“Account suspension. Verify now”: using systemic-functional linguistics to improve phishing text advisories for vulnerable groups

Digital scams are a reality of a connected society, and vulnerable populations, particularly the elderly and individuals from non-English speaking (NESB) backgrounds, face significant risks. These groups often struggle to recognise scam tactics due to technological and language barriers, rendering them susceptible to cyberfraud victimisation. By comparing 106 phishing text messages in Australia with legitimate text messages sent by frequently imitated organisations, this exploratory study examined the threat of phishing text messages, which account for substantial financial losses and reduced wellbeing globally. Through an analysis applying systemic-functional linguistics (SFL), the study identified linguistic features grounded in social engineering techniques that manipulate phishing recipients. Results of the analysis showed that different clause types; time, location, and manner markers; high modality; and conjunctive use, were influential in creating urgency and authority, and are likely to manipulate phishing recipients through emotional and cognitive pressure. Many current advisory resources offer generalised advice and explanations of scam tactics, yet fail to include concrete examples of such communications. By aligning linguistic analysis with human behavioural constructs and public policy, the results of this study have implications for the protection of vulnerable community groups from growing cyber threats through enhancing advisory content, and by developing automated scam detection systems.