FRONTLINEPRIVACY
Playbook · Swatting

Active swatting threat

For anyone whose work draws this kind of threat — sworn officers, judges, federal agents, public-facing professionals. You have credible reason to believe a swatting call is coming or is happening right now. Action checklist, in order, no preamble.

If anyone is in immediate danger, call 911. The steps below are for the next hour and the next 72 hours — limiting what a follow-up attempt can use. Whether the badge is on your hip, your robe, or your hospital ID, the threat shape is the same.

First 15 minutes

  1. Get the family to a known room.

    Pick the room everyone goes to in any home emergency. Phone with you. Door locked.

  2. Call your local dispatch directly.

    Not 911. Your dispatch supervisor or watch commander — or for non-LE, the local PD non-emergency line and ask for the watch supervisor. Tell them you have a credible swatting threat at your address and to flag any inbound call as suspect until cleared.

  3. Document the source.

    Screenshot any threat post, message, or call log. URL, timestamp, account name, full text. Save copies before anything gets deleted.

Next 60 minutes

  1. Loop in your chain of command.

    Supervisor, CO, chief, court security, hospital security — whoever runs threat response on your side. Most agencies have a threat-assessment liaison or watch supervisor for exactly this. Get them on the phone.

  2. Notify household members at other locations.

    Spouse at work. Kid at school. Parent across town. The same data that found your address can find theirs.

  3. Put the platform on notice.

    If the threat came from a social-media post or forum, file the takedown immediately citing the specific policy violation. Most platforms act on documented swatting threats within hours.

Today

  1. File a formal report.

    Even if you are on the job yourself. The report creates the paper trail that supports federal charges later. Federal prosecutors have started taking swatting cases more seriously when the documentation is clean.

  2. Get the dispatch flag in writing.

    A "watch for swatting" entry tied to your address that requires confirmation before any SWAT-level deployment. Confirm it is logged.

  3. Tell the kids' school and the spouse's workplace.

    They need to know to flag unfamiliar callers and pickups. Most school offices and HR departments will document any unfamiliar contact on request.

This week

  1. Run a free scan on the household.

    See the free scan. The result tells you which broker pages currently carry the address — the same pages a swatter pulled from. Your name, your spouse, your parents.

  2. Start the broker cleanup.

    Either DIY across the major brokers or have us run continuous coverage. Either way, the address-removal step is the upstream protection that breaks the chain.

  3. For NJ residents, file Daniel's Law demands.

    See Daniel's Law. $1,000 per violation in statutory damages if a broker fails to remove within ten business days.

If it escalates

  1. Loop in federal prosecutors.

    Swatting is a federal crime under several statutes. The local US Attorney's office or FBI field office is the right channel when the original local report is not producing movement.

  2. Move temporary if the threat is sustained.

    Some departments and agencies have a relocation protocol for personnel under sustained credible threat. Use it without shame. If yours doesn't, a hotel for a week is on you but worth it. The data trail does not follow you there.

How we prevent it next time

  1. Continuous broker cleanup.

    A one-time opt-out is a delay, not a fix. Most brokers re-list within 3-6 months. We re-check every two weeks across 200+ broker sites and re-file the same day you reappear.

  2. Sweep the household.

    Brokers link you to spouse, parents, and adult kids on the same page. Closing one address closes the others. Family swatting (call placed to a sibling's or parent's address) follows the same data trail.

  3. Keep the dispatch flag current.

    Annually confirm with your dispatch that the watch entry is still active. If you move, update it.

For continuous broker cleanup that prevents the next attempt, run a free scan.