Ijeoma Oluo was boarding an early morning flight at Boston's Logan Airport when she got a call from a number she didn't recognize. A 911 dispatcher from Washington state was on the line: someone had reported a double murder at the author and activist's home.
Oluo was almost certain she'd just been "swatted," meaning someone had made a false report of extreme violence at her residence to prompt an overwhelming response by law enforcement. The term comes from the acronym for the Special Weapons and Tactics (SWAT) teams that deal with active shootings, armed robberies or hostage scenarios.
Oluo told the dispatcher her 17-year-old son was home alone, and that no guns were in the house. Even so, she panicked. Having written about encounters between police and people of color, she was acutely aware of what could go wrong.
"I was terrified they were going to come in guns blazing. I was bawling," she said. "To send cops to the home of a black person — expecting dead bodies and guns — is really risking someone's life."
Anyone with a grudge and someone's address can make a 'swatting' call, but what was once a niche prank played by gamers has become a favored means of terrorizing famous, controversial and vulnerable people. It has also become more organized in recent years, with online forums and chat rooms dedicated to targeted attacks on individuals, including YouTube personalities, tech executives, activists, authors and journalists.
Law enforcement agencies and city officials around the country have responded with anti-swatting procedures and tools to blunt this weaponization of the 911 system. In Seattle, the police department has launched a three-pronged approach that includes special training for officers and 911 operators and — a first for the U.S. — a registry for residents who think they may become swatting targets. The registry gives first responders a warning that an emergency call about a violent situation may be a hoax.
After a year of honing these procedures, Seattle police are sharing their know-how with law enforcement agencies throughout the country, while calling on lawmakers to make swatting a federal crime.
"This is not an accident. It's intentional behavior intended to punish people for who they are, where they work, the color of their skin," said Seattle PD's public affairs director, Sean Whitcomb. "It's happening every day in America. It's awful for us and it's awful for the community."
The sudden arrival of unneeded law enforcement officers can be defused quickly, but at worst, it can result in injury or death. In December 2017, California man Tyler Barriss made a hoax 911 call about a hostage situation at an address in Wichita, Kansas, that resulted in police fatally shooting an innocent man.
At the time of the fatal swatting in Wichita, Seattle PD was already dealing with "dozens of attempted swattings" every month, according to Whitcomb. Targets included executives at some of the high-profile technology companies in the city, which include Amazon, Facebook, Google and Apple, as well as video game streamers.
Swatting is not only a safety risk for targets, but also to police, both in terms of reputation damage and the costly waste of police time.
"Swatting can really tie up city resources," said Seattle resident Naveed Jamali, a former intelligence officer in the United States Navy Reserve who now co-chairs Seattle Police Department' Swatting Mitigation Advisory Committee. "Then from a human perspective, there's a huge risk of violence. So there's a huge liability potential to the city and it's also weaponizing a police force against private citizens."
In June 2018, a Seattle resident who feared a Wichita-style tragedy asked the department to pre-register his address as a swatting risk. The request gave Whitcomb the idea for a city-wide registry, and the registry became part of a unique three-pronged protocol. In September, the police department also established the swatting advisory committee, which includes police, prosecutors, and 911 dispatchers, as well as gamers and tech workers from the city's large tech community.
Announced in October 2018, the Seattle swatting protocol includes two training measures already used in some cities, including Los Angeles, where swatting of celebrities has occurred sporadically for years. As in L.A., Seattle police teach workers in the 911 center to identify potential swatting calls, and ensure responding officers are aware of the potential for a hoax and take a cool, cautious approach to potential confrontations.
The most innovative part of the protocol, the registry, lets members of the public pre-register their addresses and contact details in an online database via a secure portal. To date, the city has registered 57 profiles of people who believe that they may be swatted. So far, four of them have been targeted by swatters.
The Seattle protocol has already been replicated elsewhere, including Wichita. Earlier this month, representatives from Seattle PD spoke to the New York Police Department to discuss a joint working group dedicated to swatting, sources familiar with the matter told NBC News.
Seattle's police chief Carmen Best told NBC News she was "reaching out to all my networks" including the International Association of Chiefs of Police's Human and Civil Rights Committee to try and bring other agencies on board.
