Sleep Loss Increases Vulnerability to Online Phishing Scams
Losing just one hour of sleep significantly raises the likelihood of falling for cyberattacks.
1Sleep Loss and Vulnerability
A recent study published in the Proceedings of the National Academy of Sciences reveals that losing just one hour of sleep can increase susceptibility to online scams by over 10 percent. Neurobiologists at the University of California, Irvine, argue that even minor sleep disruptions lead to impulsive choices that compromise personal cybersecurity.
2Rising Cybercrime Trends
Cybercrimes are increasing exponentially across the United States, with the FBI’s Internet Crime Complaint Center recording over one million reports in 2025. This figure represents a nearly 25 percent increase compared to data from five years ago, highlighting the growing necessity for robust personal cybersecurity strategies and awareness of con artist tactics.
3Phishing Simulation Methodology
Researchers partnered with a large, unnamed company to analyze 11,000 employees during a cybersecurity awareness campaign. The IT department sent emails imitating phishing attempts multiple times a year. Scientists tracked how many workers clicked on these fake malicious links before and after the transition to Daylight Saving Time to measure behavioral changes.
4Quantifying the Risk Increase
Data showed that employees clicked on phishing links approximately 15.5 percent of the time on the Monday prior to the Daylight Saving Time shift. Following the loss of one hour of sleep, that rate rose to 17.7 percent, marking a 13 percent increase in potential victims due to the minor sleep disruption.
5Broader Decision-Making Impacts
Neurobiologist Eitan Schechtman notes that these findings offer insight into the effects of minor sleep loss, which is comparable to the daily sleep deprivation many individuals experience. While the study focused on cybersecurity, researchers believe that many day-to-day decisions are likely compromised in similar ways due to the lack of adequate rest.
6Recommendations for Employers
Schechtman suggests that employers and cybersecurity firms should account for sleep-depriving events when advising the public on phishing awareness. Factors such as Daylight Saving Time, holidays, and major sporting events can influence employee alertness. Integrating these considerations into corporate training could help mitigate risks associated with human error and impulsive decision-making.
7Prioritizing Rest for Safety
The research emphasizes that better sleep likely leads to better decision-making capabilities. Even individuals who suffer from chronic sleep issues are encouraged to prioritize their rest as much as possible to protect themselves from digital threats. Maintaining a consistent sleep schedule remains a fundamental strategy for enhancing overall cognitive function and security.
8Future Research Directions
The study highlights the immediate consequences of sleep loss on human behavior in digital environments. Future investigations may explore how different levels of sleep deprivation affect various types of cognitive tasks beyond phishing susceptibility. Understanding these mechanisms is essential for developing comprehensive strategies to protect individuals from evolving online threats and scams.
Original article: Popular Science — Sleep Loss Increases Vulnerability to Online Phishing Scams