Skip to content
Campus Alert Archive
Villanova

Swatting call during orientation Mass prompts lockdown; confirmed a hoax

AI-generated · every claim is source-linked
PAswattingemergency notificationmedium confidence
Confirmed HoaxDetermined to be a hoax. The institutional response is documented because it reveals how the alert system performed under a perceived real threat.

A swatting call reporting a man with an AR-15-style weapon and shots fired reached Delaware County Emergency Services at approximately 4:33 p.m. EDT on August 21, 2025, the first day of new student orientation at Villanova University. The alert went out during an outdoor opening Mass, which was to be followed by a family picnic. Students hid behind walls and locked themselves in dorm rooms. The university president later called it a 'cruel hoax'. No shooter, no injuries, no firearms were found on campus.

Alerts
2
Response
Killed
Injured
Institution
Villanova University
Private R1 · PA
All Villanova cases →
~10,800 studentsNova Alert
Documented Timeline

Alert Sequence

2 messages in sequence · 2 verified verbatim

INITIAL ALERTSMS
ACTIVE SHOOTER on VU campus. Move to secure location. Lock/barricade doors. More info to follow.
Sent at 4:34 p.m. EDT on August 21, 2025, one minute after Delaware County Emergency Services received the swatting call at 4:33 p.m. EDT
Sent during an outdoor orientation Mass with hundreds of new students and families present
The terse 96-character message reflects SMS-length constraints, the alert system reserves clarification for follow-up messages
Sent on the first day of new student orientation, with incoming students and families on campus
ALL CLEARSMS
The campus is all clear. You no longer need to shelter in place.
Multiple media reports quoted this all-clear message verbatim
Notably brief, the all-clear left the 'cruel hoax' framing to a separate statement from President Peter Donohue
The message functioned to lift shelter-in-place orders quickly without yet characterizing the incident as a hoax in the alert stream itself
Message elements

How the first alert is built

To check this alert, Claude (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.

ACTIVE SHOOTER on VU campus. Move to secure location. Lock/barricade doors. More info to follow.

  • Sourceabsent0/25

    Final assessment

    All 25 reads agree no sender is present; no branded signature, agency, or institutional self-identification appears.

    Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.

    See all 25 individual reads
    1. absent: No sender tag, agency, or university self-identification appears in the text, only "VU campus".
    2. absent: No sender, agency, or branded signature appears in the text.
    3. absent: No sender name, branded signature, or responding authority is identified.
    4. absent: No sender, agency, or branded signature is named in the text.
    5. absent: No sender tag or university name appears; "VU campus" is named only as the place, not the issuer.
    6. absent: No sender tag, agency, or university name appears in the text itself.
    7. absent: "VU campus" names the campus but no sender tag, agency, or self-identification of the issuer appears.
    8. absent: No sender tag or named authority appears in this text.
    9. absent: No sender tag, university name, or branded signature appears, only "VU campus" as a place.
    10. absent: No sender tag or issuing authority is named; "VU campus" names the place but not the sender explicitly.
    11. absent: No sender tag or self-naming authority; "VU campus" identifies the place but not the sender.
    12. absent: No sender tag or issuing authority is named in the text.
    13. absent: No sender, alert brand, or responding authority is named in the text.
    14. absent: No sender tag or named issuing authority appears in the text.
    15. absent: No sender tag, university name, or named agency appears in the text.
    16. absent: No sender name or branded signature appears, only "VU campus" referenced.
    17. absent: No sender, branded tag, or authority identifies itself; "VU campus" names the place, not the sender.
    18. absent: No branded signature, agency, or university self-naming appears; "VU campus" alone does not name a sender authority but does name the place.
    19. absent: No sender, agency, or branded signature appears in the text.
    20. absent: No sender brand, university name, or named agency identifies who issued the message.
    21. absent: No sender tag or authority identifies itself in the text.
    22. absent: No sender tag, university name, or agency is identified; "VU campus" is the location not a sender tag.
    23. absent: No branded tag, agency, or university self-naming appears; "VU campus" alone is location, not a sender signature.
    24. absent: No sender tag or named authority appears in the text.
    25. absent: No sender tag, institution name, or agency identifies who issued this message.
  • Hazardpresent25/25

    Final assessment

    All 25 reads agree a hazard is present, reporting an active shooter.

