What Drives Cybercriminals: Understanding Motives

Every few seconds, somewhere in the world, a cybercrime unfolds – a bank account is drained, a corporate server is encrypted, a stranger’s private photos are leaked. But behind every malicious click lies a question that fascinates psychologists and policymakers alike: why? What actually pushes a person to cross the line into cybercrime? The answer is rarely simple. Cybercriminals are driven by a tangle of financial pressures, personal grievances, intellectual thrills, ideological convictions, and a deep hunger for recognition. Understanding these motives is not just an academic exercise – it is the foundation on which effective prevention, investigation, and rehabilitation strategies are built.

Why motives matter in cybercrime 🔗

Cybercrime today is a global crisis. According to IBM, the human element factors into 68% of data breaches, which tells us that technology alone cannot explain why attacks succeed – human intent and human vulnerability are central to the story. For India, the numbers are equally stark. National Crime Records Bureau (NCRB) data shows cybercrime rose 24.4% in 2022, with 64.8% of cases driven by the intent to defraud, 5.5% linked to extortion, and 5.2% to sexual exploitation. These categories are not random – they map directly to human motives: greed, coercion, desire for control.

Knowing why an offender acts is the first step toward shaping prevention strategies. As cybersecurity experts have long argued, emphasising legal penalties may deter a profit-driven criminal but do little to dissuade an ideologically convinced hacktivist. Awareness campaigns about ethics might curb curious teenagers but not organised crime syndicates. Motive-informed policy is smarter policy.

Financial gain: the most common driver 🔗

Money is, by a wide margin, the single biggest motivator of cybercrime. It is the oxygen that sustains the underground economy of ransomware gangs, phishing rings, and identity theft markets. Financial gain accounted for roughly 74% of all cyber incidents globally in 2022, and the trend shows no sign of reversing.

The logic is brutally simple. Cyberattacks offer the chance to make money quickly, anonymously, and from anywhere in the world. A single ransomware campaign can net thousands of dollars in cryptocurrency from a single victim, and stolen identities or financial records can fetch significant sums on dark web marketplaces. When you compare the risk of a physical bank robbery to the relative safety of a laptop in a distant country, the appeal becomes painfully clear.

The Indian fraud epidemic 🔗

In India, financial motives dominate the cybercrime landscape. Karnataka alone reported over 11,000 fraud-motivated cases in 2022, with fraud accounting for 87.8% of total cybercrime in the state. UPI scams, fake customer-support calls, fake loan apps, and job-offer phishing have become everyday threats. The government has responded with the Citizen Financial Cyber Fraud Reporting and Management System under I4C, which has helped save over ₹1,200 crore across more than 4.7 lakh complaints since its launch. Yet the cat-and-mouse game continues, because for every system tightened, a new scam emerges to exploit a different gap.

Personal profit and corporate espionage 🔗

Not all financially motivated cybercrime is about stealing from individuals. A significant portion is corporate in nature – insiders, competitors, or contract hackers seeking proprietary information for personal or commercial advantage. Trade secrets, client databases, product designs, and research findings are all high-value targets.

Insider threats are particularly dangerous because they bypass the perimeter defences organisations spend so much to build. A disgruntled employee with legitimate credentials can siphon gigabytes of sensitive data with little more than a USB stick or a cloud-sync folder. In such cases, the motive blends personal profit with revenge – the employee wants both compensation and the satisfaction of harming the organisation they feel wronged by.

Intellectual curiosity and the thrill of the challenge 🔗

Long before cybercrime became a billion-dollar industry, hackers existed as a subculture driven primarily by curiosity. For many, cracking a system is a puzzle, a test of skill, and a form of intellectual play. The intellectual thrill of solving intricate puzzles and outsmarting security systems remains a compelling motivation for a particular kind of hacker, who sees defences less as walls and more as invitations.

This motive is often most visible among teenagers and college students. They probe networks, test website security, and experiment with vulnerabilities – not always with malicious intent, but often without realising the legal and ethical line they are crossing. The tragedy is that many young people with genuine talent drift into criminal activity simply because the challenge is exciting and the consequences feel distant.

When curiosity meets opportunity 🔗

Curiosity alone is rarely dangerous. It becomes so when paired with three enabling factors: anonymity, easy access to tools, and a peer group that celebrates transgression. The dark web and open-source hacking communities lower the technical barrier dramatically. A curious 17-year-old can today run a DDoS attack using a rented botnet without ever writing a line of code. Channelling this curiosity constructively – through ethical hacking programs, bug-bounty platforms, and cybersecurity careers – is one of the most cost-effective prevention strategies available.

Revenge and personal vendettas 🔗

Revenge is one of the oldest human motives, and it has migrated seamlessly into the digital realm. Disgruntled employees and angry spouses may seek to destroy data, leak documents, and disrupt the operations of a specific organisation or individual that wronged them. Cyberstalking, doxxing, non-consensual image sharing, and revenge pornography are all expressions of this impulse.

NCRB figures capture this dimension sharply. In 2022, 857 cybercrime cases were registered across India with personal revenge as the motive, while Uttar Pradesh alone recorded 883 cases aimed at causing disrepute. These are not faceless crimes – they typically involve an ex-partner, a former colleague, or a classmate. The digital distance between perpetrator and victim creates a psychological disconnect that minimises the moral weight of the act, making it easier to cause harm than in a face-to-face setting.