In September, NBC News toured Seattle's 911 center to observe a simulated emergency call to an address that was flagged as a swatting risk.
When the call came in, the dispatcher entered the address into her computer and a red box appeared on screen containing the all-caps warning "SWATTING CONCERNS." The message urged the dispatcher to check the profile for the property, pre-registered by the target via the secure portal, for additional information and contact details.
Even if an address isn't pre-registered, dispatchers are trained to look for clues that a call might be swatting. One indicator that a call about a shooting or other violent incident might be bogus is if it comes via the department's non-emergency phone line rather than 911.
If necessary, the dispatcher can then alert responding officers to the potential for swatting. Officers will still typically respond to the call but they will deprioritize it or change their tactics.
"They are showing up to verify everyone is safe, not showing up with the assumption that this is Point Break," said Whitcomb, referring to an iconic action movie featuring violent bank heists.
Oluo was one of the first test cases. A few weeks before she was swatted, she found out her contact details and social security number had been posted to a website dedicated to this type of harassment. She told NBC News that she called the police departments in Seattle and Shoreline, the suburb where she lives, to warn them that she might be targeted.
When the swatting call came in, emergency dispatchers saw her address was a swatting risk and called ahead, using the number uploaded to the registry, to gauge the legitimacy of the claims made by the 911 caller.
Six officers, four of whom were armed with rifles, still showed up at Oluo's home at 6 a.m. But because they knew the address was a swatting risk and had spoken to Oluo, they came to the door without their rifles drawn. They asked her son Malcolm some questions and swept the house to verify no one had been killed. It was all over within minutes.
"It would have been a very different response if I hadn't pre-registered," said Oluo. "Just knowing the cops are coming makes a huge difference."
In June this year, another black journalist on the other side of the country found out what the police response can be like without anti-swatting measures. Leonard Pitts, a Pulitzer Prize-winning nationally syndicated columnist who is often critical of right-wing stances, was swatted at his home outside Washington, D.C.
Pitts told NBC News he was roused by a phone call from local police in the early morning hours on June 30. They had received a report he had shot and killed his wife and was threatening to kill police officers.
"At that point my wife sat up in bed and asked what was going on," he said. "I told her, 'I've killed you.'"
Police officers ordered Pitt to exit his home, kneel, and put his hands on the back of his head. He did so — still wearing his Captain America pajamas — and was handcuffed and escorted to a police car.
The police searched his house and quickly realized his wife was not dead.While the situation was resolved peacefully, it has renewed Pitts' concern for his personal safety.
"It boiled down to getting me killed by the cops," he told NBC News. "I'm not exactly Billy Badass with a gun here, but they may not have seen it that way."
From 'doxxing' to 'swatting'
The swattings of Oluo and Pitts both appear to have stemmed from a site on the dark web dedicated to publishing the personal information of targets — a practice known as "doxxing" — and tracking when they have been successfully swatted.
NBC News is declining to name the website, which is under investigation by multiple agencies including the FBI, NYPD and HSI, to avoid amplifying its message and incite further targets.
The site, reviewed by NBC News, appears to feature the contact details of hundreds of people from all walks of life including gamers, Facebook employees, academics, activists and journalists including Oluo and Pitts. Among the more high-profile individuals listed are former president George W. Bush, conservative commentator Ben Shapiro, TV host Jimmy Kimmel, actor Robert De Niro and Gina Haspel, head of the Central Intelligence Agency.
The website is accessible via Tor, a specialized browser designed to obscure one's digital trail that can be used for a variety of purposes.
Information about people on the list often includes home addresses, emails and phone numbers. It also sometimes lists information about relatives. It's not clear where the information is collected, but some of it is available on commercial databases.
In chat-logs from the site reviewed by NBC News, users encourage each other to swat journalists as well as unsuspecting live-streamers, trade tips on disguising their voices and evading police detection, and celebrate when one of their targets is visited by police.
Each time a person has been successfully swatted, the site marks that person's entry with a distinctive icon — a gun — and links to media coverage about that incident.
Other victims whose swattings have been noted on the site include Edward Carswell, a New York state "Doomsday prepper" known as "Prepper Nurse;" a trans woman YouTuber known as Rosie O'Kelly, who lives in Santa Rosa, California, and a top Facebook executive.
