A growing number of Americans appear to be overestimating their ability to stay safe online, raising concerns about how effectively people can identify and avoid increasingly sophisticated cyber threats. A study conducted by cybersecurity company NordVPN in August and released during Cybersecurity Awareness Month in October highlights a significant gap between users’ confidence in their online safety and their actual ability to recognize potential dangers. Cybersecurity experts are urging internet users to adopt safer digital habits and make informed decisions whenever they browse the internet.
“In general, people go with an assumption that one tactic works for all situations. But this is wrong, as the user needs to make the right decision every single time,” said Marijus Bredis, Chief Technology Officer at NordVPN.
Bredis emphasized that traditional cybersecurity tools continue to play an important role in reducing online risks. However, as cybercriminals develop more advanced techniques, particularly those powered by artificial intelligence (AI), relying solely on familiarity, intuition, and personal judgment can leave users vulnerable. Modern scams are increasingly designed to appear convincing, making it difficult for even experienced internet users to distinguish legitimate communications from fraudulent ones.
According to the NordVPN survey, 71% of online users in the United States believe that common sense is sufficient to protect them from cyber threats. Furthermore, 45% of respondents said they could easily distinguish a genuine email, website, or message from a fake one. While these findings suggest that many Americans feel confident about their ability to identify online risks, practical testing revealed a different picture.
When participants were asked to distinguish legitimate website addresses from those created for phishing attacks, most struggled to identify the difference. Phishing is a common cybercrime technique in which attackers impersonate trusted organizations, businesses, or individuals to trick people into revealing sensitive information, clicking malicious links, or downloading harmful files. Such attacks can lead to financial losses, identity theft, and unauthorized access to personal or professional accounts.
The study also found that nearly one in three Americans believe they remain safe online because they avoid malicious websites. Meanwhile, 30% of respondents said they trusted their devices to protect them from cyber threats. Although avoiding suspicious websites and using secure devices are sensible precautions, neither approach guarantees complete protection against cyberattacks. Fraudulent links can arrive through emails, text messages, social media platforms, and seemingly legitimate advertisements. Even well-protected devices can be exposed to risks when users fall victim to deceptive messages or fail to install security updates.
These findings underline the importance of combining awareness with practical cybersecurity measures. Internet users should carefully examine website addresses, verify unexpected requests for personal or financial information, use strong and unique passwords, enable multi-factor authentication, and keep their software updated. Password managers, reputable security tools, and secure browsing practices can provide additional layers of protection.
As AI continues to make digital fraud more sophisticated, online safety requires more than confidence or common sense alone. Developing consistent security habits and verifying information before acting can help users reduce their exposure to cyber threats. Ultimately, staying safe online depends not on assuming that scams are easy to recognize, but on remaining cautious, informed, and prepared to question what appears trustworthy.
Join our LinkedIn group Information Security Community!
