Doxbin Admin Jailed for Encouraging Swatting

How the attack worked

A Welsh Doxbin administrator, Callum Dare, was jailed for encouraging and assisting others to carry out swatting hoax calls in the UK, US, and Canada. Dare did not make the calls himself. Instead, he used Doxbin's "#deadnet" channel to motivate others and shared montage videos of police responses to encourage further attacks. The hoax calls themselves used extreme pretexts, including bomb threats, nail bombs, hostage situations, and claims of being armed with explosives, all designed to force an immediate, large-scale emergency response.

Why it succeeded

Each hoax call relied on urgency and violence to bypass normal verification. A caller with a fake Russian accent told the Los Angeles Police Department that bombs were placed under chairs in a University of California lecture theater, causing an evacuation. Another caller told a Western Mail journalist he was armed with nail bombs and holding hostages at a named Cardiff hotel, which led police to close off and evacuate the street. In a third case, a caller claimed to be at a private address, having shot a victim and taken hostages while armed with explosives. In all three cases, the recipient had no practical way to verify the caller's identity or confirm the threat before responding.

What to watch for

• Callers who use extreme, violent claims (bombs, hostages, shootings) specifically to force fast action and prevent normal checks
• Use of accents, invented identities, or claimed on-scene presence to sound more credible
• Specific, verifiable-sounding location details (named buildings, hotels, addresses) used to maximize disruption
• No callback number or way to confirm the caller's identity beyond the threat itself

How to build resistance

Organizations that could plausibly receive one of these calls, including university administration, campus security, newsrooms, corporate communications, and hospitality front desks, benefit from a written playbook for handling bomb, hostage, or shooting claims. This should define who takes the call, what details to record (exact wording, caller number, claimed location), and how to escalate to police without amplifying unverified information further than necessary.

Because swatting depends on knowing where to aim a false threat, reducing the amount of personally identifiable information, especially home addresses, posted publicly about staff and executives lowers the chance that a swatting call can be targeted at a real person's location. Doxbin itself is described as a platform used to expose personal information specifically to enable harassment and swatting, underscoring why limiting exposed PII matters as a defensive measure alongside call-handling training.

What is swatting and how does it relate to social engineering?

Swatting is a hoax emergency call, such as a false bomb or hostage threat, designed to trigger an armed police response to a target's location. It relies on the same pressure and urgency tactics used in vishing attacks to bypass normal verification.

Who was Callum Dare and what was he convicted of?

Callum Dare was a Doxbin administrator convicted for encouraging and assisting others to carry out swatting hoax calls across the UK, US, and Canada, though he did not personally make the calls.

How did the swatting calls actually work?

Callers used pretexts like bomb threats, hostage situations, and claims of being armed with explosives, sometimes disguising their accent, to pressure police and organizations into immediate evacuation or armed response.

What can organizations do to prepare for swatting-style calls?

Build a written verification and escalation playbook for bomb, hostage, or shooting claims, train front-line staff to capture caller details without prolonged engagement, and reduce public exposure of employee addresses that could be used to aim an attack.