UPI Study › Courses › Ethics in Technology › Free lessons › Lesson 12.6 Free with a free account
What Counts as a Crime When It Happens Through Computers and Digital Networks
Ethics in Technology · Chapter 12: Cyber Harassment, Cybercrime, and How Digital Criminals OperateSection 12.6 · lesson 72 of 11615 min · free with a free account
Free preview
Create a free account to keep watching
It takes a minute and costs nothing. Your free account unlocks all of Chapter 1 and 3 more lessons of Ethics in Technology.
Lesson complete
Earn the 3 college credits for Ethics in Technology
Enrolling adds a quiz after each lesson, the graded work and the official transcript. Recommended for credit by NCCRS.
Next lesson: The Weak Points in Systems and Human Behavior That Criminals Exploit Most Often →← Landmark Court Decisions That Have Shaped How We Handle Online Bullying TodayNext lesson: The Weak Points in Systems and Human Behavior That Criminals Exploit Most Often →
In this lesson
Classify the computer’s role, then identify the legal elements and authority that apply.
- Explain why cybercrime is an umbrella term with definitions that vary by context and jurisdiction.
- Classify target, instrument, and incidental roles, including overlapping examples.
- Distinguish jurisdiction from practical access to suspects and electronic evidence.
- Explain the federal statutory toolkit and the role of international cooperation.
Free study notes
Get this lesson's notes by email
The key points and 4 practice questions with answers, in your inbox. One email, free.
One email. Unsubscribe in one click.
Transcript
Everything said in the video, section by section (1,813 words). Read along, or search it.
Cyber Harassment, Cybercrime, and How Digital Criminals Operate
What Counts as Cybercrime?
Cybercrime is an umbrella term for offenses connected to computers, networks, or digital devices. The legal rules come from particular offenses, rather than one label covering every online harm. For this lesson, a computer can be a target, an instrument, or an incidental evidence source. We will explain all three roles and practice recognizing their overlap. A hospital outage, a phishing campaign, and a calendar record raise very different questions. We will then examine jurisdiction when an offender, provider, and victim are in different countries. Legal authority differs from practical access to a suspect or foreign evidence. International cooperation tools can help, with important procedural and rights protections. The United States uses computer, communication, identity, email, fraud, and other laws together. Each has its own conditions, rather than automatically applying whenever a device is involved. Our method is to classify the role, identify lawful authority, and then assess the actual criminal elements.
An Umbrella Term
A Working Classification Is Different From a Criminal Offense
There is no single worldwide cybercrime definition that settles every national offense or case. Agencies, researchers, statutes, and treaties use different scopes and categories. Some countries do have laws titled Cybercrimes Act, including South Africa’s Act nineteen of twenty twenty. That national title does not create one universal definition for every country. The United States uses several related statutes rather than one complete computer-crime code. A working classroom definition may include the computer as a target, tool, or source of evidence. This framework helps organize facts, but it does not itself create an offense. The applicable law supplies conduct, mental state, jurisdictional requirements, and other necessary elements. An assault case may involve relevant laptop evidence without becoming a hacking case. International agreements commonly identify offense categories, investigation tools, and cooperation duties. Keep the analytical label separate from the legal provision under which someone could actually be charged.
The Computer’s Role
Target, Instrument, and Incidental Roles Explain Different Problems
Start with the target role: the system or its data is attacked. The affected interests can be confidentiality, integrity, or availability. Confidentiality concerns access to information; integrity concerns its trustworthy condition; availability concerns usable access. Unauthorized intrusion, ransomware damage, denial of service, and website defacement illustrate different target harms. For the instrument role, a computer helps carry out a criminal scheme. Messaging or platforms can make deception faster, cheaper, or capable of reaching more victims. Examples include phishing, fraud, identity misuse, exploitation distribution, and unlawful online drug sales. Messaging can also be an instrument of conduct meeting a particular stalking or harassment offense. For the incidental role, the device supplies evidence without being the operative tool or target. A ledger of offline sales or an unrelated calendar entry can serve that function. These categories are useful, but not every researcher or agency uses identical wording. Describe the computer’s actual function and the protected interest, rather than memorize a label detached from the facts.
Overlap and Practice
One Scheme Can Target a System and Use Technology for Another Offense
A ransomware scheme illustrates overlap between target and instrument roles. Encryption or other damage attacks data and availability, while technology also supports an extortion demand. The relevant charges still depend on their own legal elements. Now consider a hospital network overwhelmed until its systems fail. That primarily illustrates a target role affecting availability, potentially with serious patient-care consequences. A bank-impersonation email campaign instead uses messaging as an instrument of deception. Later unauthorized account intrusion could add a target role to the same broader scheme. A laptop calendar discovered in an unrelated assault case illustrates an incidental evidence source. The calendar did not itself perform or suffer the assault. Messages found after an offline offense may likewise be evidence, while messages actively coordinating it can also be instruments. Function determines classification; the mere existence of a spreadsheet or text message does not settle its role.
