People’s overdependency on the Internet has given rise to an increasing number of cybercrimes. To help combat these cybercrimes, it is essential to understand factors that can make people vulnerable and susceptible to such crime. Specifically, we focus on phishing attacks, which are increasing in frequency and can have many negative impacts on their victims. Thus, we seek to answer the question: What are the determinants for susceptibility for phishing attacks? Drawing on emotional congruence theory, our work-in-progress study not only examines the direct impacts of individual emotion, and emotional framing of phishing attack, but also focuses on the interactive impacts of the two factors. We will conduct both online and lab experiments to investigate the above research question. We contribute to the human computer interaction (HCI) literature by offering insights on how message design of phishing attack can interplay with individual emotion to influence an individual’s phishing susceptibility.