{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,14]],"date-time":"2026-05-14T18:14:12Z","timestamp":1778782452558,"version":"3.51.4"},"reference-count":114,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2027,2,13]],"date-time":"2027-02-13T00:00:00Z","timestamp":1802476800000},"content-version":"am","delay-in-days":257,"URL":"http:\/\/www.elsevier.com\/open-access\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2028734"],"award-info":[{"award-number":["2028734"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Expert Systems with Applications"],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1016\/j.eswa.2026.131507","type":"journal-article","created":{"date-parts":[[2026,2,7]],"date-time":"2026-02-07T15:58:19Z","timestamp":1770479899000},"page":"131507","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Psychology of phishing emails: Quantifying persuasion principles and simulating detection with large language models"],"prefix":"10.1016","volume":"313","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2089-2280","authenticated-orcid":false,"given":"Tianyu Bell","family":"Pan","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1365-3209","authenticated-orcid":false,"given":"Qiangeng","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-0449-2046","authenticated-orcid":false,"given":"Alexa","family":"Jordyn Cole","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6169-434X","authenticated-orcid":false,"given":"Ronald","family":"Wilson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0471-177X","authenticated-orcid":false,"given":"Damon","family":"L Woodard","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/j.eswa.2026.131507_bib0001","doi-asserted-by":"crossref","first-page":"44928","DOI":"10.1109\/ACCESS.2021.3066383","article-title":"Phishing happens beyond technology: The effects of human behaviors and demographics on each step of a phishing process","volume":"9","author":"Abroshan","year":"2021","journal-title":"IEEE Access"},{"key":"10.1016\/j.eswa.2026.131507_bib0002","series-title":"Human aspects of information security and assurance","first-page":"324","article-title":"Content analysis of persuasion principles in mobile instant message phishing","author":"Ahmad","year":"2023"},{"key":"10.1016\/j.eswa.2026.131507_bib0003","series-title":"2018 International conference on frontiers of information technology (FIT)","first-page":"293","article-title":"Lexicon and heuristics based approach for identification of emotion in text","author":"Akram","year":"2018"},{"key":"10.1016\/j.eswa.2026.131507_bib0004","doi-asserted-by":"crossref","DOI":"10.3389\/fcomp.2021.563060","article-title":"Phishing attacks: A recent comprehensive study and a new anatomy","volume":"3","author":"Alkhalil","year":"2021","journal-title":"Frontiers in Computer Science"},{"key":"10.1016\/j.eswa.2026.131507_bib0005","series-title":"Language education in digital spaces: Perspectives on autonomy and interaction","first-page":"201","article-title":"Apps for informal autonomous language learning: An autoethnography","author":"Alm","year":"2021"},{"key":"10.1016\/j.eswa.2026.131507_bib0006","doi-asserted-by":"crossref","DOI":"10.1016\/j.artint.2024.104145","article-title":"Exploring the psychology of LLMs\u2019 moral and legal reasoning","volume":"333","author":"Almeida","year":"2024","journal-title":"Artificial Intelligence"},{"key":"10.1016\/j.eswa.2026.131507_bib0007","series-title":"Proceedings 2016 workshop on usable security","article-title":"Auntietuna: Personalized content-based phishing detection","author":"Ardi","year":"2016"},{"key":"10.1016\/j.eswa.2026.131507_bib0008","doi-asserted-by":"crossref","first-page":"133","DOI":"10.1016\/j.patrec.2016.12.009","article-title":"Lexicon based feature extraction for emotion text classification","volume":"93","author":"Bandhakavi","year":"2016","journal-title":"Pattern Recognition Letters"},{"issue":"3","key":"10.1016\/j.eswa.2026.131507_bib0009","doi-asserted-by":"crossref","first-page":"287","DOI":"10.1017\/S0140525X07001963","article-title":"Base-rate respect: From statistical formats to cognitive structures","volume":"30","author":"Barbey","year":"2007","journal-title":"Behavioral and Brain Sciences"},{"key":"10.1016\/j.eswa.2026.131507_bib0010","doi-asserted-by":"crossref","DOI":"10.3389\/fcomm.2024.1457433","article-title":"Decoding persuasion: A survey on ML and NLP methods for the study of online persuasion","volume":"9","author":"Bassi","year":"2024","journal-title":"Frontiers in Communication"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0011","doi-asserted-by":"crossref","first-page":"63","DOI":"10.1108\/ICS-02-2021-0021","article-title":"Response