What is swatting, and why does your home address make it possible?
- Swatting is the use of a fake 911 call to send armed police to a target's home. The attacker reports a bomb threat, active shooter, or hostage situation. Police arrive expecting armed resistance. The target opens the door to a tactical response.
- Documented deaths: Andrew Finch, 28, was killed by Wichita police responding to a swatting hoax in 2017. Multiple non-fatal injuries since.
- The swatter needs your home address. They find it on people-search and data broker sites in seconds. Getting your address off those sites is the privacy lever that matters most.
The mechanics
A swatting attack is procedurally simple. The attacker:
- Identifies the target and obtains their current home address (usually from a data broker site).
- Spoofs their caller ID to appear local to the target's jurisdiction.
- Calls 911 (or a local non-emergency line, which is often easier to spoof) and reports a severe ongoing emergency: hostage situation, active shooter, bomb threat. Sometimes they claim to be the target reporting suicidal ideation or threatening violence themselves.
- Police dispatch responds with the level of force appropriate to the reported threat — often a SWAT team or armed tactical unit.
- The target, often asleep or unaware, opens the door or is confronted in their home by armed officers expecting hostile resistance.
The danger lives in step 5. Police arriving with the expectation of armed hostility behave differently than police responding to a routine call. Reaction times are faster, force escalation is quicker, ambiguous behavior is more likely to be interpreted as threatening. The Andrew Finch case is the canonical fatal example: a 2017 swatting call about a fake hostage situation in Wichita ended with Finch shot dead in his doorway after opening the door to confused officers.
Documented cases
The swatting-to-harm pipeline is documented in named cases, not theoretical:
- Andrew Finch, Wichita, 2017. Killed by police responding to a hoax call placed by a gamer in California after a $1.50 dispute in an online game. The caller, Tyler Barriss, received a 20-year federal prison sentence.
- Brian Krebs, journalist, multiple incidents 2013-present. The cybersecurity reporter Brian Krebs has been swatted multiple times by adversaries angered by his investigative work. None resulted in physical harm, partly because Krebs had pre-registered his address with local police.
- Multiple judges and prosecutors, 2023-2025. Federal and state judges presiding over high-profile cases (including January 6 prosecutions, Trump-related cases, and others) have been swatted in coordinated campaigns. The 2022 Daniel Anderl Judicial Security Act addresses some of this through federal-judge address-confidentiality measures.
- Streamers and content creators. Twitch streamers, YouTubers, and online personalities have been routinely swatted, sometimes live on stream. Most of these cases involve teenage perpetrators using swatting as harassment.
- Election officials, 2024. Several Secretaries of State and county election supervisors were swatted during the 2024 election cycle, in many cases on Christmas Day. The targets included Maine SoS Shenna Bellows after she ruled on a ballot-eligibility case.
The 2024-2025 swatting-as-a-service wave
Until roughly 2022, swatting required some level of skill: spoofing a caller ID, crafting a convincing emergency narrative, knowing what gets dispatch to send a tactical response. The skill barrier filtered the perpetrator pool.
That changed. Underground services emerged that accept payment (often crypto) to swat a named target. The buyer enters a name and address; the service handles the rest. The 2024-2025 wave drove a substantial volume increase in swatting calls targeting public officials, journalists, and streamers. Federal action has taken down some of these services; more keep appearing.
Swatters need your address. People-search sites publish it. Removing it from those sites is the most actionable step most people can take right now.
Run my free exposure scan →Why your privacy footprint matters
Swatting requires three pieces of information about the target:
- Full legal name. So the caller can name you in the fake emergency report.
- Current home address. So dispatch sends police to your actual location.
- Sometimes context (your work, family, schedule) to make the false emergency report more credible.
All three come from data brokers. The first piece is free on every people-search site. The second is the rate-limiting one — without your current address, the swatting attempt fails. The third is gravy that increases the call's credibility.
Removing your current address from broker sites doesn't eliminate the risk — a determined attacker can find it through other channels (voter rolls, property records, social media slip-ups). It does eliminate the trivial path. A would-be swatter who has to spend hours researching is more likely to give up or pick a different target than one who can search "Jane Doe, Boston" on a people-search site and get an answer in five seconds.
Proactive defenses
If you have reason to think you may be at elevated risk — you're a streamer, a public-facing professional, a journalist covering controversial topics, a judge, an elected official, or someone who's been targeted before — several proactive steps:
- Register with your local police's swatting registry. Many departments now maintain a flagged-address system. When a 911 call comes in for a flagged address, dispatch knows to verify before dispatching tactical response. Contact the police non-emergency line; ask if such a system exists.
- Remove your address from data brokers. The privacy lever that matters most. Our hub covers this.
- Use an Address Confidentiality Program (ACP) if you qualify. Most states have programs for victims of stalking, domestic violence, sexual assault, and similar threats. Members can use a substitute state-provided address on public records.
- Consider a mail-forwarding service. A private mailbox or registered-agent service provides a separate mailing address that doesn't tie to your home.
- Audit voter registration. Some states allow address confidentiality for at-risk voters. Inquire.
- Audit property records. County recorder sites publish home-purchase records. Some states allow attorneys to file deeds in a trust name to obscure ownership.
If you're being swatted
If you have any reason to believe police are arriving in response to a hoax call:
- Make yourself visible and non-threatening. Hands clearly empty, in plain sight. No weapons in view. If possible, position yourself where officers can see you through a window or at the door with hands raised.
- Move slowly and predictably. Sudden movements during a tactical response are how people get hurt.
- Calmly state you've been swatted. Officers may already suspect this, especially if your address is on a flag list.
- Comply with commands. Argument and legal-rights discussion can wait. The first priority is de-escalating.
- Document after the fact. File a police report formally identifying the incident as a swatting hoax. Report to the FBI's IC3 (ic3.gov) for federal investigation. Preserve any digital evidence of who may have initiated it (chat logs, social-media threats, forum posts).
Where Delist fits
Delist removes your personal information from the internet — including the home address that makes swatting fast. We're filing removals across the people-search sites that publish your current address, and we keep pushing when listings come back.
That won't make you un-swat-able. A determined attacker has other paths. It does close off the trivially easy path that drives most swatting volume.