Report by KnowBe4
Security Approaches Around the Globe: The Confidence Gap
Key Findings
65% of employees believe they can confidently identify deepfake scams.
11% of employees have fallen for vishing.
83% of employees believe they can confidently identify vishing attacks.
1 in 10 employees still hesitate to report security concerns due to fear or uncertainty.
24% of employees have fallen for phishing attacks.
Nearly half of employees have fallen for scams.
83% of employees believe they can confidently identify social media phishing.
9% of employees have fallen for social engineering.
12% of employees have been tricked by deepfake scams.
71% of American employees feel very comfortable reporting security issues.
31% of employees still hesitate to report security concerns because they find it too difficult.
20% of employees still hesitate to report security concerns because they didn't want to bother the security team.
31% of IT teams take more than 5 hours to respond to a security issue.
38% of employees still hesitate to report security concerns because they don't know how.
67% of employees believe they can confidently identify social engineering attacks.
12% of employees have fallen for deepfake scams.
11% of employees have fallen for smishing.
68% of South African employees reported falling for scams—the highest victimization rate.
86% of employees believe they can confidently identify phishing emails.
56% of employees feel "very comfortable" reporting security concerns.
82% of employees believe they can confidently identify smishing.
17% of employees have fallen for social media scams.