to a phishing attack: Persuasion and protection motivation in an organizational context","volume":"30","author":"Bayl-Smith","year":"2021","journal-title":"Information & Computer Security"},{"issue":"4","key":"10.1016\/j.eswa.2026.131507_bib0012","doi-asserted-by":"crossref","first-page":"329","DOI":"10.1177\/10597123231206604","article-title":"Dual process theory for large language models: An overview of using psychology to address hallucination and reliability issues","volume":"32","author":"Bellini-Leite","year":"2024","journal-title":"Adaptive Behavior"},{"key":"10.1016\/j.eswa.2026.131507_bib0013","series-title":"Psychological reactance: A theory of freedom and control","author":"Brehm","year":"2013"},{"key":"10.1016\/j.eswa.2026.131507_bib0014","doi-asserted-by":"crossref","DOI":"10.1016\/j.jnca.2024.103964","article-title":"Uncovering phishing attacks using principles of persuasion analysis","volume":"230","author":"Bustio-Mart\u00ednez","year":"2024","journal-title":"Journal of Network and Computer Applications"},{"issue":"7","key":"10.1016\/j.eswa.2026.131507_bib0015","doi-asserted-by":"crossref","first-page":"1101","DOI":"10.1002\/mar.21496","article-title":"The role of brand in overcoming consumer resistance to autonomous vehicles","volume":"38","author":"Casidy","year":"2021","journal-title":"Psychology & Marketing"},{"key":"10.1016\/j.eswa.2026.131507_bib0016","series-title":"Social influence","first-page":"3","article-title":"The heuristic model of persuasion","author":"Chaiken","year":"2014"},{"key":"10.1016\/j.eswa.2026.131507_bib0017","series-title":"2024 12th International symposium on digital forensics and security (ISDFS)","first-page":"1","article-title":"Why phishing emails escape detection: A closer look at the failure points","author":"Champa","year":"2024"},{"key":"10.1016\/j.eswa.2026.131507_bib0018","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103858","article-title":"Driving behaviour change with cybersecurity awareness","volume":"142","author":"Chaudhary","year":"2024","journal-title":"Computers & Security"},{"key":"10.1016\/j.eswa.2026.131507_bib0019","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103780","article-title":"The anatomy of deception: Measuring technical and human factors of a large-scale phishing campaign","volume":"140","author":"Chrysanthou","year":"2024","journal-title":"Computers & Security"},{"key":"10.1016\/j.eswa.2026.131507_bib0020","series-title":"Influence: Science and practice","first-page":"51","volume":"(vol.4","author":"Cialdini","year":"2009"},{"issue":"10","key":"10.1016\/j.eswa.2026.131507_bib0021","doi-asserted-by":"crossref","first-page":"1242","DOI":"10.1177\/0146167299258006","article-title":"Compliance with a request in two cultures: The differential influence of social proof and commitment\/consistency on collectivists and individualists","volume":"25","author":"Cialdini","year":"1999","journal-title":"Personality and Social Psychology Bulletin"},{"key":"10.1016\/j.eswa.2026.131507_bib0022","doi-asserted-by":"crossref","DOI":"10.1016\/j.chb.2025.108734","article-title":"Uncovering vulnerability to fraud and scams among adult victims in online and offline contexts: A systematic review","volume":"172","author":"Dad\u00e0","year":"2025","journal-title":"Computers in Human Behavior"},{"issue":"8","key":"10.1016\/j.eswa.2026.131507_bib0023","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3469886","article-title":"Human factors in phishing attacks: A systematic literature review","volume":"54","author":"Desolda","year":"2021","journal-title":"ACM Computing Surveys (CSUR)"},{"key":"10.1016\/j.eswa.2026.131507_bib0024","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1109\/ACCESS.2022.3151903","article-title":"Deep learning for phishing detection: Taxonomy, current challenges and future directions","volume":"10","author":"Do","year":"2022","journal-title":"IEEE Access"},{"key":"10.1016\/j.eswa.2026.131507_bib0025","series-title":"Bias in human reasoning: Causes and consequences","author":"Evans","year":"1989"},{"issue":"3","key":"10.1016\/j.eswa.2026.131507_bib0026","doi-asserted-by":"crossref","first-page":"223","DOI":"10.1177\/1745691612460685","article-title":"Dual-process theories of higher cognition: Advancing the debate","volume":"8","author":"Evans","year":"2013","journal-title":"Perspectives on Psychological Science"},{"key":"10.1016\/j.eswa.2026.131507_bib0027","series-title":"Proceedings of the USENIX symposium on usable privacy and security (SOUPS)","article-title":"Social cybersecurity and the help desk: New ideas