Cyberloafing, defined as employees’ personal use of organizational technologies during work hours, has become a persistent form of insider deviance in contemporary digital workplaces. Although prior research has largely treated cyberloafing as production deviance, this view overlooks a more malicious form of cyberloafing that uses organizational digital resources and creates property-related risks. Drawing on routine activity theory and boundary theory, we develop a contextualized framework explaining to what extent motivated offender states, arising from contextual boundary integration, interact with target suitability and capable guardianship to shape cyberloafing as property cyberdeviance.
The model was tested using a sequential multistage scenario experiment with 371 valid responses from knowledge workers recruited through Prolific. The results, analyzed using covariance-based structural equation modeling (CB-SEM), show that technological entitlement, cyberloafing self-efficacy, technology re-adaptability, and limited work use of IT increase cyberloafing as property cyberdeviance, whereas organizational deterrence reduces it. ICT permeability significantly increases the two motivated offender states, whereas human-AI collaboration significantly decreases them. The two boundary conditions therefore operate in opposite directions on the motivated offender component. Moderation results further show that the two target-suitability dimensions operate differently: limited work use of IT strengthens both motivated-offender pathways, whereas technology re-adaptability strengthens only the entitlement pathway. Organizational deterrence weakens both pathways, especially the self-efficacy pathway.
These findings extend information systems (IS) research on cyberloafing by showing how routine digital work conditions can transform ordinary nonwork IT use into property cyberdeviance. The study also offers practical implications for managing cyberloafing risks in contemporary digital workplaces.

Ahuja, M., Sundrup, R., & Magni, M. (2026). Work-Family Frustration When You and Your Partner Both Work From Home: The Role of ICT Permeability, Planning, and Gender. Journal of the Association for Information Systems, 27(1), 67-94.
Amo, L. C., Grijalva, E., Herath, T., Lemoine, G. J., & Rao, H. R. (2022). Technological entitlement: it’s my technology and I’ll (Ab) Use it how I want to. MIS Quarterly, 46(3), 1395-1420.
Ashforth, B. E., Kreiner, G. E., & Fugate, M. (2000). All in a day's work: Boundaries and micro role transitions. Academy of Management Review, 25(3), 472-491.
Bandura, A. (1986). Social foundations of thought and action. Englewood Cliffs, NJ, 1986(23-28), 2.
Blanchard, A. L., & Henle, C. A. (2008). Correlates of different forms of cyberloafing: The role of norms and external locus of control. Computers in Human Behavior, 24(3), 1067-1084.
Blau, G., Yang, Y., & Ward-Cook, K. (2006). Testing a measure of cyberloafing. Journal of Allied Health, 35(1), 9-17.
Bulgurcu, B., Cavusoglu, H., & Benbasat, I. (2010). Information security policy compliance: an empirical study of rationality-based beliefs and information security Awareness1. MIS Quarterly, 34(3), 523-548.
Burns, A., Roberts, T. L., Posey, C., Lowry, P. B., & Fuller, B. (2023). Going beyond deterrence: A middle-range theory of motives and controls for insider computer abuse. Information Systems Research, 34(1), 342-362.
Carey, H., Green, G. S., & Larragoite, V. (1998). Clarifying the reach of a general theory of crime for organizational offending: A comment on Reed and Yeager. Criminology, 36(4), 867.
Chen, Y., Benitez, J., & Cheung, C. M. (2025). Understanding the dynamic and episodic nature of technostressors and their effects on cyberdeviance: a daily field investigation. Information Systems Research, 36(2), 1196-1216.
Chou, C. H., Sinha, A. P., & Zhao, H. (2010). Commercial Internet filters: Perils and opportunities. Decision Support Systems, 48(4), 521-530.
Cohen, L. E., & Felson, M. (1979). Social change and crime rate trends: A routine activity approach. American Sociological Review, 588-608.
Cohen, L. E., Kluegel, J. R., & Land, K. C. (1981). Social inequality and predatory criminal victimization: An exposition and test of a formal theory. American Sociological Review, 505-524.
Compeau, D. R., & Higgins, C. A. (1995). Computer self-efficacy: Development of a measure and initial test. MIS Quarterly, 19(2), 189-211.
