SCARS Institute Magazine about Scam Victims-Survivors, Scams, Fraud & Cybercrime

2025 SCARS Institute 11 Years of Service

The Subtle Sabotage Of Blame In Cybersecurity & Online Safety

By Tim McGuinness, Ph.D. – Anthropologist, Scientist, Director of the Society of Citizens Against Relationship Scams Inc.

Blame in Cybersecurity & Online Safety is Rampant!

We all do it, we all blame someone for something.

Sometimes blame is justified, sometimes there is cause, and it is very hard to remove it from your vocabulary – but it is always destructive.

I recently heard a cybersecurity training professional tell a story about motivating a corporate team to do better with cybersecurity. It was something to the effect that they needed to learn the material because “You don’t want to be the one that lets a breach happen!” That is blame!

Now think about that for a moment, about blame and let those words sink in. That is not motivation, it is blame – blaming in advance! Letting those people know that there will be blame in the event of a mistake or an incident. What would be your reaction if someone said that to you?

Yet, if we are honest, that is the way most of us talk to our children or were talked to by our parents too. This is where we learn our blaming approach to life – it starts as children – being told that we will be to blame if we do something wrong. It wires itself into our brain and without even realizing it we perpetuate it for the rest of our life – in our personal life, with our family and friends, and in the workplace.

When you try to help traumatized people recover from deep manipulative cyber-enabled crime you begin to develop an understanding of how blaming language can affect them, and how you have to modify the tonality of your language to help them.

As we [SCARS www.AgainstScams.org] have more fully explored the trauma of victims, we realized that overcoming blame was not limited only to victims. In fact, it appears that “Pre-Blame” is one of the contributors to the self-blame and shame that victims of cybercrime feel after the event.

Almost everyone who experiences a cybercrime – especially those based upon social engineering and manipulation – experiences some shame after the event. This shame will prevent the victim from reporting the crime, fully accepting it, and prevent them from sharing the experience with friends, family, or co-workers. This sense of shame even appears to increase the longer it is maintained. That is to say, the longer the secret is kept the harder it is to tell it.

When looking at this problem of “Pre-Blame” or “Set-up Blame” in the corporate context we see this tendency to try to reinforce the importance of cybersecurity by setting up a sense of dread in the team members so that they will “stay on their toes.” Except that, we see that it has the opposite effect. That sense of dread not only creates fear of making a mistake which can inhibit critical, logical, and solution-oriented thinking that would make it difficult for someone to mitigate an incident but can cause paralysis after the realization that it was their fault.

As we teach – there are THREE STAGES in a cyberattack or cybercrime:

  1. The Attack – the actions that create or exploit a vulnerability – either of a system or a human. These are the actions perpetrated by the attacker.
  2. The Defense – the critical actions that need to be taken to stop an attack and mitigate its immediate impact.
  3. The Recovery – this is actually the step most overlooked in the cybersecurity profession and by victims themselves. It deals with the postmortem of the attack but also helps humans to understand their roles without blame and to recover from the inevitable trauma that came from that experience.

Trauma is an inevitable part of the cybercrime experience just like it is in any form of violence – and make no mistake – cybercrime is violence – no doubt about it. As Interpol says “Online Crime Is Real Crime!”

Yet, so often in the corporate or family context, we set up the blame in advance, and when the incident occurs we already know who and how to blame like a coiled snake ready to leap. The impact of this is not just a sense of guilt or shame by the individual involved, even if it was a mistake that anyone would make, but it also sabotages the recovery after the incident and sabotages the further hardening of the environment that will be necessary for everyone’s future security.

Consider that when you set up your teams with an advanced understanding that there will be blame, the following occurs:

  • Everyone develops a sense of dread, in some cases, it can almost become a phobia about using technology – the fear that they will break something.
  • The team will be less likely to work together on problems for fear that someone else will discover how little they know (or they think).
  • In the event of an incident, people are reluctant to ask for help that could reduce the impact.
  • If an event does occur the team members will be more likely to cover up the incident and not ask for help to prevent future attacks because they expect to be blamed.
  • Each team member believes that when it hits the fan they are on their own.

This is not a hypothesis, this is how humans are wired.

When people believe they are at fault they will blame themselves and the same negative effects will still apply. In studying this phenomenon we have found that most victims will not recover from this. About a third will develop various forms of denial. Another third will express their self-blame or shame through anger or aggression. We find that only about one-third are sufficiently realists to accept that the event happened and can work through the trauma and let go of the blame or shame associated with it.

The result is certainly not something that any organization wants to instill in their teams or wants to be sustained after an incident. And the irony is that much of it is self-created by the simple way that trainers and managers use blame to try to motivate their people instead of developing the essential cooperation that defends and repels attacks, and more importantly, since all defenses will ultimately fail, to develop the recovery processes and mindset that get everyone back working as a team.

Almost every organization understands the impact on their workforce when there is violence affecting their team – HR departments know how to refer to or bring in trauma counselors when there is an assault, domestic abuse, harassment, etc. But cybercrimes also leave people traumatized, especially if it was a person’s own mistake that caused it or they believe it was their fault.

A recent trend around the world is to even litigate against an employee that makes a mistake. Imagine the pressure that everyone is under when that is on the table. Especially when the fact is that everyone makes mistakes, every security fails, and even the best training overlooks something.

Cybercriminals are smarter than your team. They will get through, count on it.

