Phishing: legal and regulatory challenges

• Main Author: Wan Embong, Wan Emril Nizam
• Format: Thesis
• Published: 2010
• Subjects: K Law (General)
• Online Access: http://studentsrepo.um.edu.my/3741/1/1_Front_page.pdf; http://studentsrepo.um.edu.my/3741/2/2_Declaration.pdf; http://studentsrepo.um.edu.my/3741/3/3_Acknowledgement.pdf; http://studentsrepo.um.edu.my/3741/4/4_Abstract.pdf; http://studentsrepo.um.edu.my/3741/5/5_TOC_and_table_of_statue.pdf; http://studentsrepo.um.edu.my/3741/6/6_Chapter_1.pdf; http://studentsrepo.um.edu.my/3741/7/7_Chapter_2.pdf; http://studentsrepo.um.edu.my/3741/8/8_Chapter_3.pdf; http://studentsrepo.um.edu.my/3741/9/9_Chapter_4.pdf; http://studentsrepo.um.edu.my/3741/10/10_Chapter_5.pdf; http://studentsrepo.um.edu.my/3741/11/11_Chapter_6.pdf; http://studentsrepo.um.edu.my/3741/12/12_Chapter_7.pdf; http://studentsrepo.um.edu.my/3741/13/13_References.pdf; http://www.pendeta.um.edu.my/uhtbin/cgisirsi/x/0/0/57/5/3?searchdata1=796093{CKEY}&searchfield1=GENERAL^SUBJECT^GENERAL^^&user_id=WEBSERVER; http://studentsrepo.um.edu.my/3741/

Phishing scheme is a new emerging security issue of computer crime or e-commerce crime in globalization. In this paper, the legal framework of Malaysia, United States of America, United Kingdom and Singapore are analyzed and followed by discussion on critical issues that rose due to phishing activities, inter alia, the threat and magnitude of problem, techniques and variants of phishing. The paper also emphasized on the factor why phishing succeed due to human factor and technical subterfuge. The result revealed that inadequacy of current legal framework is the main challenge to govern this epidemic. However, lack of awareness among consumers, crisis on merchants’ responsibility and lack of intrusion reports and incentive arrangement contribute to phishing proliferating. In Malaysia scenario, amendments to legal provisions and better enforcement should be implemented to address this problem. Malaysia should analyse a suitable legal response through the provisions in United States, United Kingdom and Singapore model, and also emulate technical measure taken by the countries. Due to inadequacy of the current legal aspects with regard to the problem of phishing in this country, Malaysia also should adopt the legal approach taken by the United Kingdom for example through UK Fraud Act and USA Anti-phishing Act which targeting the entire scam process from sending of the email to the creation of fraudulent sites. The law should also stipulate that the perpetrator must have the specific criminal purpose of committing a crime of fraud or identity theft before an offence is made out. Even though Malaysia is still in an infant stage, the government, corporations and consumers could not afford to neglect this frightening fraud. On the contrary, each party must work hand-in-hand to turn the tide against proliferating fraud. Last but not least, solution for phishing is likely to be a combination effort between education, technology, legislation and law enforcement.