Cousins, K., & Robey, D. (2015). Managing work-life boundaries with mobile technologies: An interpretive study of mobile work practices. Information Technology & People, 28(1), 34-71.
D'arcy, J., & Herath, T. (2011). A review and analysis of deterrence theory in the IS security literature: making sense of the disparate findings. European Journal of Information Systems, 20(6), 643-658.
D'Arcy, J., Hovav, A., & Galletta, D. (2009). User awareness of security countermeasures and its impact on information systems misuse: A deterrence approach. Information Systems Research, 20(1), 79-98.
Dennis, A. R., Lakhiwal, A., & Sachdeva, A. (2023). AI agents as team members: Effects on satisfaction, conflict, trustworthiness, and willingness to work with. Journal of Management Information Systems, 40(2), 307-337.
Felson, M. (2002). Crime and everyday life: Sage.
Fornell, C., & Larcker, D. F. (1981). Evaluating structural equation models with unobservable variables and measurement error. Journal of Marketing Research, 18(1), 39-50.
Fügener, A., Grahl, J., Gupta, A., & Ketter, W. (2021). Will humans-in-the-loop become borgs? Merits and pitfalls of working with AI. MIS Quarterly, 45(3), 1527-1556.
Fügener, A., Grahl, J., Gupta, A., & Ketter, W. (2022). Cognitive challenges in human–artificial intelligence collaboration: Investigating the path toward productive delegation. Information Systems Research, 33(2), 678-696.
Gaskin, J. E., Lowry, P. B., Rosengren, W., & Fife, P. T. (2025). Essential Validation Criteria for Rigorous Covariance‐Based Structural Equation Modelling. Information Systems Journal, 35(6), 1630-1661. doi:10.1111/isj.12598
Glassman, J., Prosch, M., & Shao, B. B. (2015). To monitor or not to monitor: Effectiveness of a cyberloafing countermeasure. Information & Management, 52(2), 170-182.
Haag, S., Eckhardt, A., & Venkatesh, V. (2022). Deviant affordances: When tensions, deadlocks, and nonconformance generate performance. MIS Quarterly, 46(4), 2111-2162.
Harvey, P., & Harris, K. J. (2010). Frustration-based outcomes of entitlement and the influence of supervisor communication. Human Relations, 63(11), 1639-1660.
Hecht, T. D., & Allen, N. J. (2009). A longitudinal examination of the work–nonwork boundary strength construct. Journal of Organizational Behavior, 30(7), 839-862.
Hensel, P. G., & Kacprzak, A. (2021). Curbing cyberloafing: studying general and specific deterrence effects with field evidence. European Journal of Information Systems, 30(2), 219-235.
Henseler, J., Ringle, C. M., & Sarstedt, M. (2015). A new criterion for assessing discriminant validity in variance-based structural equation modeling. Journal of the Academy of Marketing Science, 43(1), 115-135. doi:10.1007/s11747-014-0403-8
Hong, W., Chan, F. K., Thong, J. Y., Chasalow, L. C., & Dhillon, G. (2014). A framework and guidelines for context-specific theorizing in information systems research. Information Systems Research, 25(1), 111-136.
Jiang, H., Siponen, M., Jiang, Z., & Tsohou, A. (2024). The impacts of internet monitoring on employees’ cyberloafing and organizational citizenship behavior: A longitudinal field quasi-experiment. Information Systems Research, 35(3), 1175-1194.
Jussupow, E., Spohrer, K., Heinzl, A., & Gawlitza, J. (2021). Augmenting medical diagnosis decisions? An investigation into physicians’ decision-making process with artificial intelligence. Information Systems Research, 32(3), 713-735.
Kaluarachchi, C., Sedera, D., & Warren, M. (2025). Socio-technical investigation of cyberbullying among adults: A qualitative content analysis of the legal responses to a complex social problem. Information & Management, 104268.
Kerlinger, F. N., & Lee, H. B. (2000). Foundations of behavioral research: Harcourt College Publishers.
Khansa, L., Kuem, J., Siponen, M., & Kim, S. S. (2017). To cyberloaf or not to cyberloaf: The impact of the announcement of formal organizational controls. Journal of Management Information Systems, 34(1), 141-176.
