Insights / Schools

School Swatting Threats: What the New Federal Guidance Means for Your Team

By Warren Pulley · November 8, 2026

Swatting, a false report of an emergency meant to trigger a large police response, is now a routine problem for schools and colleges. The best defense is not to treat every threat as fake or every threat as real. It is a practiced process that lets a school act safely in the first minutes and sort hoaxes from genuine danger quickly.

What happened recently?

On October 29, a call to the Meriwether County, Georgia, 911 center claimed an act of violence was about to happen at Greenville Middle-High School. The response grew to all six schools in the county, which went into lockdown and released students early with extra law enforcement on each campus. On November 6, CBS News Atlanta reported the sheriff's office update: investigators determined the threat originated in Europe and was routed through multiple internet-based services to disguise its source. Investigators were still working to identify who was responsible.¹

That case fits a pattern. In January, Inside Higher Ed reported that at least four campuses received swatting calls on a single day, with closures, lockdowns, and an evacuation.²

What does the federal guidance say?

On September 25, 2026, the U.S. Departments of Education and Justice sent a Dear Colleague letter (GEN-26-04) to all educational institutions on swatting.³ It describes anonymized threats as a growing problem that often comes in clusters, notes that swatting communications can originate abroad, and lists federal laws a swatting incident may violate, including interstate threats, hoaxes, bomb threats, and computer fraud statutes. Its recommendations include:

• Educating faculty, staff, and administrators on the typical characteristics of swatting so false threats are detected sooner.
• Building a partnership structure between campus officials, campus security, and outside law enforcement, with clear lines of communication.
• Considering a multidisciplinary threat assessment team to help assess anonymous threats.
• Running tabletop exercises so leaders practice deciding, as quickly as possible, whether a threat is a hoax.
• Planning law enforcement notification and keeping police updated during an incident.
• Updating emergency communication protocols to cover swatting events specifically.
• Designating, in advance, the officials who will lead communications, notify police, and evaluate the threat.

Just as important, the letter warns institutions to keep controls that prevent them from falsely labeling a real threat as a swatting attempt.

My take: the hoax problem is a decision problem

Swatting works because it forces leaders to make a high-stakes decision with almost no information, under time pressure, in public. Sheriff Chuck Smith said it plainly in the Georgia update: even when a threat proves not credible, "we will never take chances when it comes to the safety of our children."¹ That is the right instinct. The goal is to keep that instinct and add speed and structure behind it.

In my experience, schools struggle less with the first protective step than with everything after it: who confirms, who talks to parents, when to release, and how to document. Those are questions a threat assessment team and an Emergency Operations Plan should answer before the call ever comes.

What should schools do now?

1. Write the law enforcement threshold down. Decide in advance which facts trigger an immediate police call and protective action. No one should improvise that under pressure.
2. Use a single intake path. Every threat, by phone, email, or social media, goes to one place, with exact words, times, and the receiving number or account recorded.
3. Pre-write your notifications. Draft lockdown, shelter, all-clear, and "threat determined not credible" messages now, and name who may send them.
4. Exercise the hoax scenario. Run a tabletop where the threat turns out to be false halfway through, and one where it doesn't.
5. Debrief every incident. Record what you knew, when, and what you decided. Patterns across incidents help investigators.
6. Look after people afterward. The guidance notes swatting causes real disruption and trauma. Plan support for students and staff, not just the all-clear.

Further reading from my books

For campus notification and crisis leadership, see Campus Under Siege. For intake forms, an imminent danger screen, and tabletop material, see The BTAM Case Workbook. For building and testing an Emergency Operations Plan, see The Prepared Leader. For the process behind a school assessment, read What Are the Steps in a School Threat Assessment?

Sources

1. CBS News Atlanta, “911 call that sent Meriwether County schools into lockdown came from outside the U.S., sheriff says,” Nov. 6, 2026
2. Inside Higher Ed, “4 Campuses Targeted in Latest Rash of Swatting Calls,” Jan. 23, 2026
3. U.S. Department of Education and U.S. Department of Justice, Dear Colleague Letter GEN-26-04, “Guidance to Educational Institutions on Swatting Threats,” Sept. 25, 2026

This is general information and commentary, not legal advice. Facts are as reported by the sources above on the dates shown.