Tools and Strategies

Understanding Targeted Violence: Becoming an Upstander

Person holding a phone

Unsplash.com

Related Content

The popular image of the mass shooter who suddenly snaps has little basis in reality. Attacks are planned, sometimes over many months, and are often preceded by observable warning signs. According to a study published in 2026 of 171 mass shootings across the U.S. between 1999 and 2024, most attackers displayed warning behaviors before their attack. In a majority of cases, these attackers explicitly communicated their plans to at least one person.

Family members, classmates, friends, or coworkers have traditionally been the first to notice warning signs in a person on a pathway to violence, simply because they interact regularly and can pick up on changes in behavior that others might miss. That circle of potential observers has widened considerably in recent years. As people spend more time on social media and other virtual spaces, strangers online are increasingly the first to encounter warning signs from someone considering violence.  

Prevention Works

Targeted violence is preventable. Research shows that between 1995 and 2020, when warning signs were reported to law enforcement in advance, mass casualty plots were stopped more than 80 percent of the time. Nearly two-thirds of these warnings came from members of the public. In February 2025, an anonymous tip to the Sandy Hook Promise tipline allowed law enforcement to stop a planned shooting at a high school in Indiana. This represents just one of hundreds of threats that have been averted because someone spoke up. Each person who reported concerning behavior acted as an upstander: someone who noticed concerning signs and reported them to someone who could help, whether a mental health professional, teacher, employer, police officer, or threat assessment team.  

The public is the first line of defense against targeted violence. The difference between a foiled plot and a completed attack often comes down to whether one person decides to speak up.

What to Look For

Common warning signs include:

  • Obsession with weapons or other lethal means: Unusual or sudden interest in acquiring weapons, ammunition, or dangerous materials.
  • Fixation with previous attackers: Expressing admiration for previous acts of violence or identifying with previous perpetrators.
  • Communicating intent: Making direct or indirect hints to others about an upcoming violent act.  
  • Significant personality changes: Extreme mood swings, profound social withdrawal, or a sudden lack of concern for their own safety or that of others.
  • Preparatory behavior: Visiting possible targets, testing their security, researching attack logistics, writing hit lists, or rehearsing an attack.

No single warning sign necessarily means a person is planning an attack, but the presence of several at once may be cause for concern. Signs that someone has moved from thinking about violence to actively preparing (such as acquiring weapons alongside talk of wanting to kill others) likely warrant immediate reporting. Explicit statements of intent to harm oneself or others should also be taken seriously and reported appropriately.

COE Pathway to Violence

The Pathway to Violence.

 

Where to Report

Multiple resources are available for reporting concerning behavior:

  • FBI Electronic Tip Form: Submit tips about potential threats or suspicious activity.
  • 988 Suicide & Crisis Lifeline: For mental health crises or concerns about someone in distress.
  • Sandy Hook Promise Tipline: Submit tips about potential threats, suspicious activity, or concerns about someone in distress.
  • 911 or Local Police Department: Call 911 for emergencies. For non-emergencies, contact your local police department directly.
  • Local Threat Assessment Team: Many schools, workplaces, and communities have dedicated threat assessment teams.  
  • ADL Incident Reporting Form: Report incidents of antisemitism, extremism, hate, or discrimination.
  • Take It Down: A free service operated by NCMEC that helps individuals remove explicit images or videos of themselves from the internet.

Reporting is key to prevention. If you see something concerning, speak up. You don’t need to be certain that someone poses a threat. Threat assessment teams are trained to evaluate credible concerns and whether someone poses a real threat. The cost of speaking up is small. The cost of silence can be devastating.