Kong, H., Yin, Z., Baruch, Y., & Yuan, Y. (2023). The impact of trust in AI on career sustainability: The role of employee–AI collaboration and protean career orientation. Journal of Vocational Behavior, 146, 103928.
Kreiner, G. E. (2006). Consequences of work‐home segmentation or integration: A person‐environment fit perspective. Journal of Organizational Behavior, 27(4), 485-507.
Lee, J., de Guzman, M. C., Talebi, N., Korni, S. K., Szumigala, D., & Rao, H. R. (2018). Use of online information and suitability of target in shoplifting: A routine activity based analysis. Decision Support Systems, 110, 1-10.
Li, H. (2021). Understanding information security policy violation from a situational action perspective. Journal of the Association for Information Systems.
Li, H., Luo, X. R., & Chen, Y. (2021). Understanding information security policy violation from a situational action perspective. Journal of the Association for Information Systems, 22(3), 5.
Li, H., Yoo, S., & Kettinger, W. J. (2021). The roles of IT strategies and security investments in reducing organizational security breaches. Journal of Management Information Systems, 38(1), 222-245.
Li, Y., Cheung, C. M., & Chen, Y. . (2025). How and when does techno-invasion lead to cyberslacking and decreased performance? The roles of neutralization and a psychological safety climate. Information & Management, 104273.
Lim, V. K. (2002). The IT way of loafing on the job: Cyberloafing, neutralizing and organizational justice. Journal of Organizational Behavior, 23(5), 675-694.
Lim, V. K., & Teo, T. S. (2005). Prevalence, perceived seriousness, justification and regulation of cyberloafing in Singapore: An exploratory study. Information & Management, 42(8), 1081-1093.
Liu, J., Yue, W. T., Leung, A. C. M., & Zhang, X. (2025). Find the Good. Seek the unity: A hidden Markov model of human-AI delegation dynamics. MIS Quarterly, 49(3), 1185-1204.
Luo, X. R., Li, H., Hu, Q., & Xu, H. (2020). Why individual employees commit malicious computer abuse: A routine activity theory perspective. Journal of the Association for Information Systems, 21(6), 5.
Mazmanian, M., Orlikowski, W. J., & Yates, J. (2013). The autonomy paradox: The implications of mobile email devices for knowledge professionals. Organization Science, 24(5), 1337-1357.
Methot, J. R., & LePine, J. A. (2016). Too close for comfort? Investigating the nature and functioning of work and non-work role segmentation preferences. Journal of Business and Psychology, 31(1), 103-123.
Meyer, R. D., Dalal, R. S., & Hermida, R. (2010). A review and synthesis of situational strength in the organizational sciences. Journal of Management Information Systems, 36(1), 121-140.
Moody, G. D., & Siponen, M. . (2013). Using the theory of interpersonal behavior to explain non-work-related personal use of the Internet at work. Information & Management, .
Pang, M.-S., & Tanriverdi, H. (2022). Strategic roles of IT modernization and cloud migration in reducing cybersecurity risks of organizations: The case of US federal government. The Journal of Strategic Information Systems, 31(1), 1-19.
Park, J., Pang, M.-S., Kim, J., & Lee, B. (2021). The deterrent effect of ride-sharing on sexual assault and investigation of situational contingencies. Information Systems Research, 32(2), 497-516.
Paternoster, R., & Simpson, S. (1996). Sanction threats and appeals to morality: Testing a rational choice model of corporate crime. Law & Society Review, 30(3), 549-583.
Pee, L. G., Woon, I. M., & Kankanhalli, A. (2008). Explaining non-work-related computing in the workplace: A comparison of alternative models. Information & Management, 45(2), 120-130.
Pierce, J. L., Kostova, T., & Dirks, K. T. (2001). Toward a theory of psychological ownership in organizations. Academy of Management Review, 26(2), 298-310.
Pratt, T. C., Holtfreter, K., & Reisig, M. D. (2010). Routine online activity and internet fraud targeting: Extending the generality of routine activity theory. Journal of Research in Crime and Delinquency, 47(3), 267-296.
