The search for the caller behind Utah’s 13 school hoaxes

Mar 30, 2023, 2:00 PM

At the time this story is being published, it is less than 24 hours since multiple schools across U...

Police maintain a presence after responding to false threats of shots fired at Ogden High School in Ogden on Wednesday, March 29, 2023. Police agencies along the Wasatch Front and northern Utah responded to similar reports of school violence on Wednesday morning. (Kristin Murphy, Deseret News)

(Kristin Murphy, Deseret News)

SALT LAKE CITY — At the time this story is being published, it is about 24 hours since multiple schools across Utah and thousands of people were thrown into chaos by hoaxes warning of fake active shooters on multiple campuses.

Officials soon learned the school calls were all hoaxes, the threats, fake. But not before police armed with heavy weaponry were inside those schools among frightened and confused teachers and students.

Related: Multiple Utah schools received fake reports of school shooting, officials say

And though it’s been less than a day since the calls were made (or swatting calls, which is their official name), public safety officials in Utah have made at least some progress in finding the caller’s identity. 

Here’s how that happened.

Tracing the school hoaxes 

“All of the calls were made from the same phone number,” Hilary Kellner, the Director of Communications for the Utah Department of Public Safety, told Dave and Dujanovic on Thursday morning.

That information came via Utah’s statewide information analysis Center and the FBI, who traced the number.

“They found that it connected to an IP address that was connected outside of the country,” Kellner said. “Not one specific country, that IP address kind of tagged a couple of different countries.”

Related: Ogden High School community reacts to active shooter hoax

IP addresses are assigned to either a country or a block of countries. 

But that doesn’t mean the person was outside the country — they could have used a proxy server or virtual private network to mask their actual IP address.

Who made the swatting calls?

Kellner said they determined a male with a foreign accent called 911. He falsely reported there was an active shooter at Spanish Fork High School. The caller reportedly told 911 that six people had been wounded by this “active shooter.” 

Safety officials have confirmed that 911 was called about 13 different schools in Utah. The storyline was “pretty similar with all of them.”

Kellner said it was the same person calling from the same IP address, in each call.

Just the beginning of the search

Determining an IP address is just the beginning of the hunt for the hoax caller. 

“More experienced cyber criminals will either tunnel to or connect to a … voice over IP server, where they’re making such phone calls from a different location, a different country,” said Earl Foote with Nexus.

Although, was it really a male that was calling?

“The male voice that was heard (on the 911 calls) could be spoofed (or imitated) by AI or bots,” Foote said. 

If the caller has a registered account with a cloud service provider, the cloud provider may have contact information for that person.  However, if they’re a “smart criminal,” Foote said, they’ll cover those tracks too.

Did the caller behind the school hoaxes leave a clue?

Thirteen schools in Utah were targeted by hoax emergency calls known as swatting calls. Investigators will likely look for a connection between all of the schools.

“It may lead to the source being within the United States or somebody with … specific knowledge of the geo localities .. where the phone calls were placed,” Foote said.


We want to hear from you.

Have a story idea or tip? Send it to the KSL NewsRadio team here.

Today’s Top Stories

Crime, Police + Courts

Highland High school students arrested...

Devin Oldroyd

Two high school students arrested after allegedly bringing firearms on Highland High campus

Salt Lake City Police Department's school resource officers arrested three high school students after recovering two loaded firearms Monday.

24 hours ago

The Utah State Bureau of Investigation and the Utah Highway Patrol are investigating after witnesse...

Simone Seikaly

Witnesses report motorcycle passenger firing at silver car on NB I-15

Witnesses reported seeing someone on a black Harley Davidson motorcycle firing rounds from a firearm at a silver passenger car.

24 hours ago

A partial gag order issued in the case of Kouri Richins was welcomed by the family, a Richins famil...

Hugo Rikard-Bell

Kouri Richins family satisfied with partial gag order issued in case, says spokesman

A Third District Judge issued a partial gag order due to the popularity and interest in the Richins case.

24 hours ago

A truck involved in a road rage spat with another vehicle, crashed into this Porsche killing both o...


Two people killed in road rage crash near Eagle Mountain are identified

A man and a woman from Salt Lake County were killed in the wreck near Eagle Mountain in an alleged incident of road rage.

24 hours ago

gunlock falls is pictured...

Devin Oldroyd

Man nearly drowns at Gunlock Falls

A middle-aged man nearly drowned Sunday at Gunlock Falls. According to police, as far as they know he is still alive.

2 days ago

India train crash...

Kunal Sehgal, Ivan Watson, Ajay Bedi and Deepak Rao, CNN

‘We thought it was an earthquake’: Probe into deadly train crash focuses on signal failure, as rescue efforts end

Authorities investigating one of the deadliest train crashes in India’s history were examining whether a signal failure led to the disaster.

2 days ago

Sponsored Articles

close up of rose marvel saliva blooms in purple...

Shannon Cavalero

Drought Tolerant Perennials for Utah

The best drought tolerant plants for Utah can handle high elevations, alkaline soils, excessive exposure to wind, and use of secondary water.

Group of cheerful team members high fiving each other...

Visit Bear Lake

How To Plan a Business Retreat in Bear Lake This Spring

Are you wondering how to plan a business retreat this spring? Read our sample itinerary to plan a team getaway to Bear Lake.

Cheerful young woman writing an assignment while sitting at desk between two classmates during clas...

BYU EMBA at the Marriott School of Business

Hear it Firsthand: 6 Students Share Their Executive MBA Experience at BYU’s Marriott School of Business

The Executive MBA program at BYU offers great opportunities. Hear experiences straight from students enrolled in the program.

Skier being towed by a rider on a horse. Skijoring....

Bear Lake Convention and Visitors Bureau

Looking for a New Winter Activity? Try Skijoring in Bear Lake

Skijoring is when someone on skis is pulled by a horse, dog, animal, or motor vehicle. The driver leads the skiers through an obstacle course over jumps, hoops, and gates.

Banner with Cervical Cancer Awareness Realistic Ribbon...

Intermountain Health

Five Common Causes of Cervical Cancer – and What You Can Do to Lower Your Risk

January is National Cervical Cancer Awareness month and cancer experts at Intermountain Health are working to educate women about cervical cancer.

Kid holding a cisco fish at winterfest...

Bear Lake Convention and Visitors Bureau

Get Ready for Fun at the 2023 Bear Lake Monster Winterfest

The Bear Lake Monster Winterfest is an annual weekend event jam-packed full of fun activities the whole family can enjoy.

The search for the caller behind Utah’s 13 school hoaxes