    What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.

    See all 25 individual reads
    1. present: It names "ACTIVE SHOOTER", a specific threat.
    2. present: It names "ACTIVE SHOOTER", a specific threat.
    3. present: It reports an "ACTIVE SHOOTER", a specific threat.
    4. present: It names "ACTIVE SHOOTER", a specific hazard.
    5. present: It names "ACTIVE SHOOTER", a specific threat.
    6. present: It names "ACTIVE SHOOTER", a specific threat.
    7. present: Names "ACTIVE SHOOTER", a specific threat.
    8. present: It names "ACTIVE SHOOTER on VU campus", a specific threat.
    9. present: Names "ACTIVE SHOOTER", a specific threat.
    10. present: It names an "ACTIVE SHOOTER", a specific threat.
    11. present: Names "ACTIVE SHOOTER", a specific hazard.
    12. present: It names an "ACTIVE SHOOTER", a specific threat.
    13. present: It names the threat specifically: "ACTIVE SHOOTER on VU campus".
    14. present: Names the hazard specifically as "ACTIVE SHOOTER on VU campus".
    15. present: Names "ACTIVE SHOOTER", a specific hazard.
    16. present: Names "ACTIVE SHOOTER", a specific threat.
    17. present: Names "ACTIVE SHOOTER", a specific hazard.
    18. present: It reports "ACTIVE SHOOTER", a specific hazard.
    19. present: It names "ACTIVE SHOOTER", a specific threat.
    20. present: It states "ACTIVE SHOOTER", a specific hazard.
    21. present: Names "ACTIVE SHOOTER", a specific hazard.
    22. present: It names "ACTIVE SHOOTER", a specific hazard.
    23. present: It names "ACTIVE SHOOTER", a specific hazard.
    24. present: Names "ACTIVE SHOOTER", a specific threat.
    25. present: It states "ACTIVE SHOOTER on VU campus", a specific threat.
  • Locationpresent25/25

    Final assessment

    All reads agree a location is present, noting it was on the VU campus.

    Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.

    See all 25 individual reads
    1. present: It says "on VU campus", a campus location reference.
    2. present: It says "on VU campus", a location.
    3. present: It says the active shooter is "on VU campus".
    4. present: It names "VU campus", a place.
    5. present: It says the shooter is "on VU campus".
    6. present: It says "on VU campus", referencing campus as the location.
    7. present: Says "on VU campus", a place reference.
    8. present: It names "VU campus", a location reference.
    9. present: Names "VU campus", a specific place.
    10. present: It says the shooter is "on VU campus", a location.
    11. present: Says "on VU campus", a location.
    12. present: It says "on VU campus", a location reference.
    13. present: It names "VU campus", a location.
    14. present: Refers to "VU campus", a place reference.
    15. present: Says "on VU campus", a location reference.
    16. present: Says "on VU campus", a location.
    17. present: Says "on VU campus", a place reference.
    18. present: It names "VU campus", a specific location.
    19. present: It says "on VU campus", a location.
    20. present: It says the active shooter is "on VU campus", a location.
    21. present: Says "on VU campus", a place reference.
    22. present: It says "on VU campus", a location.
    23. present: It says "on VU campus", a place.
    24. present: Names "VU campus", a location.
    25. present: It names "VU campus", a place.
  • Guidancepresent25/25

    Final assessment

    All 25 reads agree guidance is present; recipients are told to move to a secure location and lock or barricade doors.

    The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.

