This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
An anonymous Telegram user known as 'Torswats' operated a paid service that used AI-generated voices to place fake bomb and mass shooting threats, known as 'swatting,' against schools and private residences across the United States. The automation allowed the perpetrator to scale these threats while obscuring their identity. The incidents resulted in school lockdowns and police raids, creating significant risks for first responders and the public.
Telegram channel Torswats offered paid service for and posted own recordings of false threats calls featuring AI-generated voices to direct armed law enforcement to raid locations of victims such as high schools, private residents, streamers.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The synthetic voices were used to generate highly toxic, threatening, and illegal content, including fake bomb threats and mass shooting claims.
The perpetrator used synthetic voices to run a commercial swatting service, targeting specific schools and individuals for financial gain and personal advantage.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by a human actor intentionally deploying synthetic voice technology to commit crimes and run a paid swatting service.
Added categories peak at 3: Substantial (Psychological Harm, Inferred)
An anonymous operator used AI voice synthesis to run a commercial swatting service, disrupting schools and targeting individuals across the US. While the incident caused localized panic and wasted emergency resources, its overall national security impact remains minor and manageable under standard law enforcement procedures.
The AI system was used as a tool by the human operator to convert text or direct inputs into synthetic speech in real-time, performing a specific, well-defined function without independent planning.
Risk Level 3. Limited Risk: The report describes the use of synthetic voice generation technology, which falls under the category of AI-generated content and deepfakes subject to transparency obligations.
The primary function of the AI system was to generate realistic, synthetic human voices to make threatening phone calls.
The report from Motherboard is highly detailed, providing direct evidence of the Telegram channel, specific call recordings, and official confirmation from the Dubuque Police Department regarding the use of synthetic voices.
None
Technology
Synthesized Voice Tech
Allows swatters to make threats at scale and hide their true voice.
Voice-over-Internet Tech
Enables callers to mask physical location and make untraceable calls.
Real-time Voice Generation
Enables the synthesized voice to respond dynamically to 911 dispatchers.
Data Inputs
Target Address Information
Addresses of schools and homes used as inputs to direct the swatting.
Voice Actor Data
Voice recordings targeted for harassment and synthesis.
Human Factors
Malicious Customers
Individuals like the 16-year-old ordering terrorism threats for money.
Financial Incentives
The swatter monetized threats, charging 50 to 75 dollars per call.
Intentional Deception
Swatters using fake narratives to trigger extreme police responses.
Process and Methods
Cryptocurrency Payments
Allows anonymous financial transactions for swatting services.
Telegram Distribution
Used as a platform to coordinate, advertise, and share call recordings.
Automated Calling Scripts
Using structured scripts to systematically deceive emergency operators.
Management
Platform Moderation Failure
Telegram failed to proactively block the swatting service channel.
Regulatory Environment
Jurisdictional Limitations
Swatters operate outside the jurisdiction of local law enforcement.
Anonymity of Online Platforms
Lack of regulation preventing anonymous registration on messaging apps.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.
