Trick with Treat – Reciprocity increases the willingness to communicate personal data.

Information security is a significant challenge for information and communication technologies (ICT). This includes withstanding attempts of social engineering aimed at manipulating people into divulging confidential information. However, many users are lacking awareness of the risks involved with, for example, password security. In a field survey that tested reciprocal behavior in social interactions, 1,208 participants were asked to reveal their personal password. More than one third of the participants shared their password with an unknown interviewer. In line with the social norm of reciprocity, people were more willing to do so when they received a small incentive (i.e., a piece of chocolate) before they were asked to reveal personal information. Elicitation was even more successful when the incentive was given right before asking for the password. The results, including moderating factors (e.g., age, gender), are discussed in the light of security awareness of ICT users and the mechanisms of psychological persuasion.