## 3 Methods
### Measures
#### 3.2.2 Sextortion Susceptibility Survey  
The SSS is a self-report questionnaire generated by the researchers based on a database of previous cyber sextortion attacks via email perpetrated by cyber criminals. This was used in the current study to investigate the effect of paying attention to specific design cues within cyber sextortion emails on participants' likelihood of responding to cyber sextortion emails, and hence being susceptible to cyber sextortion attacks. The specific design cues measured in the SSS included email source, grammar and spelling, urgency cues, and title/subject line--design cues that had been previously identified as influencing susceptibility to social engineering attacks such as phishing emails. The SSS consisted of 20 questions divided into two parts. The first part consisted of eight identical questions, with each question asking the respondent how likely they were to respond to the accompanying email. Accompanying each question was an example of a cyber sextortion email, and a 4-point Likert scale on which respondents could record their response to each question (1 = Very Unlikely, 2 = Unlikely, 3 = Likely, and 4 = Very Likely). All examples of cyber sextortion emails were predesigned by the researchers, although the content of the emails was based on real cyber sextortion emails employed by cyber criminals. This approach to using real cyber sextortion emails is in line with previous research on phishing (e.g., [PERSON] & [PERSON], 2019) where real phishing emails were used to measure participants' level of susceptibility. Other than the content of the email, the information in the sender line, and the information in the title/subject line, all emails were kept identical in color and layout to avoid adding any confounding variables. Respondents were not asked to pay attention to any specific design cues within the cyber sextortion emails in the first part of the SSS. This was done deliberately so as not to prime respondents \begin{table}
\begin{tabular}{l c c} \hline \hline
**Question** & **Yes** & **No** \\ \hline Have you had any cybersecurity education or training? & 29 (34\%) & 57 (66\%) \\ \hline Have you had any experiences with phishing or scan emails? & 70 (81\%) & 16 (19\%) \\ \hline Have you ever experienced a sextortion scan (an email scan that attempts to obtain something by making threats that involve sexual content)? & 20 (23\%) & 66 (77\%) \\ \hline Have you ever experienced any form of cyber bullying or harassment? & 41 (48\%) & 45 (52\%) \\ \hline \hline \end{tabular} Note. Percentages are rounded to the nearest percentage.  
\end{table} 
Table 1: Participant responses to demographic questions. to the design cues on which they would later be instructed to focus their attention in the second part of the SSS. By not specifying where respondents should focus their attention, a measure could be made of how likely they were to respond to cyber sextortion emails irrespective of where in the emails they focused their attention. The second part consisted of 12 questions and was subdivided into four sections with each section consisting of three questions. Each section addressed one of the four email design cues. The first section addressed source address, the second section addressed grammar and spelling, the third section addressed urgency cues, and the fourth section addressed title/subject line. For each section, all three questions were identical, asking respondents how likely they were to respond to the accompanying email while paying particular attention to the design cue associated with that section.