This study tests the assumptions of the routine activity theory on three online forms of victimization: computer virus, online fraud, and unauthorized use of personal data. Data come from a representative victimization survey conducted in the Swiss city of Lugano from January 2019 to April 2019. The analysis resulted in the following conclusions. First, victims are more common among regular internet and social media users, independent of the type of crime. Second, the installation of an antivirus program is more likely to work as a protective measure to detect and disarm digital threats rather than a preventive measure that reduces the opportunity for crime to occur. Third, computer literacy is associated with a lower risk of malware victimization. Fourth, users’ characteristics partially reflect differences in internet consumption. These findings are consistent across different specifications.