Study of Social Engineering Attack Patterns Targeting University Students in Benue State

University students represent a highly targeted population for social engineering attacks due to their high digital connectivity, limited security training, and specific vulnerabilities related to scholarship fraud, academic account access, and employment scams. This study examined social engineering attack patterns and victimisation among students at the Federal University of Agriculture Makurdi and Benue State University in Makurdi, Benue State, North Central Nigeria. A cross-sectional survey was conducted among 300 undergraduates using stratified random sampling. The questionnaire assessed types of social engineering attacks experienced, deception methods used, financial losses, reporting behaviour, and protective knowledge. Results showed that 54.0 percent had experienced at least one social engineering attempt in the preceding academic year. Scholarship impersonation scams (44.3 percent of attacks), fake employment offers (31.2 percent), and academic portal phishing (24.5 percent) were the most common attack types. Financial loss was reported by 28.3 percent of targeted students, averaging 35,200 naira. Susceptibility was significantly higher among first-year students (p < 0.001). Reporting incidents was rare at 12.3 percent. Only 21.0 percent could identify warning signs of social engineering. The study recommends mandatory cybersecurity orientation for new students, a dedicated university cyber incident reporting platform, inter-university social engineering awareness campaigns, and integration of security education into general studies in North Central universities. Keywords: social engineering, university students, Benue State, scholarship fraud, cybercrime victimisation