Once a person is listed on the site, they can be targeted repeatedly.
Oluo faced a second threat, possibly by the same person, against one of her public book events. The call, portions of which NBC News has heard, contained racist and violent threats against her.
Again, Seattle police reacted cautiously, sending plain-clothed police officers to the venue to determine whether the threat was real without creating panic. No real threat was detected, but the incident was referred to a federal law enforcement agency.
On top of the 911 threats, Oluo had dozens of food delivery people showing up at her home requesting payment for pizza and Chinese food she hadn't ordered. Her phone messages were, she said, flooded with unsolicited "dick pics."
"It was a constant reminder we weren't safe," she said.
She has since changed her residence and her phone numbers.
The group behind the doxxing site is small — in the last year, the active chat users have hovered in the tens — but their potential to do harm is outsized. And while trolls and secret harassment campaigns have been a fact of online life nearly as long as the internet been around, this group is operating in a time where online attacks on journalists and activists are common, and encouraged by the highest office.
"One thing you can say about those kinds of bad actors is that they're fundamentally opportunistic," said Whitney Phillips, an assistant professor of communication and rhetorical studies at Syracuse University who has written books on the history and evolution of online trolls and harassment. "They're operating in a climate where: Who's going to cry when journalists get attacked?"
Phillips explained that the doxxing site and chats were "a more violent articulation" of previous online harassment campaigns against journalists, including one waged early in 2019 in which trolls, and eventually even Donald Trump Jr., barraged Twitter accounts belonging to recently laid-off journalists with the message "Learn to Code," then denied any connection to the wave of death threats and gore that accompanied many of the messages. "It's precisely the kind of climate where attacks against journalists are not going to elicit very much sympathy by a significant percentage of the population."
Despite her ordeal, Oluo remains undeterred in her activism and writing.
"I'll acclimate to this level of terrorism because that's what you do when you do this work," she said.
"This is par for the course, especially in a political environment as toxic as we are living in now," he said.
'A serious crime'
While swatting has been a known scourge for years, it is notoriously difficult to investigate, charge, and prosecute at either the local or federal level.
In most states, it is a misdemeanor to make a false 911 call. At the federal level, there is currently no specific anti-swatting statute, although one was first proposed back in 2015. Officials have used other related laws to prosecute swatting suspects successfully, including obstruction of justice, access device fraud, interstate threats or extortion, computer misuse, and the malicious conveying of false information.
In the Wichita case, perpetrator Tyler Barriss ultimately pleaded guilty to dozens of federal charges, ranging from "conveying false information concerning the use of an explosive device" to "threats to injure in interstate commerce." He was sentenced to 20 years in jail in March this year.
Kevin Kolbye, who worked on numerous swatting cases during his nearly three decades as an FBI special agent, has estimated that swatting incidents have risen from 400 in 2011 to more than 1,000 nationwide in 2019. But he says it's difficult to know the true count because swatting isn't a category that is reported and recorded in the FBI's database of crime statistics.
"Most of that swatting is called a 'false police report' or could be a 'terroristic threat," said Kolbye, who is now the assistant chief of police for Arlington, Texas. "A lot of those aren't data that's grouped together where we have a real national focus."
The Seattle Police Department hopes to change that and has spent the last few months trying to define and quantify the problem so it can measure the success of mitigation efforts.
The Swatting Mitigation Advisory Committee combed through two years of records looking for hoax bomb threats or fake reports of shootings that led to a police response. Its analysis found that SPD received 63 swatting calls, which required 42 hours of officers' time.
To more easily capture this data in the future, the committee and police force are pushing to create a standardized definition of swatting that can be incorporated into the software it uses to log crimes. They are also inviting other major cities to adopt their definition and prevention measures.
"Without numbers, swatting incidents are being treated like one-off crimes instead of a concerted effort to silence political speech. It's being done nationally and internationally. We can't have individual police departments working on it," said Oluo.
The ultimate goal is to get congress to make swatting a federal offense.
"If we can speak a common language, we can hopefully press lawmakers to have a federal definition and have swatting become a set crime with set penalties," Whitcomb said.
"It's not a hoax. It's not a prank. It's a serious crime that can have extremely detrimental effects," added Best.