for IT professionals to foster secure workgroup behaviors","author":"Faklaris","year":"2018"},{"issue":"0","key":"10.1016\/j.eswa.2026.131507_bib0028","article-title":"Cognitive load as a key to lie detection: A psycholinguistic exploration of pause and hesitation in true and fabricated narratives","volume":"0","author":"Fallah","year":"2025","journal-title":"Psychological Reports"},{"issue":"6","key":"10.1016\/j.eswa.2026.131507_bib0029","doi-asserted-by":"crossref","first-page":"581","DOI":"10.3233\/JCS-181253","article-title":"How persuasive is a phishing email? A phishing game for phishing awareness","volume":"27","author":"Fatima","year":"2019","journal-title":"Journal of Computer Security"},{"key":"10.1016\/j.eswa.2026.131507_bib0030","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1016\/j.ijhcs.2018.12.004","article-title":"Persuasion: How phishing emails can influence users and bypass security measures","volume":"125","author":"Ferreira","year":"2019","journal-title":"International Journal of Human-Computer Studies"},{"key":"10.1016\/j.eswa.2026.131507_bib0031","series-title":"Proceedings of the 16th international conference on world wide web","first-page":"649-656","article-title":"Learning to detect phishing emails","author":"Fette","year":"2007"},{"key":"10.1016\/j.eswa.2026.131507_bib0032","series-title":"Ceur workshop proceedings","first-page":"106","article-title":"Detecting phishing e-mails using text mining and features analysis","volume":"vol. 2940","author":"Franchina","year":"2021"},{"key":"10.1016\/j.eswa.2026.131507_bib0033","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103671","article-title":"The human factor in phishing: Collecting and analyzing user behavior when reading emails","volume":"139","author":"Gallo","year":"2024","journal-title":"Computers & Security"},{"issue":"2","key":"10.1016\/j.eswa.2026.131507_bib0034","doi-asserted-by":"crossref","first-page":"316","DOI":"10.1080\/09636412.2015.1038188","article-title":"Weaving tangled webs: Offense, defense, and deception in cyberspace","volume":"24","author":"Gartzke","year":"2015","journal-title":"Security Studies"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0035","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1075\/tcb.00073.gie","article-title":"Cognitive load and cognitive effort: Probing the psychological reality of a conceptual difference","volume":"6","author":"Gieshoff","year":"2023","journal-title":"Translation, Cognition & Behavior"},{"key":"10.1016\/j.eswa.2026.131507_bib0036","doi-asserted-by":"crossref","first-page":"114","DOI":"10.1016\/j.obhdp.2021.08.002","article-title":"You don\u2019t need to answer right away! receivers overestimate how quickly senders expect responses to non-urgent work emails","volume":"167","author":"Giurge","year":"2021","journal-title":"Organizational Behavior and Human Decision Processes"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0037","doi-asserted-by":"crossref","first-page":"2","DOI":"10.17705\/1jais.00447","article-title":"Got phished? Internet security and human vulnerability","volume":"18","author":"Goel","year":"2017","journal-title":"Journal of the Association for Information Systems"},{"issue":"3","key":"10.1016\/j.eswa.2026.131507_bib0038","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1177\/0022242921992052","article-title":"\u201cHow do i carry all this now?\u201d: Understanding consumer resistance to sustainability interventions","volume":"85","author":"Gonzalez-Arcos","year":"2021","journal-title":"Journal of Marketing"},{"issue":"3","key":"10.1016\/j.eswa.2026.131507_bib0039","doi-asserted-by":"crossref","first-page":"384","DOI":"10.1509\/jmkr.46.3.384","article-title":"Fear and loving in las vegas: Evolution, emotion, and persuasion","volume":"46","author":"Griskevicius","year":"2009","journal-title":"Journal of Marketing Research"},{"key":"10.1016\/j.eswa.2026.131507_bib0040","series-title":"2023 IEEE 31st international requirements engineering conference (RE)","first-page":"41","article-title":"A comparative evaluation of requirement template systems","author":"Gro\u00dfer","year":"2023"},{"issue":"3","key":"10.1016\/j.eswa.2026.131507_bib0041","doi-asserted-by":"crossref","DOI":"10.1145\/3310331","article-title":"Text analysis in adversarial settings: Does deception leave a stylistic trace?","volume":"52","author":"Gr\u00f6ndahl","year":"2019","journal-title":"ACM Computing Surveys"},{"issue":"12","key":"10.1016\/j.eswa.2026.131507_bib0042","doi-asserted-by":"crossref","first-page":"2705","DOI":"10.1080\/0144929X.2021.1945685","article-title":"Susceptibility to social influence strategies