Campus Alert Archive
Cornell

Pre-dawn swatting call reports an armed intruder in a residence hall; determined false

AI-generated · every claim is source-linked
NYswattingadvisorymedium confidence
Compare →
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

On April 4, 2023, Cornell University Police received a 2:32 AM EDT swatting call from a male caller claiming he was armed and had injured a woman in Jameson Hall on Cornell's North Campus. Officers responded and woke residents around 4:30 AM EDT during spring break, when most residents were away. CUPD determined within minutes that the report was false, marking the second swatting incident at Cornell that semester.

Alerts
1
Response
—
Killed
0
Injured
0
Institution
Cornell University
Private R1 · NY
All Cornell cases →
~25,000 studentsRave Mobile SafetyCornellALERT
Official alert policy
Read when and how Cornell says it will use CornellALERT: summarized, quoted, and analyzed.
Documented Timeline

Alert Sequence

1 message in sequence · 1 verified verbatim

FOLLOW-UPEmail
Verified verbatimCornell Daily Sun direct quote of the email from Jameson Hall Residence Hall Director Nicole Wendel-Crowe sent to Jameson residents on behalf of Housing and Residential Life164 chars
While this call was determined to be uncredible, we recognize that this may have impacted some Jameson residents who are residing in the building over spring break.
This excerpt is from the email sent to Jameson Hall residents on the morning of April 4, 2023 by Residence Hall Director Nicole Wendel-Crowe on behalf of Housing and Residential Life. Cornell did not issue a campus-wide CornellALERT in real time
CUPD received the swatting call at 2:32 AM EDT; officers responded to George Jameson Hall and woke residents around 4:30 AM EDT during the early morning hours of spring break when most students were away from campus
Cornell University Police Chief Anthony Bellamy said: 'Cornell Police, like all police, have an obligation to respond to all calls alleging a threat to our community. In this case, we rushed to go to the specific suite the caller mentioned to make sure that no one was injured or being held against their will by someone with a weapon. We then had to search the rest of the building to make sure residents were safe.'
This was the SECOND swatting incident at Cornell in the spring 2023 semester, a pattern that drew media attention to escalating university swatting
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

While this call was determined to be uncredible, we recognize that this may have impacted some Jameson residents who are residing in the building over spring break.

  • Sourceabsent0/25

    Final assessment

    Unanimous: no sender, agency, or branded signature identifies who issued this message, so the source is absent.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. absent: No sender, agency, or branded signature identifies who issued this message.
    2. absent: No sender, brand, or agency identifies who issued this message.
    3. absent: No sender, agency, or branded signature appears in the text.
    4. absent: No sender tag, university, or agency identifies who issues the message.
    5. absent: No sender, agency, or branded signature appears in the text.
    6. absent: No sender, agency, or branded signature identifies who issued this message.
    7. absent: No branded signature, sender tag, or named authority identifies who is sending the message.
    8. absent: No sender name, branded tag, or issuing authority appears in the text.
    9. absent: No branded signature, agency, or institution identifies the sender.
    10. absent: No sender, branded signature, or named authority appears in the text.
    11. absent: No sender, agency, or branded signature appears in this follow-up text.
    12. absent: No sender, branded tag, or authority is identified in the text.
    13. absent: No sender, university name, or agency is identified in the message.
    14. absent: No sender tag, agency, or institution identifies itself in this follow-up text.
    15. absent: No sender, agency, or branded signature is named in this message.
    16. absent: No sender, agency, or branded signature identifies who issued this message.
    17. absent: No branded signature, agency, or institution names itself as sender.
    18. absent: No sender, signature, or issuing authority is named in the text.
    19. absent: No sender, branded tag, or named authority appears in this follow-up text.
    20. absent: No sender, university, or agency is named in the text.
    21. absent: No sender, authority, or branded signature is named in the text.
    22. absent: No sender tag, agency, or institution names itself in the text.
    23. absent: No sender, signature, or authority is identified in the text.
    24. absent: No sender tag, agency, or branded signature identifies who issued this message.
    25. absent: No sender, university, or agency is named in the text.
  • Hazardabsent0/25

