Words of Authority: Evaluating the Impact of Law Enforcement Messaging on a Hacker Forum

Law-enforcement agencies increasingly target individuals considered at risk of cybercrime, yet evidence of these interventions’ effectiveness remains limited. This study evaluated an intervention in which law enforcement publicly replied to hacker-forum users with warnings about cybercrime and legitimate alternatives. Using a retrospective matched design, we compared 143 treated users with 286 similar controls. We examined whether treated users subsequently reduced, delayed, or desisted from blackhat posting or shifted towards whitehat posting more than controls. Blackhat posting declined after targeting, but controls showed a similar decline. Treated users also did not delay, desist, or shift towards whitehat participation more than controls. Exploratory analyses including users unnotified of targeting indicated increased blackhat posting, faster return, and less desistance among treated users. These findings demonstrate the importance of suitable comparison groups and careful attention to targeting, message delivery, and possible unintended responses when evaluating online police interventions.

Authors

Institutions

Publication Details

Journal
CrimRxiv
Published
2026-09-07
DOI
https://doi.org/10.21428/cb6ab371.35574f41
Primary Topic
Cybercrime and Law Enforcement Studies
Type
preprint
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
preprint

Words of Authority: Evaluating the Impact of Law Enforcement Messaging on a Hacker Forum

Stijn Ruiter, Asier Moneva, Danielle Stibbe
CrimRxiv
Cybercrime and Law Enforcement Studies
preprint

Words of Authority: Evaluating the Impact of Law Enforcement Messaging on a Hacker Forum

Stijn Ruiter, Asier Moneva, Danielle Stibbe
preprint en

Abstract

Law-enforcement agencies increasingly target individuals considered at risk of cybercrime, yet evidence of these interventions’ effectiveness remains limited. This study evaluated an intervention in which law enforcement publicly replied to hacker-forum users with warnings about cybercrime and legitimate alternatives. Using a retrospective matched design, we compared 143 treated users with 286 similar controls. We examined whether treated users subsequently reduced, delayed, or desisted from blackhat posting or shifted towards whitehat posting more than controls. Blackhat posting declined after targeting, but controls showed a similar decline. Treated users also did not delay, desist, or shift towards whitehat participation more than controls. Exploratory analyses including users unnotified of targeting indicated increased blackhat posting, faster return, and less desistance among treated users. These findings demonstrate the importance of suitable comparison groups and careful attention to targeting, message delivery, and possible unintended responses when evaluating online police interventions.

CrimRxiv
Netherlands Institute for the Study of Crime and Law Enforcement (NL), Vrije Universiteit Amsterdam (NL), The Hague University of Applied Sciences (NL)
Peace, Justice and strong institutions
Cybercrime and Law Enforcement Studies
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.