A Cybersecurity Framework for Mitigating Online Identity Theft and Phishing Among Youth in Westlands Constituency, Nairobi County

Abstract

The increasing use of digital technologies in communication, education, financial transactions, and social interaction has heightened exposure to cyber threats, particularly online identity theft and phishing. Youth are among the most vulnerable groups due to their extensive engagement with digital platforms and limited cybersecurity preparedness. This study examined the influence of technology adoption, cybersecurity education, and policy awareness on the mitigation of online identity theft and phishing among youth in Westlands Constituency, Nairobi County, Kenya. The study was guided by Routine Activity Theory, Protection Motivation Theory, the Health Belief Model, and Institutional Theory. A mixed-methods descriptive correlational research design was employed. Primary data were collected from 338 youth respondents using structured questionnaires, complemented by qualitative responses and document review. Quantitative data were analyzed using descriptive statistics, Pearson correlation analysis, and multiple regression analysis, while qualitative data were analyzed thematically. The findings revealed that technology adoption, cybersecurity education, and policy awareness all have positive and statistically significant influences on the mitigation of online identity theft and phishing. Cybersecurity education emerged as the strongest predictor, indicating that increased knowledge and awareness significantly enhance individuals’ ability to identify and respond to cyber threats. Technology adoption contributed to mitigation through the use of cybersecurity tools and protective practices, while policy awareness positively influenced cybersecurity behavior, although its effect was comparatively weaker due to limited awareness and institutional trust. The study concludes that effective mitigation of online identity theft and phishing requires an integrated approach that combines cybersecurity education, technology adoption, and policy awareness. The study contributes to cybersecurity knowledge by proposing an integrated framework for strengthening cybersecurity resilience among youth in digitally connected environments.