    Final assessment

    Unanimous: it refers to a call later deemed not credible but names no specific threat.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. absent: It refers to a "call" determined uncredible but names no specific threat.
    2. absent: It refers to "this call" being "uncredible" but names no specific hazard.
    3. absent: No specific threat is named; it calls the call "uncredible".
    4. absent: It refers to a "call" that was "uncredible" but names no specific hazard.
    5. absent: It refers to an "uncredible" "call" but names no specific threat.
    6. absent: It calls the call "uncredible" and names no specific threat.
    7. absent: It says only "this call" was "uncredible" with no specific threat named in the text.
    8. absent: It calls the threat "uncredible" and names no specific hazard.
    9. absent: No specific hazard is named; it references "this call" without stating the threat.
    10. absent: It says "this call" was "uncredible" but names no specific hazard.
    11. absent: It refers to "this call" deemed uncredible but names no specific threat.
    12. absent: No specific hazard is named; it says only the "call was determined to be uncredible".
    13. absent: It refers to "this call" as "uncredible" but names no specific hazard.
    14. absent: It calls the call "uncredible" but names no specific hazard.
    15. absent: It says "this call" was "uncredible" but names no specific threat.
    16. absent: It calls the report "uncredible" and names no actual threat.
    17. absent: No specific hazard is named, only that "this call" was uncredible.
    18. absent: It refers to "this call" being "uncredible" but names no specific hazard in the text.
    19. absent: It refers to "this call" being uncredible but names no specific threat.
    20. absent: It says the call was "uncredible" but names no specific hazard.
    21. absent: It refers to "this call" being "uncredible" but names no specific hazard.
    22. absent: Refers to "this call" being "uncredible" but names no specific threat.
    23. absent: Refers only to "this call" being "uncredible", naming no specific hazard.
    24. absent: It says "this call" was "uncredible" but names no specific hazard.
    25. absent: No specific threat is named; it refers to an undescribed "call".
  • Locationpresent25/25

    Final assessment

    Unanimous: it mentions the Jameson building where residents reside, a stated location.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: It mentions "Jameson" building where residents reside.
    2. present: It locates it among "Jameson residents who are residing in the building".
    3. present: It mentions "Jameson residents" and "the building".
    4. present: It mentions "Jameson residents" and "the building".
    5. present: It references "Jameson" residents and "the building".
    6. present: It references "Jameson residents" and "the building", a location.
    7. present: It refers to "Jameson residents who are residing in the building", a specific place.
    8. present: It names "Jameson residents" and "the building".
    9. present: It names "Jameson residents" and "the building".
    10. present: It names "Jameson residents" and "the building".
    11. present: It references "Jameson residents who are residing in the building".
    12. present: It names "Jameson" residents and "the building".
    13. present: It references "Jameson residents" and "the building", a location.
    14. present: It names "Jameson residents" and "the building", a location.
    15. present: It refers to "Jameson residents" and "the building", a specific place.
    16. present: It names "Jameson" residents and "the building", a specific place.
    17. present: It names "Jameson residents" and "the building", a specific place.
    18. present: It names "Jameson residents" and "the building".
    19. present: It references "Jameson residents who are residing in the building".
    20. present: It names "Jameson residents" and "the building".
    21. present: It mentions "Jameson residents who are residing in the building", a specific place.
    22. present: Names "Jameson" residents and "the building".
    23. present: Refers to "the building" and "Jameson residents", a named place.
    24. present: It refers to "Jameson residents" and "the building", a specific place.
    25. present: It references "Jameson residents" and "the building".
  • Guidanceabsent0/25