    See all 25 individual reads
    1. present: It instructs recipients to "Move to secure location" and "Lock/barricade doors", protective actions.
    2. present: It instructs "Move to secure location. Lock/barricade doors".
    3. present: It instructs recipients to "Move to secure location" and "Lock/barricade doors".
    4. present: It instructs "Move to secure location" and "Lock/barricade doors", protective actions.
    5. present: It instructs recipients to "Move to secure location" and "Lock/barricade doors".
    6. present: It instructs recipients to "Move to secure location" and "Lock/barricade doors", protective actions.
    7. present: Instructs recipients to "Move to secure location" and "Lock/barricade doors", protective actions.
    8. present: It instructs recipients to "Move to secure location" and "Lock/barricade doors", protective actions.
    9. present: Instructs "Move to secure location" and "Lock/barricade doors", protective actions.
    10. present: It instructs recipients to "Move to secure location" and "Lock/barricade doors", protective actions.
    11. present: Instructs recipients to "Move to secure location" and "Lock/barricade doors", protective actions.
    12. present: It instructs recipients to "Move to secure location" and "Lock/barricade doors".
    13. present: It instructs "Move to secure location" and "Lock/barricade doors", protective actions.
    14. present: Instructs "Move to secure location" and "Lock/barricade doors", protective actions.
    15. present: Instructs recipients to "Move to secure location" and "Lock/barricade doors", protective actions.
    16. present: Instructs recipients to "Move to secure location" and "Lock/barricade doors", protective actions.
    17. present: Instructs recipients to "Move to secure location" and "Lock/barricade doors".
    18. present: It instructs people to "Move to secure location" and "Lock/barricade doors", protective actions.
    19. present: It instructs recipients to "Move to secure location. Lock/barricade doors.", protective actions.
    20. present: It tells recipients to "Move to secure location" and "Lock/barricade doors".
    21. present: Instructs recipients to "Move to secure location" and "Lock/barricade doors".
    22. present: It instructs "Move to secure location" and "Lock/barricade doors", protective actions.
    23. present: It instructs "Move to secure location. Lock/barricade doors.", protective actions.
    24. present: Instructs recipients to "Move to secure location" and "Lock/barricade doors", protective actions.
    25. present: It instructs recipients to "Move to secure location" and "Lock/barricade doors", protective actions.
  • Timeabsent0/25

    Final assessment

    All 25 reads agree no timing is present; no clock time, date, or recency cue appears.

    When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.

    See all 25 individual reads
    1. absent: No clock time, date, or recency cue such as "now" appears.
    2. absent: No clock time, date, or recency cue appears.
    3. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    4. absent: No clock time, date, or recency cue appears in the text.
    5. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    6. absent: No clock time, date, or recency cue appears; "active shooter" is the hazard, not a time.
    7. absent: No clock time, date, or recency cue appears in the text.
    8. absent: No clock time, date, or recency word appears; "ACTIVE" is part of the hazard.
    9. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    10. absent: No clock time, date, or recency cue appears in the text.
    11. absent: No clock time, date, or recency cue appears; "ACTIVE" is part of the hazard.
    12. absent: No clock time, date, or recency cue appears.
    13. absent: No clock time, date, or recency cue appears in the text.
    14. absent: No clock time, date, or recency cue appears; "ACTIVE" is part of the hazard.
    15. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    16. absent: No clock time, date, or recency word appears, only "More info to follow".
    17. absent: No clock time, date, or recency cue appears; "ACTIVE" is part of the hazard.
    18. absent: No clock time, date, or recency cue appears in the text.
    19. absent: No clock time, date, or recency word appears; "active shooter" is hazard not time.
    20. absent: No clock time, date, or recency word appears; "ACTIVE" is part of the hazard.
    21. absent: No clock time, date, or recency word appears; "ACTIVE" is part of the hazard.
    22. absent: No clock time, date, or recency cue such as "now" or "immediately" appears.
    23. absent: No clock time, date, or recency cue appears.
    24. absent: No clock time, date, or recency cue appears; "ACTIVE" is part of the hazard.
    25. absent: No clock time, date, or recency cue appears.
  • Impactpresent24/25

    Final assessment

    Yes; near-unanimous that the swatting/active-threat framing conveys danger to people, one lone dissent.

    What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.