and persuasive system design: Exploring the relationship","volume":"41","author":"Halttu","year":"2022","journal-title":"Behaviour & Information Technology"},{"key":"10.1016\/j.eswa.2026.131507_bib0043","doi-asserted-by":"crossref","DOI":"10.1016\/j.lindif.2024.102597","article-title":"The relationship between positive and painful emotions and cognitive load during an algebra learning task","volume":"117","author":"Hawthorne","year":"2025","journal-title":"Learning and Individual Differences"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0044","doi-asserted-by":"crossref","first-page":"15","DOI":"10.3233\/AAC-170032","article-title":"Towards a framework for computational persuasion with applications in behaviour change1","volume":"9","author":"Hunter","year":"2018","journal-title":"Argument & Computation"},{"issue":"4","key":"10.1016\/j.eswa.2026.131507_bib0045","doi-asserted-by":"crossref","first-page":"527","DOI":"10.1080\/17517575.2021.1896786","article-title":"A survey of phishing attack techniques, defence mechanisms and open research challenges","volume":"16","author":"Jain","year":"2022","journal-title":"Enterprise Information Systems"},{"key":"10.1016\/j.eswa.2026.131507_bib0046","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2024.125767","article-title":"On persuasion in spam email: A multi-granularity text analysis","volume":"265","author":"J\u00e1\u00f1ez-Martino","year":"2025","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2026.131507_bib0047","series-title":"Thinking, fast and slow","author":"Kahneman","year":"2011"},{"key":"10.1016\/j.eswa.2026.131507_bib0048","doi-asserted-by":"crossref","unstructured":"Kamruzzaman, M., & Kim, G. L. (2025). Prompting Techniques for Reducing Social Bias in LLMs through System 1 and System 2 Cognitive Processes. Proceedings of the 15th International Conference on Recent Advances in Natural Language Processing - Natural Language Processing in the Generative AI Era. 511\u2013520. 10.1109\/TIP.2018.2867733.","DOI":"10.26615\/978-954-452-098-4-060"},{"key":"10.1016\/j.eswa.2026.131507_bib0049","series-title":"2022 IEEE International conference on big data (big data)","first-page":"2841","article-title":"Using transformers for identification of persuasion principles in phishing emails","author":"Karki","year":"2022"},{"issue":"2","key":"10.1016\/j.eswa.2026.131507_bib0050","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1007\/s10462-024-11055-z","article-title":"Staying ahead of phishers: A review of recent advances and emerging methodologies in phishing detection","volume":"58","author":"Kavya","year":"2024","journal-title":"Artificial Intelligence Review"},{"key":"10.1016\/j.eswa.2026.131507_bib0051","doi-asserted-by":"crossref","unstructured":"Ke, L., Tong, S., Cheng, P., & Peng, K. (2024). Exploring the frontiers of LLMs in psychological applications: A comprehensive review. 58(10), 1573\u20137462. 10.1007\/s10462-025-11297-5.","DOI":"10.1007\/s10462-025-11297-5"},{"key":"10.1016\/j.eswa.2026.131507_bib0052","doi-asserted-by":"crossref","DOI":"10.1016\/j.chb.2022.107648","article-title":"Analytical reasoning reduces internet fraud susceptibility","volume":"142","author":"Kelley","year":"2023","journal-title":"Computers in Human Behavior"},{"issue":"6","key":"10.1016\/j.eswa.2026.131507_bib0053","doi-asserted-by":"crossref","first-page":"1865","DOI":"10.1111\/poms.13945","article-title":"Coordinating traditional media advertising and online advertising in brand marketing","volume":"32","author":"Kim","year":"2023","journal-title":"Production and Operations Management"},{"issue":"4","key":"10.1016\/j.eswa.2026.131507_bib0054","doi-asserted-by":"crossref","first-page":"475","DOI":"10.1080\/10570314.2017.1325925","article-title":"Transgressor communication after committing a hurtful relational event: Associations with attributed intent, blame, guilt, responsibility, and perceived forgiveness","volume":"82","author":"Knight","year":"2018","journal-title":"Western Journal of Communication"},{"issue":"10","key":"10.1016\/j.eswa.2026.131507_bib0055","doi-asserted-by":"crossref","first-page":"260","DOI":"10.1007\/s10462-024-10888-y","article-title":"Large language models (LLMs): Survey, technical frameworks, and future challenges","volume":"57","author":"Kumar","year":"2024","journal-title":"Artificial Intelligence Review"},{"key":"10.1016\/j.eswa.2026.131507_bib0056","doi-asserted-by":"crossref","first-page":"268","DOI":"10.1007\/s11747-016-0484-7","article-title":"Synergistic effects of social media and traditional marketing on brand sales: Capturing the time-varying