Sleep Loss Increases Susceptibility to Online Phishing Scams
Losing just one hour of sleep significantly raises the likelihood of falling for cyberattacks.
1Sleep Deprivation and Vulnerability
A recent study from the University of California, Irvine, reveals that losing just one hour of sleep can increase the risk of falling for online scams by over 10 percent. Published in the Proceedings of the National Academy of Sciences, the research highlights how minor sleep disruptions immediately impair human decision-making processes.
2Analyzing Phishing Click Rates
Researchers partnered with a large corporation to monitor 11,000 employees during cybersecurity awareness campaigns. By tracking responses to simulated phishing emails, the team compared click rates before and after the Daylight Saving Time transition. This controlled environment allowed scientists to isolate the specific impact of a single hour of lost rest.
3Quantifiable Risk Increase
Data showed that employees clicked on malicious phishing links at a rate of 15.5 percent before the time change. Following the loss of one hour of sleep, this figure rose to 17.7 percent. This shift represents a 13 percent increase in vulnerability, demonstrating that even minimal rest deficits carry measurable security consequences.
4Impulsive Decision Mechanisms
Neurobiologist Eitan Schechtman explains that sleep loss leads to impulsive choices, often without the individual realizing their judgment is compromised. While the study focused on cybersecurity, the researchers suggest that these cognitive impairments likely affect various daily decisions. Prioritizing rest is therefore essential for maintaining better cognitive control and situational awareness.
5Rising Cybercrime Trends
The urgency of this research is underscored by the rapid growth of cybercrime in the United States. The FBI’s Internet Crime Complaint Center reported over one million complaints in 2025, marking a 25 percent increase compared to five years ago. As digital threats escalate, understanding human factors in security becomes increasingly critical.
6Broader Implications for Awareness
Schechtman advocates for employers and cybersecurity firms to consider sleep-depriving events when planning awareness campaigns. Factors such as holidays, primetime sporting events, and Daylight Saving Time should be viewed as periods of heightened risk. Integrating sleep health into organizational security strategies could help mitigate the rising tide of successful phishing attacks.
7Contextualizing Minor Sleep Loss
The study uses the Daylight Saving Time transition as a proxy for the chronic, minor sleep loss many individuals experience daily. By demonstrating that even small deficits impact security, the findings suggest that the cumulative effect of poor sleep habits may be far more damaging to personal safety than previously understood by experts.
8Future Security Recommendations
While staying updated on con artist tactics remains vital, the research emphasizes that biological factors play a significant role in susceptibility. Protecting oneself requires a dual approach: maintaining vigilance against evolving phishing strategies and ensuring adequate sleep to support sound decision-making. Better sleep likely leads to better, more secure daily choices.
Original article: Popular Science — Sleep Loss Increases Susceptibility to Online Phishing Scams