Beyond awareness: A conceptual framework of cybercrime self-protection based on TPB and self-efficacy theory

Abstract

The rapid increase in internet penetration in Malaysia has heightened exposure to cybercrime, particularly the Macau Scam, despite ongoing government efforts in legal enforcement and awareness campaigns. While past research has largely emphasised technical and regulatory responses, it has given limited attention to the psychological and behavioural determinants of self-protection. Addressing this gap, this conceptual paper develops a framework that integrates the Theory of Planned Behaviour (TPB) with Self-Efficacy Theory to explain Malaysians’ intention to adopt self-protective measures against cybercrime. The proposed framework examines how attitude, subjective norms, and perceived behavioural control interact with self-efficacy to shape individual confidence and willingness to engage in protective behaviours. The integration of self-efficacy offers an important extension to TPB, providing deeper insights into how personal belief and perceived capability influence cybersecurity actions. This combination is particularly relevant in the Malaysian collectivist context, where social influence and perceived competence strongly affect behavioural outcomes. Theoretically, this study extends TPB with self-efficacy, thereby enhancing its explanatory power in cybersecurity behaviour research. In practice, the framework informs policymakers, educators, and law enforcement in designing user-centred strategies that move beyond technical safeguards towards cultivating proactive, self-reliant citizens. By emphasising behavioural empowerment, this study highlights pathways to strengthen Malaysia’s national cyber resilience.