effects","volume":"45","author":"Kumar","year":"2017","journal-title":"Journal of the Academy of Marketing Science"},{"key":"10.1016\/j.eswa.2026.131507_bib0057","series-title":"Pacis","first-page":"169","article-title":"Understanding optimism bias in phishing: A health belief model perspective","author":"Lei","year":"2021"},{"key":"10.1016\/j.eswa.2026.131507_bib0058","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103249","article-title":"Unveiling the process of phishing precautions taking: The moderating role of optimism bias","volume":"129","author":"Lei","year":"2023","journal-title":"Computers & Security"},{"issue":"9","key":"10.1016\/j.eswa.2026.131507_bib0059","doi-asserted-by":"crossref","first-page":"1827","DOI":"10.1080\/0144929X.2023.2230305","article-title":"Uncovering the role of optimism bias in social media phishing: An empirical study on TikTok","volume":"43","author":"Lei","year":"2024","journal-title":"Behaviour & Information Technology"},{"key":"10.1016\/j.eswa.2026.131507_bib0060","series-title":"Proceedings of the SIGCHI conference on human factors in computing systems","first-page":"1","article-title":"Inaccessible and deceptive: Examining experiences of deceptive design with people who use visual accessibility technology","author":"Lewis","year":"2025"},{"key":"10.1016\/j.eswa.2026.131507_bib0061","doi-asserted-by":"crossref","DOI":"10.1016\/j.chb.2022.107347","article-title":"How online social interactions predict the sense of virtual community via social capital: Testing a dual-process model with an interest-based SNS","volume":"135","author":"Li","year":"2022","journal-title":"Computers in Human Behavior"},{"issue":"3","key":"10.1016\/j.eswa.2026.131507_bib0062","doi-asserted-by":"crossref","first-page":"1053","DOI":"10.1162\/coli_a_00523","article-title":"Large language model instruction following: A survey of progresses and challenges","volume":"50","author":"Lou","year":"2024","journal-title":"Computational Linguistics"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0063","doi-asserted-by":"crossref","first-page":"134","DOI":"10.1080\/0960085X.2025.2548543","article-title":"Phishing detection in multitasking contexts: The impact of working memory load, goal activation, and message framing cue on detection performance","volume":"35","author":"Lu","year":"2025","journal-title":"European Journal of Information Systems"},{"key":"10.1016\/j.eswa.2026.131507_bib0064","doi-asserted-by":"crossref","unstructured":"Luttrell, A. (2018). Dual Process Models of Persuasion. Oxford Research Encyclopedia of Psychology. Retrieved 11 Feb. 2026, fromhttps:\/\/oxfordre.com\/psychology\/view\/10.1093\/acrefore\/9780190236557.001.0001\/acrefore-9780190236557-e-319.","DOI":"10.1093\/acrefore\/9780190236557.013.319"},{"key":"10.1016\/j.eswa.2026.131507_bib0065","series-title":"2025 3rd International conference on disruptive technologies (ICDT)","first-page":"321","article-title":"Safe URL detection with privacy using machine learning and cryptography techniques","author":"Madhavan","year":"2025"},{"issue":"2","key":"10.1016\/j.eswa.2026.131507_bib0066","doi-asserted-by":"crossref","first-page":"135","DOI":"10.1177\/0261927X221117497","article-title":"Deceptive (de)humanization: How lying about perceived outgroups is revealed in language","volume":"42","author":"Markowitz","year":"2023","journal-title":"Journal of Language and Social Psychology"},{"issue":"3","key":"10.1016\/j.eswa.2026.131507_bib0067","doi-asserted-by":"crossref","DOI":"10.1002\/acp.4215","article-title":"Deconstructing deception: Frequency, communicator characteristics, and linguistic features of embeddedness","volume":"38","author":"Markowitz","year":"2024","journal-title":"Applied Cognitive Psychology"},{"key":"10.1016\/j.eswa.2026.131507_bib0068","doi-asserted-by":"crossref","first-page":"18416","DOI":"10.1109\/ACCESS.2024.3356357","article-title":"Challenges and opportunities of text-based emotion detection: A survey","volume":"12","author":"Maruf","year":"2024","journal-title":"IEEE Access"},{"key":"10.1016\/j.eswa.2026.131507_bib0069","doi-asserted-by":"crossref","DOI":"10.1016\/j.chb.2024.108274","article-title":"Scamming higher ed: An analysis of phishing content and trends","volume":"158","author":"Morrow","year":"2024","journal-title":"Computers in Human Behavior"},{"key":"10.1016\/j.eswa.2026.131507_bib0070","doi-asserted-by":"crossref","DOI":"10.1108\/ICS-11-2024-0280","article-title":"Does security attitude really predict susceptibility to persuasion tactics in social engineering attempts?","author":"Muhanad","year":"2025","journal-title":"Information & Computer