“Account suspension. Verify now”: using systemic-functional linguistics to improve phishing text advisories for vulnerable groups

Abstract Digital scams are a reality of a connected society, and vulnerable populations, particularly the elderly and individuals from non-English speaking (NESB) backgrounds, face significant risks. These groups often struggle to recognise scam tactics due to technological and language barriers, rendering them susceptible to cyberfraud victimisation. By comparing 106 phishing text messages in Australia with legitimate text messages sent by frequently imitated organisations, this study examined the threat of phishing text messages, which account for substantial financial losses and reduced wellbeing globally. Using systemic-functional linguistics (SFL), a framework that ties language choices to context and function, specific linguistic features that manipulate receivers of phishing messages were identified. Results of the analysis showed that different clause types; time, location, and manner markers; high modality; and conjunctive use, were influential in creating urgency and authority, and eliciting emotional responses to phishing messages. Many current advisory resources offer generalised advice and explanations of scam tactics, yet fail to include concrete examples of such communications. By aligning linguistic analysis with human behavioural constructs and public policy, the results of this study have implications for the protection of vulnerable community groups from growing cyber threats through enhancing advisory content, and by developing automated scam detection systems.