Rai, A., Chen, Y., & Lin, Y. (2024). Exclusion for public safety or inclusion for gig employment: managing the tension with a trilogy of guardians. MIS Quarterly, 48(4), 1691-1720.
Reyns, B. W. (2013). Online routines and identity theft victimization: Further expanding routine activity theory beyond direct-contact offenses. Journal of Research in Crime and Delinquency, 50(2), 216-238.
Reyns, B. W., Henson, B., & Fisher, B. S. (2011). Being pursued online: Applying cyberlifestyle–routine activities theory to cyberstalking victimization. Criminal Justice and Behavior, 38(11), 1149-1169.
Salgado, J. F. (2002a). The Big Five personality dimensions and counterproductive behaviors. International Journal of Selection and Assessment, 10(1‐2), 117-125.
Salgado, J. F. (2002b). The Big Five personality dimensions and counterproductive behaviors. International journal of selection and assessment, 10(1‐2), 117-125.
Sarker, S., Ahuja, M., & Sarker, S. (2018). Work–life conflict of globally distributed software development personnel: An empirical investigation using border theory. Information Systems Research, 29(1), 103-126.
Shiner, R. L., Masten, A. S., & Tellegen, A. . (2002). A developmental perspective on personality in emerging adulthood: childhood antecedents and concurrent adaptation. Journal of Personality and Social Psychology, 83(5), 1165.
Siponen, M., & Vance, A. (2010). Neutralization: new insights into the problem of employee information systems security policy violations1. MIS Quarterly, 34(3), 487-502.
Strich, F., Mayer, A.-S., & Fiedler, M. (2021). What do I do in a world of artificial intelligence? Investigating the impact of substitutive decision-making AI systems on employees’ professional role identity. Journal of the Association for Information Systems, 22(2), 9.
Tennakoon, K. U. S., Da Silveira, G. J., & Taras, D. G. (2013). Drivers of context-specific ICT use across work and nonwork domains: A boundary theory perspective. Information and Organization, 23(2), 107-128.
Venkatesh, V., Cheung, C. M., Davis, F. D., & Lee, Z. W. (2023). Cyberslacking in the workplace: Antecedents and effects on job performance. MIS Quarterly, 47(1), 281-316.
Venkatraman, S., MK Cheung, C., Lee, Z. W., D. Davis, F., & Venkatesh, V. (2018). The “darth” side of technology use: An inductively derived typology of cyberdeviance. Journal of Management Information Systems, 35(4), 1060-1091.
Wang, D. D., Durcikova, A., & Dennis, A. R. (2023). Security is local: The influence of the immediate workgroup on information security. Journal of the Association for Information Systems, 24(4), 1052-1101.
Wang, J., Gupta, M., & Rao, H. R. (2015). Insider Threats in a Financial Institution: Analysis of Attack-Proneness of Information Systems Applications1. MIS Quarterly, 39(1), 91-112.
Wang, J., Shan, Z., Gupta, M., & Rao, H. R. (2019). A Longitudinal Study of Unauthorized Access Attempts on Information Systems: The Role of Opportunity Contexts1. MIS Quarterly, 43(2), 601-622.
Weinert, C., Maier, C., Laumer, S., & Weitzel, T. (2024). How embeddedness influences IT-induced work–home boundary reduction, work–home conflict, and job outcomes. Information & Management, 61(3), 103929.
Wiebe, R. P. (2004). Delinquent behavior and the five-factor model: Hiding in the adaptive landscape. Individual Differences Research, 2(1), 38-62.
Willison, R., Lowry, P. B., & Paternoster, R. (2018). A tale of two deterrents: Considering the role of absolute and restrictive deterrence to inspire new directions in behavioral and organizational security research. Journal of the Association for Information Systems, 19(12), 3.
World Economic Forum. (2025). The future of jobs report 2025. Retrieved from Geneva, Switzerland: https://www.weforum.org/publications/the-future-of-jobs-report-2025/
Yar, M. (2005). The Novelty of ‘Cybercrime’ An Assessment in Light of Routine Activity Theory. European Journal of Criminology, 2(4), 407-427.
Zhang, S., Leidner, D., Cao, X., & Liu, N. (2022). Workplace cyberbullying: A criminological and routine activity perspective. Journal of Information Technology, 37(1), 51-79.