Power, respect, and recognition 🔗

For a surprisingly large group of offenders, the real prize is not money or revenge but reputation. Being admired, feared, or envied within an online community can be intensely rewarding, especially for individuals who feel powerless in their offline lives.

Hacker forums operate on hierarchies of skill. Posting screenshots of a successful breach, leaking a database, or claiming responsibility for a high-profile takedown earns status points. Many hackers pursue fame, respect within hacker communities, or professional advancement rather than immediate financial benefit, and this social economy can be as powerful a driver as any monetary reward.

Closely related is the motive of power and control. Some attackers simply enjoy the feeling of manipulating systems and watching organisations scramble to respond. The ability to flip a switch and bring down a service, deface a website, or unlock a victim’s webcam provides a potent sense of agency – something that psychological research links to dark personality traits.

The dark tetrad of personality 🔗

Psychological research has identified a cluster of traits called the ‘dark tetrad’ – narcissism, Machiavellianism, psychopathy, and sadism – that correlate with self-reported cyber-offending and trolling, with sadism emerging as the strongest predictor. This does not mean every cybercriminal has a personality disorder; most do not. But it does suggest that motives like the desire to dominate, belittle, or inflict suffering are real and measurable. Trolls, cyberbullies, and harassers often derive genuine pleasure from their victims’ distress – a reminder that cybercrime is not always rational or profit-seeking.

Ideology and hacktivism 🔗

Some cybercriminals are true believers. Hacktivists – a blend of ‘hack’ and ‘activist’ – deploy technical skills to advance political, religious, or social causes. Unlike traditional hacking that focuses on financial gain or curiosity, hacktivism is fuelled by motivations such as resisting censorship, advancing human rights, combating surveillance, or advocating for social or environmental justice.

Groups like Anonymous have launched high-profile campaigns against governments, corporations, and religious institutions they perceive as oppressive. In South Asia, hacktivist activity often tracks geopolitical tensions, with defacements and data leaks aimed at rival nations during periods of conflict. In India’s context, political or ideological motives are a recognised category of cybercrime, where actors aim to promote a cause or advance an agenda, and hacktivism sits uncomfortably between protest and crime.

Other significant drivers 🔗

Espionage and state-sponsored attacks 🔗

Nation-states are among the most sophisticated cyber actors on the planet. Their motives include stealing classified information, disrupting rival economies, and shaping foreign public opinion. These attacks are typically low-volume but extremely high-impact, targeting defence, energy, telecommunications, and research institutions.

Sexual exploitation and gendered violence 🔗

A significant share of Indian cybercrime is gendered. Sextortion, morphed images, fake matrimonial profiles, and non-consensual intimate image sharing are driven by motives ranging from sexual gratification to coercion to the desire to punish women who assert autonomy. These crimes sit at the intersection of misogyny, anonymity, and opportunity – and they are grievously under-reported.

Thrill-seeking and boredom 🔗

Some offenders, particularly young ones, act out of sheer boredom or the dopamine rush of doing something forbidden. Research on cybercriminal psychology identifies thrill-seeking, ideological beliefs, and financial gain as three core psychological drivers, often entangled with conditions like impulsivity, narcissism, or antisocial tendencies.

Why understanding motive matters for prevention 🔗

Every motive demands a different response. Financial crime is best countered by strong banking controls, faster fraud-response systems, and public awareness. Curiosity-driven offending can be redirected through ethical hacking education, CTF competitions, and bug-bounty programs. Revenge-driven crime requires better offboarding practices, restraining orders that cover digital platforms, and legal remedies for victims. Hacktivism calls for dialogue, transparency, and legitimate channels for dissent. Power-seeking and sadistic behaviour often require mental health support alongside law enforcement.

India has begun building this motive-aware infrastructure. The Indian Cyber Crime Coordination Centre (I4C), the National Cyber Crime Reporting Portal, the 1930 helpline, and CERT-In advisories collectively address different slices of the problem. But technology and policy can only go so far. The final frontier is psychological – educating citizens about the manipulation tactics used against them, and reaching potential offenders before they take the first irreversible step.

What do you think? If you had to design a single intervention to reduce cybercrime in your own city, would you target the motives of potential offenders or the vulnerabilities of potential victims – and why? And do you believe understanding a cybercriminal’s psychology makes society more forgiving, or simply more prepared?

References

1. https://www.ibm.com/think/insights/hacking-the-mind-why-psychology-matters-to-cybersecurity
2. https://theprint.in/india/24-spike-in-cybercrime-in-india-shows-ncrb-data-fraud-extortion-sexual-exploitation-top-motives/1871498/
3. https://cysed.org/the-psychology-of-cybercrime-understanding-motivations-to-craft-effective-prevention-strategies/
4. https://www.pib.gov.in/PressReleaseIframePage.aspx?PRID=2003158
5. https://brandefense.io/blog/drps/cyberattacks-what-motivates-hackers/
6. https://retailtechinnovationhub.com/home/2025/3/6/hacker-motives-understanding-the-psychology-behind-cybercrime
7. https://www.mcafee.com/blogs/internet-security/7-types-of-hacker-motivations/
8. https://www.open.edu/openlearn/health-sports-psychology/psychology/the-psychology-cybercrime/content-section-4
9. https://www.huntress.com/cybersecurity-101/topic/what-is-hacktivism
10. https://pwonlyias.com/editorial-analysis/growing-cyber-crime-in-india/
11. https://iacis.org/iis/2025/1_iis_2025_185-193.pdf