Apply the Framework
Copying a Customer Database Requires More Than One Question
Consider an employee copying a customer database to a personal drive for sale to a competitor. Technology can be an instrument facilitating the transfer or theft of business information. The unauthorized disclosure may also attack confidentiality, giving the data a target role. Neither classification automatically establishes a particular legal charge. Investigators need to examine access, transfer, intent, protected information, harm, and the applicable offense. Confidential business information does not automatically meet every legal condition for a trade secret. Access authorization also needs careful treatment under the Computer Fraud and Abuse Act. In twenty twenty-one, Van Buren distinguished off-limits computer areas from improper use of information someone could access. Misusing authorized information is not automatically exceeding authorized access under that rule. Other offenses, contractual duties, or civil remedies may still apply. Explain the role and the legal elements separately, while recognizing that confidentiality harm can occur without deleting or damaging the database.
Jurisdiction
The Offender, Provider, and Victim May Be in Different Countries
Jurisdiction means the legal authority of a government or court to act on or hear a case. Geography remains important, but a digital scheme can involve several relevant places. Suppose an offender acts in Country A, a provider hosts infrastructure in Country B, and a victim suffers harm in Country C. Each location can create a possible connection under the relevant country’s law. That does not mean every country automatically has identical jurisdiction or remedies. Other lawful bases, such as nationality, may also matter in particular legal systems. Multiple governments can have overlapping claims to the same conduct. Having authority does not itself locate the person, obtain foreign records, or transfer a suspect. Traditional local cases can also cross borders, while digital networks make multi-location facts especially common. Cloud data may be distributed across systems, rather than sitting in one simple physical place. Identify the legal connections and practical barriers separately; the server’s location alone does not decide every evidence or charging question.
Cross-Border Cooperation
Authority, Evidence, Extradition, and Rights Are Separate Challenges
Cross-border enforcement involves authority, access to evidence, extradition, and rights protections. Extradition is a legal process for transferring a suspect between countries. A treaty or other legal arrangement, dual criminality, and relevant safeguards may be necessary. Dual criminality generally concerns whether the underlying conduct is criminal in both jurisdictions. An MLAT is a mutual legal assistance treaty for formal government-to-government cooperation. It can support requests for evidence or other assistance in a criminal investigation. Requests may be slow while electronic records change or expire, making lawful preservation and coordination important. But an MLAT is not the only possible evidence route. Domestic provider process, applicable direct cooperation, and qualifying Cloud Act agreements may sometimes be available. False accounts, distributed cloud data, VPNs, and Tor can complicate attribution; privacy tools also have legitimate uses. The available route depends on the actual countries, provider, information, authority, agreement, and procedural safeguards.
International Frameworks
Cooperation Treaties Need Implementation and Actual Legal Effect
International frameworks can help harmonize offenses and improve cooperation without creating one instant worldwide code. The Council of Europe’s Budapest Convention opened for signature in November two thousand one. It was the first international treaty on cybercrime, addressing offense categories, investigation, and electronic evidence cooperation. Participating countries implement obligations through their own legal systems. The United Nations Convention against Cybercrime was adopted in December twenty twenty-four. It opened for signature in Hanoi in October twenty twenty-five, when seventy-two states and the European Union signed. The UN depositary register confirms it is not yet in force as of October eighth, twenty twenty-six. Entry requires ninety days after the fortieth instrument of ratification, acceptance, approval, or accession. Signature alone differs from formal consent to be bound. A regional organization’s deposit does not add to the deposits of its member states for that threshold. Participation, domestic implementation, reservations, applicable provisions, and rights safeguards still determine how cooperation actually works.
CFAA: 18 U.S.C. 1030
The Core Federal Computer Law Covers Specified Access, Fraud, and Damage
The Computer Fraud and Abuse Act, or CFAA, is a core federal computer-crime statute. It expanded earlier nineteen eighty-four offenses in nineteen eighty-six and has been amended repeatedly. Specified provisions cover access without authorization or exceeding authorized access to obtain covered information. Other provisions concern computer-related fraud, with their own access, intent, and value conditions. Different damage branches require different combinations of access, mental state, damage, loss, and related conditions. They can address serious interference with data or availability. Specified password trafficking and computer-related extortion provide additional tools. The protected-computer definition includes relevant government or financial systems and computers affecting interstate or foreign commerce or communication. That definition can be broad, including relevant foreign systems, but each charged offense still needs its elements. An unpleasant message or improper purpose alone is not automatically a CFAA crime. Treat the statute as a set of defined provisions, rather than a general prohibition on everything unethical involving a computer.
