Cybercrime: who is the perpetrator?
There is no such thing as the quintessential cybercriminal. It can be a Russian gang or the boy next door. What we do know is that cybercrime is an enduring societal problem that can affect every one of us. ‘We do not know enough about the criminals’, says Professor of Governing Cybercrime Rutger Leufeldt.
In his inaugural lecture on 25 November entitled More than just a good idea. Towards an empirically based approach to cybercrime, Leukfeldt will explain why empirical research on cybercrime is essential. ‘Otherwise, we will continue hunting a mythical beast. Are you fighting shadowy individuals in far-flung corners of the globe who have almost magical technical skills or are the young people we see in our lecture halls? Or is it the boy next door? It can be all of the above because there is no such thing as the quintessential cybercriminal.’
‘You can’t just think: we’ll get an investigative team on the case and that’s it’
That’s the nature of the beast. If you don’t know who you’re up against, you won’t know how to catch them. This is clear to see in the criminal justice system, says Leukfeldt. The police and judiciary are not sitting still but little progress has been made in ten years. ‘Then I wonder whether they are not doing enough or are doing the wrong things. You can’t think: we’ll get an investigation team on it and that’s it. It really is about the digitalisation of crime and that affects all forms of crime.’
Identifying patterns of cybercrime
Leukfeldt is irked by cybercrime fighters who have a good idea and think they have to implement it straight away. ‘We are no longer in the initial phase of cybercrime. Even a good idea can be dangerous because you don’t know who you’re up against. So you have to measure the effects and understand what you’re talking about. We don’t know enough about the perpetrators. I want to start a programme where different disciplines look together at cybercrime patterns. You need to systematically collect data about cybercrime in all its manifestations. How do cybercriminals work? What do they do? Only then can you start to understand this phenomenon.’
He is often asked whether it is worth doing empirical research on this form of crime when it is constantly changing. ‘Criminals’ underlying processes remain the same. If you think there is no point in researching it, then you won’t do it. We need to move away from that.’
Getting everyone on board
This is where the value of research comes knocking. ‘Not believing your own hype but looking at processes and researching the patterns. Every week I can be found somewhere in the country spreading this message. Digitalisation and the ensuing criminality affect everyone. I see it as my job to get everyone on board, also the other disciplines; cybercrime impacts criminology in general.’
‘Cyber is no longer a techie preserve’
Leukfeldt takes the opportunity to mention the nieuwe bacheloropleiding in Cybersecurity & Cybercrime starting in The Hague in September 2025. There is a great need for cyber-professionals with broad training, he says. ‘There is no such programme like this in the Netherlands, where all the disciplines come together.’
Three faculties (FGGA, Leiden Law School and Faculty of Science) are working together on the programme. Students look at cybercrime from the criminological, legal, governance and technical perspectives. ‘You get a new type of lecturer and researcher, who is much more between the worlds. Students see this and that is hugely important. Cyber is no longer the preserve of techies. There is much more to it. It’s great that we can train students in it.’
Watch the live stream of Rutger Leukfeldt’s inaugural lecture on 25 November.
Text: Margriet van der Zee
If you are a legal professional who would like to specialise in cybercrime and cybersecurity, see the Leiden Law Academy’s postgraduate training in Cybercrime & Cybersecurity.