What is the first step when a social media threat is reported to the school?

Document and preserve the content immediately, then notify law enforcement. Law enforcement assesses credibility. Your job is not to evaluate whether the threat is real but to initiate the protocol and let trained investigators make that determination. Contact the district office simultaneously. Do not announce the threat to students or staff before law enforcement advises you on next steps.

Should you notify families before law enforcement determines whether the threat is credible?

In most cases, yes, with careful language. A message that says 'we are investigating a social media post that may affect our school, law enforcement is involved, and we will update you' is informative without being alarmist. Waiting until law enforcement completes its investigation before notifying families can mean families hear about the threat from their children first, which creates panic without context.

How do you communicate with families when the threat is determined to be non-credible?

Send a follow-up message that confirms law enforcement investigated the matter and determined the threat was not credible or actionable. State clearly that school is safe and normal operations will continue. Acknowledge that this kind of event is stressful for families even when it turns out to be unfounded. Include information about consequences: threats, even fake ones, have serious legal ramifications.

What if parents are keeping their children home because of the social media threat?

Make clear in your parent communication whether you are recommending students attend school or whether you are giving families discretion. If law enforcement has determined the school is safe and you are holding school, say that explicitly. Ambiguous language leads to widespread absences that are hard to recover from. If you are confident in the safety determination, be direct about it.

How do you handle the situation when a student at your school posted the threat?

The communication to families remains focused on the safety response and resolution, not on the student who made the threat. State that the source of the threat has been identified, that law enforcement is involved, and that disciplinary and legal processes are underway. You cannot name the student or describe their specific situation in a mass parent communication.

Social Media Threat Investigation

Social media threats against schools have become one of the most common communication challenges principals face. They arrive without warning, spread faster than any official response can keep up with, and force a series of decisions under pressure: is this credible, do we close school, who do we tell and when? The communication challenge is compounded because by the time most threats come to the principal's attention, students and families already know about them.

What to do before you communicate anything

The moment a social media threat is reported to you, the sequence is: document it, call law enforcement, call the district. Do not share the threat content with other staff members beyond what is necessary. Do not make a school-day decision, whether to close, shelter in place, or continue, before law enforcement gives you a recommendation. Do not post anything on the school's own social media accounts.

That three-step sequence takes ten minutes. After it, you have law enforcement on the way or on the phone, and you have a framework for the communication decisions that follow.

The first parent message: during the investigation

Send this message as soon as law enforcement is engaged and you have a school-day decision, even a temporary one. The message says: a social media post containing a potential threat against our school has been brought to our attention. We have contacted law enforcement, who are investigating. We are taking this seriously and will update you as we have confirmed information. School is in session / School is closed for the day as a precaution while the investigation continues.

That is the full first message. It confirms you know, you're acting, and it tells families what today looks like. It does not describe the threat's content, name a potential suspect, or speculate on credibility.

Managing the rumor environment

When a threat circulates on social media, every version of it that families see has been interpreted and reinterpreted. The original post may say one thing; the version circulating in parent chats says something more alarming. Your message is the authoritative version. Use it to ground the conversation, not just to relay information. A sentence like "We know that information is circulating on social media. The school is communicating directly with families, and we ask that you rely on this message rather than secondhand accounts" gives families a frame for interpreting what they're seeing.

The all-clear or resolution message

Once law enforcement has completed its investigation, send a message immediately. If the threat was determined to be non-credible, say so plainly. If an individual has been identified and is in custody or facing charges, confirm that without naming them. If the threat was credible and resulted in a changed school-day plan, explain what changed and what tomorrow looks like.

Include a brief statement about consequences. Parents often ask "what happens to the person who posted this?" The answer, that law enforcement handles the legal side and the school handles the disciplinary side, and that even threats made as a joke carry serious legal and academic consequences, is important to include. It sends a signal to other students about the stakes.

The next-day message

If the threat disrupted a school day or caused significant community anxiety, a next-morning message before school starts is worth sending. It confirms the school is open, the safety situation is resolved, and that counseling resources are available for students who are anxious. A brief message like this removes uncertainty before families have to make a decision about sending their children to school.

How Daystage helps with social media threat communication

Social media threats often surface at night or early in the morning, before you're at your desk. Daystage works from your phone and lets you send a formatted, professional parent notification in minutes no matter where you are. In a threat situation, the ability to communicate quickly from any location is not a convenience. It is operationally essential.

Social Media Threat Investigation: How to Communicate with Families