Swatting and Hoax Threat Notification Templates
Swatting is a false emergency report — typically a claim of shots fired — made to bring an armed police response to a specific address. Schools are targeted in waves, often several in a county on the same morning. Nothing happens at the school and everything happens to the people in it: officers enter with rifles, students are searched, and the district then has to explain that it was fake without implying anyone overreacted.
| Message | Audience | When | Channel | The sentence that must appear |
|---|---|---|---|---|
| Response in progress, cause unconfirmed | Affected school families | Within 15 min of police arrival | SMS + voice + email | "Do not come to the school. We do not yet know what prompted the response." |
| Confirmed hoax all-clear | Affected school families | Immediately on clearance | SMS + voice + email | "Police found no threat. The report that brought them here was false." |
| Message to staff | All staff at the school | 5–10 min before the family all-clear | Email + SMS | "You will be asked about this by families. Here is exactly what you may say." |
| Families at unaffected schools | Rest of the district | Within 30 min | Email, SMS if the wave is live | "Your school is operating normally. You may hear about [SCHOOL]." |
| Multi-school wave notice | Whole district | On the second confirmed call | SMS + email | "Several schools in the area have received the same false report today." |
| Statement to media | Press | After the family all-clear, never before | Written statement + PIO | "The call was false. Questions about the investigation go to [AGENCY]." |
| Day-after letter | Affected school families and staff | Next morning | Email + backpack copy | "Counsellors are at the school today and here is how to reach them." |
Sequencing is the discipline. Staff before families, families before media, affected school before the rest of the district — and the all-clear the moment it is available, never held to a scheduled update slot. Districts that get the order wrong spend the afternoon explaining the order rather than the incident.
The in-progress message, before you know it is a hoax
At the moment police arrive you do not know it is false. Write as though it might not be, because a message that assumes a hoax and turns out to be wrong is unrecoverable.
Subject: Police response at [SCHOOL] — what we know at [TIME]
[AGENCY] is at [SCHOOL] responding to a report received at [TIME]. Officers are inside the building. Students and staff are following [LOCKDOWN / SECURE] procedures.
We do not yet know what prompted the report and we are not going to speculate. We will tell you what we learn as soon as we are cleared to.
Please do not come to the school and please do not call the office. Officers need clear access and our phone lines need to stay open. If you are already near the school, please leave the area.
Our next update will be by [SPECIFIC TIME], whether or not anything has changed.
Note what is absent: the words hoax, swatting, false alarm, drill, and any reassurance you cannot support. "There is no danger" is not available to you yet, and saying it before officers have cleared the building is how a district loses the room for the rest of the day.
The confirmed-hoax paragraph, written for parents who saw the rifles
This is the hard one. Two things must be true at once: the report was fake, and the police response was correct. Districts that emphasise the first at the expense of the second end up implying that armed officers entered a school unnecessarily, which is both unfair and frightening.
Police have completed their search of [SCHOOL] and found no threat of any kind. The call that brought them here was false. This appears to be what is often called "swatting" — someone deliberately making a false emergency report to trigger a large police response to a specific address.
We want to be direct about what that meant inside the building. Officers entered quickly and with weapons drawn, because that is the correct response to a report of shots fired and there is no way for them to know a call is false until they have checked. Students in [AREAS] saw that. Some were searched. Nobody did anything wrong — not the students, not the staff, and not the officers, who did exactly what we would want them to do if the call had been real.
What was not real was the call. We are angry about it on your behalf and [AGENCY] is investigating who made it.
Counsellors will be available at [SCHOOL] [WHEN AND WHERE]. Some children will be fine by dinner and some will not, and both are normal. If your child is struggling tonight, please contact [NAME] at [NUMBER]. The 988 Suicide & Crisis Lifeline is available at any hour by call or text to 988.
Send the all-clear the moment you have it. Good news is the one message you never hold for a scheduled update slot.
Multi-school waves, and the day after
Wave sequencing. Swatting callers frequently work through a list — a county's high schools, or a set of districts in alphabetical order. If a second school is hit, assume more are coming and change your posture:
- Message the affected school first, in full.
- Message the whole district next, briefly, naming the pattern: "several schools in our area have received the same kind of false report today". Naming the pattern early is what stops the rumour that your district is being singled out.
- Give principals at unaffected schools a pre-approved paragraph before their phones start ringing, so nine buildings are not improvising nine slightly different answers.
- Coordinate with the county or neighbouring districts on timing. A joint or aligned statement is far stronger than five districts contradicting each other on whether the calls are connected.
The day-after letter. Short, and about people rather than logistics. Name what happened in one sentence. Name that it was false. Say what support is available today, where, and until when. Say what has changed, if anything — and if the honest answer is that nothing needs to change because the protocols worked, say that instead of inventing a measure. Add one paragraph for families on talking to children: children take their cue from the adult's steadiness more than the adult's explanation, questions should be answered plainly, and sleep disruption for a few nights is ordinary. Rumour control matters heavily here, because video of an armed entry circulates for days after the incident is over.
NASP publishes guidance on supporting students after a threat or a police response, and the National Center for School Crisis and Bereavement has material for staff who are themselves shaken. Route anything a family raises about a student in distress to the district's mental-health lead. Your own crisis plan, your counsel and the law-enforcement PIO of record govern what may be said about an active investigation.
Questions people actually ask
What is swatting and why do schools get targeted?
Swatting is a deliberately false emergency report — usually a claim of shots fired — made to bring a large armed police response to a specific address. Schools are targeted because the response is guaranteed, immediate and highly visible, and because callers frequently work through a list of schools in a county on the same morning. Nothing is happening at the school; a great deal is happening to the people inside it.
Do we tell parents the threat was a hoax, and how soon?
Yes, and immediately on clearance rather than at the next scheduled update. Word it so that two things are true at once: the call was false, and the police response was correct, because officers cannot know a report of shots fired is fake until they have checked. Districts that stress the falseness alone leave families believing armed officers entered a school for no reason.
Should unaffected schools in the district be notified?
Yes, within about thirty minutes, and earlier if a second school is hit. Families across the district will hear a version of it from students and social media within the hour. A short message saying your school is operating normally, and that you may hear about another building, costs nothing and prevents nine principals improvising nine different answers to the same question.
How do we address students who saw an armed police response?
Name it plainly rather than skipping past it: officers entered quickly with weapons drawn, some students were searched, nobody did anything wrong. Have counsellors on site the following day and say in the letter where they are and until when. Tell families that a few nights of disrupted sleep is ordinary, give them a named contact, and include the 988 Suicide & Crisis Lifeline. Route any student your staff are worried about to the district's mental-health lead.
One price. Every feature. Locked for three years.
$3.50 per student per year under 5,000 students. No tiers, no add-on modules, no per-message fees. Published on the site because you should not have to book a call to learn a price.