Turning the Tables on SWATTING

LEVERAGING TECH TO DETECT AND DIFFUSE THREATS

Swatting: making false emergency calls to dispatch armed response teams to unsuspecting locations. This malicious prank, initially within the gaming community, evolved into a significant threat affecting schools, businesses, and public venues. This dangerous practice endangers lives, strains emergency response resources, and disrupts operations. As the problem worsens, it has become imperative for Facility IT and Security Directors to understand the origins, implications, and preventive measures of swatting to safeguard the environments within their institutions.

Swatting emerged in the early 2000s within online gaming and hacker communities. Players would make false emergency calls, leading to SWAT teams raiding their opponents’ homes during live-streamed gaming sessions. This disrupted the victim’s gameplay and gave the perpetrator the thrill of witnessing the chaos unfold in real-time. [i]

Swatting Goes Mainstream

Over the past several years, swatting has transcended its gaming roots, targeting a broader range of institutions. Schools, businesses, and public venues have all fallen victim to these dangerous hoaxes. For instance, in December 2017, the Federal Communications Commission (FCC) received a bomb threat during an open meeting, leading to an evacuation and heightened security measures. The individual responsible, Tyler Barriss, was later charged and pleaded guilty to multiple swatting incidents, including the FCC threat. [ii]

Law enforcement agencies, notably the FBI, have intensified efforts to combat swatting, resulting in more arrests, with credit given to establishing a national database to track swatting incidents and enhancing information sharing among local police agencies. [iii]

Still, despite these initiatives, swatting incidents have continued to surge, affecting a broader array of targets. These include schools, businesses, and even public figures. For instance, in the 2022-2023 school year, 63.8% of all violent incidents in schools were false reports of an active shooter, marking a sharp 546% increase from the 2018-2019 school year. [iv]

This trend underscores the need for organizations to implement robust preventive measures and improved and potentially retooled response protocols to mitigate the specific risks associated with swatting incidents.

Guidelines for Businesses Facing Swatting Incidents

Facilities need to be prepared to react to potential swatting scenarios to ensure the safety of their staff and visitors and minimize operational disruptions. Law enforcement agencies recommend the following protocols:

  1. Develop a Response Plan: Establish a clear emergency response plan that includes evacuation procedures, lockdowns, and detailed plans for communication directly with law enforcement for various scenarios.
  2. Train Students and Employees: Regularly train staff on how to react during emergencies, emphasizing the importance of remaining calm and following established protocols and spontaneous directions from leaders.
  3. Establish Communication Channels: Maintain open lines of communication with local law enforcement, allowing the verification of threats and providing access to real-time visual information quickly and ubiquitously.
  4. Implement Access Controls: Enhance security measures such as remote access controls, surveillance systems, and a visitor management platform, allowing the monitoring and managing of who enters the facility and the locations they have visited.
  5. Reporting Suspicious Activities: Encourage employees to report suspicious behavior or communications promptly.

By implementing these measures, businesses can better prepare for potential swatting incidents and work collaboratively with law enforcement to ensure a swift and safe resolution.

Leveraging Technology to Assess and Validate Threats

Advancements in technology offer tools that can assist in assessing the validity of reported threats. For example, gunshot detection systems, panic alarms, and other Internet of Things (IoT) sensors can provide real-time data during an alleged incident.

In a genuine active shooter scenario within a school, one would expect to observe panicky behavior on surveillance cameras and receive alerts from gunshot detectors. The absence of such corroborative data, combined with only a single unverified threat reported, may indicate a higher likelihood of a hoax. While it’s crucial not to dismiss any threat outright, this additional context information can guide law enforcement and emergency responders to modulate their response appropriately, ensuring resources are allocated resources effectively without compromising safety.

The Role of 911inform in Addressing Swatting

911inform is a comprehensive notification and security management platform designed to bridge the gap between first responders and organizations during emergencies. Its interactive mapping interface provides real-time situational awareness, crucial in distinguishing between genuine emergencies and potential swatting incidents.

Interactive Mapping Interface

One of the standout features of 911inform is its interactive mapping interface. The system generates an emergency notification when a 911 call is placed, or an emergency event trigger is activated within a connected building or geofenced area. It delivers hyper-accurate location information of the originating sensor overlaid onto detailed floor plans integrated with Google Earth. This enables emergency response teams to quickly identify the exact location of the incident and assess the situation before arrival. This allows incident managers to stage equipment not immediately needed at the scene, close by, and ready to respond if needed.

Real-Time Data Integration

The 911inform platform easily integrates with existing IP-based camera systems, providing first responders with live video feeds during emergencies. This can minimize confusion and congestion of resources at the scene, especially when there’s no need for their response. This real-time visual information allows responders to assess the situation remotely, identifying signs of distress or confirming the absence thereof. In the context of a reported active shooter scenario, the lack of visible panic or gunfire detected by integrated sensors can indicate a potential swatting attempt, allowing responders to adjust their approach accordingly.

Connected Building Controls

911inform offers connected building controls, such as door access, intercom systems, and emergency strobe lights. First responders can remotely manage these systems during an emergency to secure the facility, communicate with occupants, and control building alerts. This level of control enhances the ability to manage genuine emergencies effectively and reduces the risks associated with swatting incidents by providing comprehensive situational awareness.

Swatting poses a significant and evolving threat to various sectors of society. By understanding its origins, recognizing its expansion into mainstream targets, and implementing procedural and technological countermeasures, institutions can better protect themselves and respond effectively to potential incidents. Advanced solutions like 911inform empower organizations to enhance their preparedness and response capabilities, providing first responders with the tools to accurately assess and respond to incidents, thereby mitigating the risks associated with false emergency reports.


At 911inform, the focus is on simplifying the delivery of safety information through innovative new data presentation to the ECC and managing that data by the Enterprise. We are setting a brand-new standard for emergency response data by leveraging advanced technologies and a user-centric approach. As the industry evolves, the importance of actionable, productive data will only grow, underscoring the need for continuous innovation and improvement in this critical field.

If you find my blogs informative, I invite you to follow me on X @Fletch911. You can also follow my profiles on LinkedIN and Facebook and catch up on all my blogs at https://Fletch.tv.

Thanks for spending time with me; I look forward to next time. Stay safe and take care.

Follow me on Twitter/X @Fletch911
See my profiles on LinkedIN and Facebook
Check out my Blogs on: Fletch.


© 2025, All Rights Reserved, Mark J. Fletcher, ENP
Reuse and quote permitted with attribution and UR


[i] adl.org

[ii] cnn.com

[iii] abcnews.go.com

[iv] eschoolsafety.org

Leave a Reply