    Final assessment

    Unanimous: it acknowledges the impact but gives recipients no protective action, so guidance is absent.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. absent: It acknowledges impact but gives recipients no protective action.
    2. absent: It acknowledges impact but gives recipients no protective action.
    3. absent: It gives recipients no protective instruction.
    4. absent: No protective action is directed at recipients.
    5. absent: It gives recipients no protective instruction.
    6. absent: It acknowledges impact but gives recipients no protective action.
    7. absent: It gives recipients no protective action.
    8. absent: It only acknowledges impact and gives no protective action.
    9. absent: No protective action is directed at recipients.
    10. absent: It acknowledges impact but gives recipients no protective action.
    11. absent: It gives recipients no protective action.
    12. absent: No protective action is directed to recipients in this message.
    13. absent: It acknowledges impact but gives recipients no protective action.
    14. absent: It gives recipients no protective-action instruction.
    15. absent: It acknowledges impact but gives recipients no protective instruction.
    16. absent: It acknowledges impact but gives recipients no protective action.
    17. absent: It gives no protective action instruction to recipients.
    18. absent: It gives recipients no protective action.
    19. absent: It gives recipients no protective instruction.
    20. absent: It gives recipients no protective action.
    21. absent: It offers acknowledgment but no protective instruction to recipients.
    22. absent: No protective action is given to recipients.
    23. absent: No protective action is instructed to recipients.
    24. absent: It acknowledges impact but gives recipients no protective action instruction.
    25. absent: No protective instruction is given to recipients.
  • Timeabsent0/25

    Final assessment

    Unanimous: no clock time, date, or recency cue appears, so timing is absent.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date, or recency cue appears.
    2. absent: No clock time, date, or recency cue appears.
    3. absent: No clock time, date, or recency cue appears in the text.
    4. absent: No clock time, date, or recency cue appears.
    5. absent: No clock time, date, or recency cue appears in the text.
    6. absent: No clock time, date, or recency cue appears in the text.
    7. absent: No clock time, date, or recency cue appears.
    8. absent: No clock time, date, or recency cue appears in the text.
    9. absent: No clock time, date, or recency cue appears beyond "spring break".
    10. absent: No clock time, date, or recency cue appears in the text.
    11. absent: No clock time, date, or recency cue appears.
    12. absent: No clock time, date, or recency cue appears.
    13. absent: No clock time, date, or recency cue appears in the text.
    14. absent: No clock time, date, or recency cue appears.
    15. absent: No clock time, date, or recency cue appears.
    16. absent: No clock time, date, or recency cue appears in the text.
    17. absent: No clock time, date, or recency cue appears.
    18. absent: No clock time, date, or recency cue appears.
    19. absent: No clock time, date, or recency cue appears, only "spring break".
    20. absent: No clock time, date, or recency cue appears.
    21. absent: No clock time, date, or recency cue appears in the message.
    22. absent: No clock time, date, or recency cue appears.
    23. absent: No clock time, date, or recency cue appears in the text.
    24. absent: No clock time, date, or recency cue appears in the text.
    25. absent: No clock time, date, or recency cue appears.
  • Impactabsent3/25

    Final assessment

    Absent by a strong 22 to 3 majority. States the call was determined uncredible and only acknowledges residents may have been impacted, conveying no danger or harm; the minority read the impact mention as relevant.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. absent: It says the call was uncredible and only acknowledges residents may have been impacted, stating no real danger or harm.
    2. absent: This notes the call was uncredible and may have impacted residents but states no physical harm or danger.
    3. absent: Says the call was uncredible and only acknowledges residents may have been impacted, conveying no actual danger.
    4. absent: It says the call was uncredible and only mentions possible impact on residents, conveying no real danger or harm.
    5. absent: Says the call was uncredible and only that residents may have been impacted, stating no actual harm or danger.
    6. present: It states the call was uncredible but acknowledges it may have impacted residents which conveys low danger and a minor emotional impact.
    7. absent: Notes the call was uncredible and only that it may have impacted residents emotionally, stating no real danger or harm.
    8. absent: Says the call was uncredible and only that it may have impacted some residents, conveying no real danger.
    9. absent: Says the call was uncredible and only mentions it may have impacted residents emotionally, conveying absence of real danger.
    10. absent: It says the call was uncredible and only mentions residents being impacted by disruption, not any danger.
    11. absent: States the call was uncredible and only acknowledges residents may have been impacted, conveying no real danger.
    12. absent: It says the call was uncredible and only acknowledges possible impact on residents, stating no real danger or harm.
    13. absent: It states the call was uncredible and only notes residents may have been impacted, conveying no real harm or danger.
    14. present: Says the call was uncredible but acknowledges it may have impacted residents, conveying a stated effect on people while noting no real threat.
    15. absent: States the swatting call was uncredible and only notes possible impact on residents, conveying no real danger.
    16. absent: Says the call was uncredible and only acknowledges impact on residents, conveying no actual danger or harm.
    17. absent: Says the call was uncredible and only that residents may have been impacted, conveying no real danger.
    18. absent: States the call was uncredible and only acknowledges impact on residents, conveying no real danger.
    19. absent: Says the call was uncredible and notes it may have impacted residents but states no real harm or danger.
    20. absent: Says the call was uncredible and only acknowledges possible disruption to residents, stating no real harm.
    21. absent: States the call was uncredible and only acknowledges it may have impacted residents emotionally, conveying no actual danger.
    22. absent: States the call was uncredible and only acknowledges possible impact on residents, conveying no actual danger or harm.
    23. present: Acknowledges the call may have impacted residents though deemed not credible, noting an impact on people.
    24. absent: Says the call was uncredible and only acknowledges it may have impacted residents emotionally, no danger or harm to safety.
    25. absent: It calls the swatting call uncredible and only notes possible impact on residents, stating no actual danger.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