ECPA, 1986
Communication Privacy Includes Interception, Storage, and Noncontent Records
The Electronic Communications Privacy Act, or ECPA, was enacted in nineteen eighty-six. It updated interception protections for electronic communications and created related privacy rules. Title One amended the existing Wiretap Act, concerning covered interception and related conduct. Title Two is the Stored Communications Act. It addresses covered unauthorized access to provider-held communications, plus disclosure and government-access rules for communications and records. Title Three addresses pen registers and trap-and-trace collection of specified noncontent information. That differs from collecting the contents of a conversation or message. Interception and storage are useful central distinctions, but ECPA has three titles rather than only two. Provider type, timing, contents versus records, authority, consent, and applicable exceptions can matter. The word email alone does not resolve every privacy issue. These laws regulate investigative access as well as unlawful conduct, so proper evidence process is part of a valid response.
Other Federal Tools
Identity, Commercial Email, Fraud, and Restitution Add Different Protections
Other federal laws add identity, commercial-email, fraud, and restitution protections. The nineteen ninety-eight identity-theft law created an offense involving another person’s identification without lawful authority. Knowing transfer or use and intent to commit or assist covered unlawful activity were required. The two thousand three Can Spam Act regulates commercial email and includes specified deceptive bulk-message crimes. Criminal provisions have particular conditions, distinct from general civil email-compliance requirements. The two thousand eight enforcement and restitution law expanded computer and identity-related provisions. For specified identity offenses, restitution can include the value of time reasonably spent remediating harm. General wire fraud can address a financial scheme alongside access or identity violations. State computer-crime laws provide another possible layer, with their own requirements. A phishing scheme may involve fraud, qualifying identity misuse, and actual unauthorized account access. Prosecutors combine statutes only when their elements fit; simply sending an email does not prove every possible charge.
Review and Apply
Explain the Role, the Authority, and the Actual Offense
For review, explain why cybercrime has no one universal definition. The label covers different categories and national rules, even where a country has a Cybercrimes Act. Second, classify the employee’s database copying and explain the reasoning. Technology can be an instrument of information theft, while unauthorized disclosure can also affect the target’s confidentiality. Access and protected-information requirements need separate legal assessment. Third, explain three possible jurisdictional connections: offender conduct, provider infrastructure, and victim effects. Each claim depends on the country’s applicable legal rules. Fourth, explain how an MLAT supports formal foreign assistance, with possible delays and safeguards. Other lawful evidence routes can also exist. Fifth, explain why the CFAA is a gap-filler alongside identity, communications, fraud, and state laws. Classify the computer’s role, identify lawful authority and evidence process, then assess the actual offense rather than assume overlap guarantees conviction.
About Ethics in Technology at UPI Study
Ethics in Technology (Computer Science 195) is a self-paced online course of 116 video lessons in 15 chapters, from cybersecurity basics, privacy and surveillance to big data, hacking, malware, network defense, intellectual property, cybercrime, encryption, emerging technology and digital citizenship. It carries a NCCRS credit recommendation for 3 semester credits.
Every lesson transcript is free on pages like this one, and the videos are free with a free UPI Study account. Enrolling adds a practice quiz after each lesson, the graded work and final exam that earn the credit, lifetime access, and an official transcript on completion. UPI Study has helped over 130,000 students with college credits. ACE and NCCRS have over 2,100 cooperating colleges that will consider accepting credits; the final decision is with the universities.
Enroll now → Course details Download the syllabus All Computer Science courses
Compare: Cybersecurity vs Ethics in Technology · Which ethics course?
Why take it here
Why students take Ethics in Technology with UPI Study
Where the credit goes
Universities that work with NCCRS
Ethics in Technology carries a NCCRS credit recommendation. These universities work with NCCRS; some are UPI Study's signed partners. ACE and NCCRS have over 2,100 cooperating colleges that will consider accepting credits; the final decision is with the universities.
Thomas Edison State UniversitySigned partner
University of the PeopleSigned partner
Charter Oak State CollegeSigned partner
Strayer UniversitySigned partner
Columbia Southern UniversitySigned partner
Indiana TechSigned partner
Penn StateWorks with NCCRS
Southern New Hampshire UniversityWorks with NCCRS
SUNYWorks with NCCRS
+many more cooperating universitiesFind my college →Find my college → Not listed? Ask Athena in the corner of this page, or book a 15-minute call.
FAQ
Questions students ask us
About What Counts as a Crime When It Happens Through Computers and Digital Networks
What are the three roles a computer can play in a crime?
Is there one legal definition of cybercrime?
Who has jurisdiction over a cybercrime that crosses borders?
What is the Budapest Convention on Cybercrime?
About the Ethics in Technology course
How many college credits is Ethics in Technology?
How much does Ethics in Technology cost and what is included?
Which universities accept UPI Study credits?
How long does Ethics in Technology take?
How are the exams done?
How do my credits reach my college?
Ready for the full course? Earn 3 credits in Ethics in Technology.
116 video lessons, a quiz after each one, and the graded work that earns the credit. Recommended for credit by NCCRS.
3 credits · NCCRSEnroll →