Security"},{"key":"10.1016\/j.eswa.2026.131507_bib0071","doi-asserted-by":"crossref","first-page":"154","DOI":"10.1016\/j.chb.2018.12.036","article-title":"A new approach to modelling the effects of cognitive processing and threat detection on phishing susceptibility","volume":"94","author":"Musuva","year":"2019","journal-title":"Computers in Human Behavior"},{"issue":"4","key":"10.1016\/j.eswa.2026.131507_bib0072","doi-asserted-by":"crossref","first-page":"375","DOI":"10.1509\/jmkr.40.4.375.19385","article-title":"Understanding the impact of synergy in multimedia communications","volume":"40","author":"Naik","year":"2003","journal-title":"Journal of Marketing Research"},{"key":"10.1016\/j.eswa.2026.131507_bib0073","doi-asserted-by":"crossref","DOI":"10.1016\/j.chb.2025.108721","article-title":"Knowledge types and cognitive processing modes associated with online news credibility assessment: An interview study","volume":"172","author":"Nistor","year":"2025","journal-title":"Computers in Human Behavior"},{"key":"10.1016\/j.eswa.2026.131507_bib0074","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2025.127044","article-title":"Evaluating spam filters and stylometric detection of AI-generated phishing emails","volume":"276","author":"Opara","year":"2025","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2026.131507_bib0075","unstructured":"Open Data Science (2024). How text mining improves phishing detection. https:\/\/odsc.medium.com\/how-text-mining-improves-phishing-detection-74fd3f33f58c."},{"issue":"5","key":"10.1016\/j.eswa.2026.131507_bib0076","doi-asserted-by":"crossref","first-page":"656","DOI":"10.1108\/ICS-02-2023-0023","article-title":"Optimism bias in susceptibility to phishing attacks: An empirical study","volume":"32","author":"Owen","year":"2024","journal-title":"Information & Computer Security"},{"issue":"5","key":"10.1016\/j.eswa.2026.131507_bib0077","doi-asserted-by":"crossref","first-page":"545","DOI":"10.1017\/S1351324921000152","article-title":"Deception detection in text and its relation to the cultural dimension of individualism\/collectivism","volume":"28","author":"Papantoniou","year":"2022","journal-title":"Natural Language Engineering"},{"key":"10.1016\/j.eswa.2026.131507_bib0078","unstructured":"Park, G., & Taylor, J. M. (2021). Towards text-based phishing detection. https:\/\/dblp.org\/rec\/journals\/corr\/abs-2111-01676.bib."},{"key":"10.1016\/j.eswa.2026.131507_bib0079","series-title":"Online persuasive communication and its applications","first-page":"95","author":"Pellegrino","year":"2024"},{"key":"10.1016\/j.eswa.2026.131507_bib0080","series-title":"57th international carnahan conference on security technology (ICCST 2025)","article-title":"Features analysis of all email components for phishing detection","author":"Piugie","year":"2025"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0081","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1111\/bjet.13503","article-title":"A systematic review of immersive technologies for education: Effects of cognitive load and curiosity state on learning performance","volume":"56","author":"Poupard","year":"2025","journal-title":"British Journal of Educational Technology"},{"key":"10.1016\/j.eswa.2026.131507_bib0082","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103558","article-title":"Which factors predict susceptibility to phishing? An empirical study","volume":"136","author":"Ribeiro","year":"2024","journal-title":"Computers & Security"},{"key":"10.1016\/j.eswa.2026.131507_bib0083","doi-asserted-by":"crossref","DOI":"10.3389\/fpsyg.2023.1279317","article-title":"Language models and psychological sciences","volume":"14","author":"Sartori","year":"2023","journal-title":"Frontiers in Psychology"},{"key":"10.1016\/j.eswa.2026.131507_bib0084","doi-asserted-by":"crossref","first-page":"536","DOI":"10.2197\/ipsjjip.27.536","article-title":"Detection method of homograph internationalized domain names with OCR","volume":"27","author":"Sawabe","year":"2019","journal-title":"Journal of Information Processing"},{"key":"10.1016\/j.eswa.2026.131507_bib0085","series-title":"31st USENIX security symposium (USENIX security 22)","first-page":"1813","article-title":"Leaky forms: A study of email and password exfiltration before form submission","author":"Senol","year":"2022"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0086","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1287\/ijds.2022.0024","article-title":"Rhetoric mining: A new text-analytics approach for quantifying persuasion","volume":"2","author":"\u015eeref","year":"2023","journal-title":"INFORMS Journal on Data