In the early morning hours of April 4, 2023, Cornell University Police received a 2:32 AM EDT call from a male caller who claimed to be armed and said he had injured a woman in George Jameson Hall, a residence hall on Cornell's North Campus. Officers from CUPD responded immediately, woke residents around 4:30 AM EDT during spring break when the dorm was largely empty, and conducted a thorough search of the area, finding no victim, no weapon, and no suspect. CUPD determined the call was a swatting attempt, the second such incident at Cornell that semester. The Jameson swatting was part of a coordinated April 2023 wave that hit Clemson, the University of Florida, Boston University, Harvard, the University of Pittsburgh, Rutgers, the University of Oklahoma, Wake Forest, and Middlebury College within a single week. Investigators believed many of the calls were placed by a single international caller using VoIP services to obscure their location. Cornell did not issue a campus-wide emergency alert in real time because the threat was assessed and cleared too quickly, but the incident contributed to a national conversation about whether universities should be sending alerts during unverified threats, particularly given the Pitt incident the following week.
Analysis

Key Findings

The 2:32 AM EDT call timing (with police response at 4:30 AM EDT during spring break) meant minimal risk to students but maximum disruption for the residents who were on campus
This was the SECOND swatting incident at Cornell in the spring 2023 semester, indicating a sustained pattern of targeting
CUPD did not issue a real-time CornellALERT because the threat was cleared within minutes
The Jameson Hall swatting was part of a coordinated April 2023 wave that hit at least 10 universities in one week
The incident demonstrated the ease of targeting individual residence halls with false reports, a tactic seen in later swatting waves
Outcome
No injuries occurred. CUPD determined the report was false within minutes after responding. The incident was the second confirmed swatting at Cornell in the spring 2023 semester. No suspect was identified in real time, but the call was part of a broader April 2023 wave hitting Clemson, Florida, BU, Harvard, Pittsburgh, Rutgers, Oklahoma, Wake Forest, and Middlebury.
Provenance

Sources

  1. Student Paper
    Jameson Resident 'Swatted' Over Break Amid Rising Incidents Statewide (Cornell Daily Sun)
    cornellsun.com
    archived copy
  2. News
    Cornell Police believe a false report of an armed man was a 'swatting' attempt (14850.com)
    14850.com
    archived copy
  3. News
    Coordinated 'swatting' effort may be behind hundreds of school shooting hoaxes (Washington Post)
    washingtonpost.com
    archived copy
  4. News
    'Swatting' calls reporting fake threats terrorize colleges (Inside Higher Ed)
    insidehighered.com
    archived copy
Cite this case

Campus Alert Archive. "Cornell University: Pre-dawn swatting call reports an armed intruder in a residence hall; determined false." Incident of April 4, 2023. Added May 2026. https://campusalertarchive.com/case/cornell-university-swatting-2023-04-04/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
swattingcornellithacanew-yorkapril-2023-swatting-wavejameson-hallspring-breakno-real-time-alertprivate-r1voip-spoofed-callHoax
Added May 2026Updated May 2026Via ingestion