    See all 25 individual reads
    1. present: Reports an active shooter and directs moving to a secure location and barricading, strongly implying a life threat.
    2. present: It reports an active shooter and directs people to a secure location and to barricade, strongly implying a life-threatening danger.
    3. present: An active shooter with move-to-secure-location and barricade guidance conveys a deadly threat to people.
    4. present: It reports an active shooter and instructs to move to a secure location and barricade doors, implying a deadly threat to safety.
    5. present: It reports an active shooter and tells people to move to a secure location and barricade doors, conveying a threat to life and safety.
    6. present: It reports an active shooter and instructs people to move to a secure location and barricade doors, implying lethal danger.
    7. present: Reports an active shooter and instructs to move to a secure location and barricade, implying a clear life threat.
    8. present: It reports an active shooter and orders barricading, conveying a deadly threat to people.
    9. present: Reports an active shooter and to move to a secure location and barricade doors, implying a deadly threat.
    10. present: It reports an active shooter and to move to a secure location and barricade, implying a serious deadly threat.
    11. present: An active shooter with orders to move to a secure location and barricade conveys life-threatening danger to people.
    12. present: Reports an active shooter and directs to barricade doors, strongly implying a deadly threat.
    13. present: Reports an active shooter and directs people to lock and barricade doors, which clearly implies a deadly threat to life.
    14. present: Reports an active shooter and directs barricading doors, with active shooter conveying lethal danger to people.
    15. present: Reports an active shooter and directs barricading, implying a lethal threat to safety.
    16. present: An active shooter with move-to-secure-location and barricade guidance implies a clear life-threatening danger to people.
    17. present: It reports an active shooter and directs people to move to a secure location and barricade doors, implying a deadly threat.
    18. present: An active shooter with instructions to move to a secure location and barricade conveys an immediate threat to life.
    19. present: Reports an active shooter and directs people to move to a secure location and barricade, conveying a clear lethal threat to safety.
    20. present: It reports an active shooter and directs moving to a secure location and barricading, implying a serious threat of harm.
    21. present: Reports an active shooter and directs moving to a secure location and barricading doors, conveying clear danger to safety.
    22. present: It reports an active shooter and orders people to barricade doors and move to a secure location, conveying a serious life threat.
    23. present: An active shooter with instructions to move to a secure location and barricade conveys a lethal threat.
    24. absent: This names an active shooter and gives barricade guidance but states no harm or consequence.
    25. present: States an active shooter and directs barricading, implying a deadly threat to people.

Systematic AI judgments with visible reasoning, not human-validated codings.

About this analysis
Context

Background

Villanova University was the first high-profile target in the August 2025 'Purgatory' swatting wave, a coordinated campaign by an online extremist group that targeted at least 22 universities over 10 days. The call came during orientation Mass, when hundreds of new students and their families were gathered on campus. The caller reported a man with an AR-15-style weapon and included simulated gunshot sounds in the background. This sophistication (audio effects to simulate real gunfire) marks an evolution in swatting tactics. The incident prompted the FBI to open a formal investigation. Purgatory, the group claiming responsibility, is believed to offer paid swatting services via Telegram for $10 to $95 per incident. On April 30, 2026, U.S. Attorney David Metcalf announced federal charges against an unnamed juvenile (a 'self-identified member' of Purgatory) for swatting calls targeting Villanova and other Pennsylvania universities. Prosecutors said the suspect chose targets at random and had no affiliation with the schools.
Analysis

Key Findings

Simulated gunshot sounds in the swatting call represent an escalation in hoax sophistication, making it harder for dispatchers to assess credibility
The call came during orientation Mass, when many new students and families were present on campus
Villanova received a second false active-shooter report four days later, on August 25, 2025
Villanova's president publicly characterized the incident as a 'cruel hoax'
On April 30, 2026, federal prosecutors charged a juvenile self-identified Purgatory member for swatting calls including the Villanova hoax
Outcome
Confirmed hoax. No active shooter, no injuries, no evidence of firearms on campus. FBI, Delaware County District Attorney's Office, and Radnor Township police investigating. Linked to the Purgatory swatting group.
Provenance

Sources

  1. News
  2. News
  3. News
  4. News
  5. national media
Cite this case

Campus Alert Archive. "Villanova University: Swatting call during orientation Mass prompts lockdown; confirmed a hoax." Incident of August 21, 2025. Added April 2026; last updated May 2026. https://campusalertarchive.com/case/villanova-university-swatting-2025-08-21/

Download case JSON

Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.

Tags
swattinghoaxpurgatory-waveorientationactive-shooter-hoaxfbi-investigationsimulated-gunfireprivate-r1Hoax
Added April 2026Updated May 2026Via ingestion