PurposeDrawing on protection motivation theory (PMT), this study aims to explore the factors that enhance cybersecurity awareness among online banking users in Malaysia. More specifically, it investigates the influences of perceived vulnerability, perceived severity, technical knowledge, privacy intrusions and privacy awareness on perceived threats and then examines the effects of perceived threats, along with response efficacy and self-efficacy, on cybersecurity awareness, considering the moderating role of fear of cyberattacks.Design/methodology/approachA survey-based research approach was applied, and the hypotheses were tested using a sample of 324 respondents, employing partial least squares structural equation modeling (PLS-SEM).FindingsThe results show that perceived vulnerability, perceived severity, privacy intrusions and privacy awareness significantly influence perceived threats, while technical knowledge does not influence perceived threats. Furthermore, it was found that response efficacy and self-efficacy both enhance cybersecurity awareness, while perceived threats have no influence on it. Finally, our research confirmed the moderating role of fear of cyberattacks in the relationship between self-efficacy and cybersecurity awareness.Practical implicationsFor individuals, the study highlights the significance of fear, privacy awareness and response efficacy in shaping cybersecurity perceptions, paving the way for enhanced and tailored awareness programs. Moreover, the understanding of relationships between perceived threats, response efficacy and self-efficacy empowers individuals to craft personalized risk mitigation strategies, fostering confidence in navigating the digital landscape. Businesses can leverage the insights for informed design of employee training programs and data-driven decision-making in cybersecurity investments. Government entities, recognizing the nuanced relationship between perceived threats and cybersecurity awareness, are encouraged to formulate context-specific policies and foster cross-sector collaboration for comprehensive cybersecurity initiatives.Originality/valueThis research extends PMT by incorporating additional antecedent variables – namely, technical knowledge, privacy intrusions and privacy awareness within the online banking context that have been overlooked thus far. Furthermore, it delves into the unique role of fear of cyberattack as a moderating variable, thereby enhancing our understanding of PMT.