But how you come out the other side is a direct function of how you prepare your team to be motivated to act and how you support them after an incident. Get that wrong, spread the blame around, and you will remain broken.

ARTICLE RATING

0
(0)

TABLE OF CONTENTS

META

Categories: UncategorizedViews: 546

CATEGORIES

MOST POPULAR COMMENTED ARTICLES

POPULAR ARTICLES

U.S. & Canada Suicide Lifeline 988

WHAT PEOPLE ARE TALKING ABOUT
LATEST SITE COMMENTS

See Comments for this Article at the Bottom of the Page

Important Information for New Scam Victims

Please visit www.ScamVictimsSupport.org – a SCARS Website for New Scam Victims & Sextortion Victims
SCARS Institute now offers a free recovery program at www.SCARSeducation.org
Please visit www.ScamPsychology.org – to more fully understand the psychological concepts involved in scams and scam victim recovery

If you are looking for local trauma counselors, please visit counseling.AgainstScams.org

If you need to speak with someone now, you can dial 988 or find phone numbers for crisis hotlines all around the world here: www.opencounseling.com/suicide-hotlines

Statement About Victim Blaming

Some of our articles discuss various aspects of victims. This is both about better understanding victims (the science of victimology) and their behaviors and psychology. This helps us to educate victims/survivors about why these crimes happened and not to blame themselves, better develop recovery programs, and help victims avoid scams in the future. At times, this may sound like blaming the victim, but it does not blame scam victims; we are simply explaining the hows and whys of the experience victims have.

These articles, about the Psychology of Scams or Victim Psychology – meaning that all humans have psychological or cognitive characteristics in common that can either be exploited or work against us – help us all to understand the unique challenges victims face before, during, and after scams, fraud, or cybercrimes. These sometimes talk about some of the vulnerabilities the scammers exploit. Victims rarely have control of them or are even aware of them, until something like a scam happens, and then they can learn how their mind works and how to overcome these mechanisms.

Articles like these help victims and others understand these processes and how to help prevent them from being exploited again or to help them recover more easily by understanding their post-scam behaviors. Learn more about the Psychology of Scams at www.ScamPsychology.org

SCARS INSTITUTE RESOURCES:

IF YOU HAVE BEEN VICTIMIZED BY A SCAM OR CYBERCRIME

♦ If you are a victim of scams, go to www.ScamVictimsSupport.org for real knowledge and help

♦ Enroll in SCARS Scam Survivor’s School now at www.SCARSeducation.org

♦ To report criminals, visit https://reporting.AgainstScams.org – we will NEVER give your data to money recovery companies like some do!

♦ Sign up for our free support & recovery help by https://support.AgainstScams.org

♦ Join our WhatsApp Chat Group at: https://chat.whatsapp.com/BPDSYlkdHBbDBg8gfTGb02

♦ Follow us on X: https://x.com/RomanceScamsNow

♦ Follow us and find our podcasts, webinars, and helpful videos on YouTube: https://www.youtube.com/@RomancescamsNowcom

♦ SCARS Institute Songs for Victim-Survivors: https://www.youtube.com/playlist…

♦ See SCARS Institute Scam Victim Self-Help Books at https://shop.AgainstScams.org

♦ Learn about the Psychology of Scams at www.ScamPsychology.org

♦ Dig deeper into the reality of scams, fraud, and cybercrime at www.ScamsNOW.com and www.RomanceScamsNOW.com

♦ Scam Survivor’s Stories: www.ScamSurvivorStories.org

♦ For Scam Victim Advocates visit www.ScamVictimsAdvocates.org

♦ See more scammer photos on www.ScammerPhotos.com

You can also find the SCARS Institute on Facebook, Instagram, X, LinkedIn, and TruthSocial

Psychology Disclaimer:

All articles about psychology and the human brain on this website are for information & education only

The information provided in this and other SCARS articles are intended for educational and self-help purposes only and should not be construed as a substitute for professional therapy or counseling.

Note about Mindfulness: Mindfulness practices have the potential to create psychological distress for some individuals. Please consult a mental health professional or experienced meditation instructor for guidance should you encounter difficulties.

While any self-help techniques outlined herein may be beneficial for scam victims seeking to recover from their experience and move towards recovery, it is important to consult with a qualified mental health professional before initiating any course of action. Each individual’s experience and needs are unique, and what works for one person may not be suitable for another.

Additionally, any approach may not be appropriate for individuals with certain pre-existing mental health conditions or trauma histories. It is advisable to seek guidance from a licensed therapist or counselor who can provide personalized support, guidance, and treatment tailored to your specific needs.

If you are experiencing significant distress or emotional difficulties related to a scam or other traumatic event, please consult your doctor or mental health provider for appropriate care and support.

Also read our SCARS Institute Statement about Professional Care for Scam Victims – click here

If you are in crisis, feeling desperate, or in despair, please call 988 or your local crisis hotline.

A Question of Trust

At the SCARS Institute, we invite you to do your own research on the topics we speak about and publish. Our team investigates the subject being discussed, especially when it comes to understanding the scam victims-survivors’ experience. You can do Google searches, but in many cases, you will have to wade through scientific papers and studies. However, remember that biases and perspectives matter and influence the outcome. Regardless, we encourage you to explore these topics as thoroughly as you can for your own awareness.

Leave A Comment

Your comments help the SCARS Institute better understand all scam victim/survivor experiences and improve our services and processes. Thank you

Thank you for your comment. You may receive an email to follow up. We never share your data with marketers.