Science"},{"issue":"2","key":"10.1016\/j.eswa.2026.131507_bib0087","doi-asserted-by":"crossref","first-page":"207","DOI":"10.1037\/0033-2909.134.2.207","article-title":"Heuristics made easy: An effort-reduction framework","volume":"134","author":"Shah","year":"2008","journal-title":"Psychological Bulletin"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0088","doi-asserted-by":"crossref","first-page":"99","DOI":"10.1016\/j.jksuci.2017.07.005","article-title":"PhiDMA - A phishing detection model with multi-filter approach","volume":"32","author":"Sonowal","year":"2020","journal-title":"Journal of King Saud University - Computer and Information Sciences"},{"key":"10.1016\/j.eswa.2026.131507_bib0089","first-page":"411","article-title":"The science of persuasion: An initial exploration","volume":"1244","author":"Stanchi","year":"2006","journal-title":"Michigan State Law Review"},{"key":"10.1016\/j.eswa.2026.131507_bib0090","doi-asserted-by":"crossref","DOI":"10.1016\/j.chb.2021.106930","article-title":"Performing social engineering: A qualitative study of information security deceptions","volume":"124","author":"Steinmetz","year":"2021","journal-title":"Computers in Human Behavior"},{"key":"10.1016\/j.eswa.2026.131507_bib0091","unstructured":"Sun, R. (2024). Can a cognitive architecture fundamentally enhance LLMs? or vice versa?https:\/\/arxiv.org\/abs\/2401.10444."},{"key":"10.1016\/j.eswa.2026.131507_bib0092","doi-asserted-by":"crossref","DOI":"10.3389\/fnhum.2016.00221","article-title":"Concentration: The neural underpinnings of how cognitive load shields against distraction","volume":"10","author":"S\u00f6rqvist","year":"2016","journal-title":"Frontiers in Human Neuroscience"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0093","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1177\/0261927X09351676","article-title":"The psychological meaning of words: LIWC and computerized text analysis methods","volume":"29","author":"Tausczik","year":"2010","journal-title":"Journal of Language and Social Psychology"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0094","doi-asserted-by":"crossref","first-page":"6597","DOI":"10.1109\/TKDE.2025.3609320","article-title":"Prime: A phishing detection framework with quantitative and fuzzy-based dual validation","volume":"37","author":"Tian","year":"2025","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"10.1016\/j.eswa.2026.131507_bib0095","unstructured":"Tiwari, P. (2020). Exploring phishing susceptibility attributable to authority, urgency, risk perception and human factors. Master\u2019s thesis Purdue University."},{"key":"10.1016\/j.eswa.2026.131507_bib0096","doi-asserted-by":"crossref","DOI":"10.3389\/fcomm.2022.792378","article-title":"Computational measures of deceptive language: Prospects and issues","volume":"7","author":"Tomas","year":"2022","journal-title":"Frontiers in Communication"},{"issue":"5","key":"10.1016\/j.eswa.2026.131507_bib0097","doi-asserted-by":"crossref","DOI":"10.1016\/j.ipm.2022.103012","article-title":"The language and targets of online trolling: A psycholinguistic approach for social cybersecurity","volume":"59","author":"Uyheng","year":"2022","journal-title":"Information Processing & Management"},{"key":"10.1016\/j.eswa.2026.131507_bib0098","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2023.122199","article-title":"Anti-phishing: A comprehensive perspective","volume":"238","author":"Varshney","year":"2024","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2026.131507_bib0099","series-title":"Social neuroscience","first-page":"34","article-title":"Persuasion neuroscience: New potential to test dual-process theories","author":"Vezich","year":"2016"},{"key":"10.1016\/j.eswa.2026.131507_bib0100","first-page":"58174","article-title":"Teach better or show smarter? on instructions and exemplars in automatic prompt optimization","volume":"37","author":"Wan","year":"2024","journal-title":"Advances in Neural Information Processing Systems"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0101","doi-asserted-by":"crossref","first-page":"145","DOI":"10.1007\/s12103-022-09706-4","article-title":"Understanding romance scammers through the lens of their victims: Qualitative modeling of risk and protective factors in the online context","volume":"49","author":"Wang","year":"2024","journal-title":"American Journal of Criminal Justice"},{"issue":"11","key":"10.1016\/j.eswa.2026.131507_bib0102","doi-asserted-by":"crossref","first-page":"1","DOI":"10.17705\/1jais.00442","article-title":"Overconfidence in phishing email detection","volume":"17","author":"Wang","year":"2016","journal-title":"Journal of the Association for Information Systems"},{"issue":"CSCW2","key":"10.1016\/j.eswa.2026.131507_bib0103","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3415231","article-title":"How experts detect phishing scam emails","volume":"4","author":"Wash","year":"2020","journal-title":"Proceedings of the ACM on Human-Computer Interaction"},{"issue":"2","key":"10.1016\/j.eswa.2026.131507_bib0104","doi-asserted-by":"crossref","first-page":"141","DOI":"10.1016\/0010-0277(74)90017-1","article-title":"Dual processes in reasoning?","volume":"3","author":"Wason","year":"1974","journal-title":"Cognition"},{"key":"10.1016\/j.eswa.2026.131507_bib0105","doi-asserted-by":"crossref","first-page":"665","DOI":"10.1093\/bjc\/azt009","article-title":"The scammers persuasive techniques model: Development of a stage model to explain the online dating romance scam","volume":"53","author":"Whitty","year":"2013","journal-title":"British Journal of Criminology"},{"issue":"2","key":"10.1016\/j.eswa.2026.131507_bib0106","doi-asserted-by":"crossref","first-page":"184","DOI":"10.1080\/0144929X.2018.1519599","article-title":"How persuasive is phishing email? The role of authentic design, influence and current events in email judgements","volume":"38","author":"Williams","year":"2019","journal-title":"Behaviour & Information Technology"},{"issue":"1","key":"10.1016\/j.eswa.2026.131507_bib0107","doi-asserted-by":"crossref","first-page":"539","DOI":"10.1146\/annurev.psych.51.1.539","article-title":"Attitude change: Persuasion and social influence","volume":"51","author":"Wood","year":"2000","journal-title":"Annual Review of Psychology"},{"issue":"2","key":"10.1016\/j.eswa.2026.131507_bib0108","doi-asserted-by":"crossref","first-page":"385","DOI":"10.1287\/isre.2014.0522","article-title":"Research note -influence techniques in phishing attacks: An examination of vulnerability and resistance","volume":"25","author":"Wright","year":"2014","journal-title":"Information Systems Research"},{"issue":"2","key":"10.1016\/j.eswa.2026.131507_bib0109","doi-asserted-by":"crossref","first-page":"199","DOI":"10.1108\/ICS-11-2021-0185","article-title":"Determining psycholinguistic features of deception in phishing messages","volume":"31","author":"Xu","year":"2023","journal-title":"Information & Computer Security"},{"key":"10.1016\/j.eswa.2026.131507_bib0110","doi-asserted-by":"crossref","DOI":"10.1016\/j.infsof.2024.107426","article-title":"Can serious gaming tactics bolster spear-phishing and phishing resilience? : Securing the human hacking in information security","volume":"170","author":"Yasin","year":"2024","journal-title":"Information and Software Technology"},{"key":"10.1016\/j.eswa.2026.131507_bib0111","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2023.120977","article-title":"Email spam detection using hierarchical attention hybrid deep learning method","volume":"233","author":"Zavrak","year":"2023","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2026.131507_bib0112","series-title":"Proceedings of the 16th international conference on world wide web","first-page":"639-t648","article-title":"Cantina: A content-based approach to detecting phishing web sites","author":"Zhang","year":"2007"},{"key":"10.1016\/j.eswa.2026.131507_bib0113","doi-asserted-by":"crossref","DOI":"10.1016\/j.chb.2021.107104","article-title":"A dual-process perspective to explore decision making in internet gaming disorder: An ERP study of comparison with recreational game users","volume":"128","author":"Zhou","year":"2022","journal-title":"Computers in Human Behavior"},{"key":"10.1016\/j.eswa.2026.131507_bib0114","first-page":"1","volume":"vol. 14","author":"Zuckerman","year":"1981"}],"container-title":["Expert Systems with Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0957417426004203?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0957417426004203?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,14]],"date-time":"2026-05-14T17:48:27Z","timestamp":1778780907000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0957417426004203"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":114,"alternative-id":["S0957417426004203"],"URL":"https:\/\/doi.org\/10.1016\/j.eswa.2026.131507","relation":{},"ISSN":["0957-4174"],"issn-type":[{"value":"0957-4174","type":"print"}],"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Psychology of phishing emails: Quantifying persuasion principles and simulating detection with large language models","name":"articletitle","label":"Article Title"},{"value":"Expert Systems with Applications","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.eswa.2026.131507","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"131507"}}