6.2 Bomb Threats & Suspicious Mail/Packages

6.2 Bomb Threats & Suspicious Mail/Packages

The Cardinal Rule of Explosives: Security officers must NEVER touch, move, jar, tilt, shake, open, cover, or submerge a suspected explosive device or suspicious package. The sole responsibility of private security personnel is scene stabilization, perimeter isolation, enforcing radio-frequency silence, evacuating occupants to safe standoff distances, and guiding specialized law enforcement bomb disposal units.

Bomb threats and suspicious deliveries present high-consequence challenges requiring disciplined adherence to established safety procedures. Whether receiving a telephonic bomb threat or intercepting an anomalous mail parcel, security officers must remain calm, methodical, and strictly adhere to federal and state life-safety guidelines.

---

1. Telephonic Bomb Threat Protocol: DHS/CISA Guidance

Telephonic bomb threats are among the most frequent critical incident notifications received by corporate facilities, government agencies, and educational institutions. Motives behind bomb threats vary widely, including disgruntled employees seeking workplace disruption, students attempting to delay examinations, extremist intimidation, or tactical warnings issued prior to an actual planned detonation. Security personnel must treat every bomb threat as an authentic emergency until a comprehensive assessment is conducted by facility management and qualified law enforcement authorities.

Every security console, front-desk reception station, and corporate switchboard should maintain a physical copy of the DHS Bomb Threat Checklist published by the Cybersecurity and Infrastructure Security Agency (CISA) Office for Bombing Prevention.

Immediate Telephonic Handling Actions

1. Remain Calm and Courteous: Do not panic, interrupt, or antagonize the caller. Speak in a calm, controlled, and professional tone.
2. Keep the Caller on the Line: The longer the caller remains on the telephone, the more actionable intelligence can be gathered regarding the threat, device location, motive, and acoustic environment. Listen carefully without speaking over the caller.
3. Do Not Hang Up: Even if the caller disconnects, do not replace the receiver on the hook. Leave the telephone line open. In modern digital and analog telecommunication switching networks, keeping the receiver off the hook preserves the call connection data, allowing telephone providers and law enforcement forensic investigators to trace the originating number.
4. Alert Coworkers Silently: Use pre-arranged hand signals, written notes, or silent computer messaging to notify a supervisor or colleague to immediately call 911 on another landline to initiate emergency response and telephone line tracing.

---

2. Critical Call Handling Steps & Intelligence Gathering

While keeping the caller talking, the officer should attempt to elicit answers to critical investigative questions outlined on the DHS/CISA checklist:

Essential Questions to Ask the Caller

• When is the bomb set to explode? (Obtain an exact time or countdown)
• Where is the bomb located right now? (Building, floor, office suite, parking structure, exterior grounds)
• What does the bomb look like? (Package, box, pipe, backpack, suitcase, vehicle)
• What kind of bomb is it? (Military C-4, dynamite, black powder pipe bomb, chemical/radiological device)
• What will cause it to explode? (Timer, remote radio trigger, motion switch, pressure trigger)
• Did you place the bomb? If so, why?
• What is your name, organization, and current location?

Acoustic and Vocal Analysis

The officer must pay acute attention to the caller's voice characteristics and background environment, recording specific details immediately:

---

3. Radio Frequency (RF) Hazard & Communication Restrictions

One of the most dangerous errors a security officer can make during a bomb threat or package investigation is transmitting on a handheld two-way radio or cellular phone near the suspected area.

CRITICAL WARNING — RADIO FREQUENCY HAZARD: Modern commercial and improvised explosive devices frequently utilize electronic blasting caps, electric matches, or radio-controlled triggering circuits. Handheld two-way radios, walkie-talkies, cellular phones, and wireless transmitters emit strong radio frequency (RF) electro-magnetic energy. When this RF energy is transmitted in close proximity to an electric blasting cap, the metal antenna or detonator lead wires act as receiving aerials. The induced electro-magnetic current can flow through the bridgewire of the detonator, heating it instantly to ignition temperature and causing immediate, catastrophic detonation.

Mandatory RF Silence Protocol

• Declare Radio Silence: The moment a suspicious package is identified or a specific room is targeted in a bomb threat, the officer must instruct dispatch to declare emergency radio silence.
• Distance Restrictions: CISA guidance says not to use two-way radios or cell phones near a suspected device. Follow the no-transmit distance in your site plan, and move well outside the evacuation distance before transmitting.
• Permitted Communications: Use exclusively hardwired analog or digital desk landline telephones located safely outside the exclusion perimeter, or utilize runners delivering verbal messages in person.

---

4. Mandatory Evacuation Standoff Distances

CISA's Office for Bombing Prevention and the FBI publish the Bomb Threat Stand-Off Card (version dated August 2025). It gives recommended distances based on the explosive capacity of the suspected device. It uses three zones:

• a mandatory evacuation distance: everyone leaves, indoors and outdoors;
• a shelter-in-place zone: people who cannot reach the preferred distance shelter inside, away from windows and exterior walls;
• a preferred evacuation distance for people outdoors.

Flying glass and fragments cause many of the injuries in urban explosions.

CISA Stand-Off Distances (August 2025 Card)

The card also lists larger vehicles (container or water truck, semi-trailer) with even greater distances. It says the distances should be used together with your site's emergency evacuation plan.

Evacuation Rules & Shelter Staging

• Evacuate Behind Solid Structural Cover: Move evacuees behind reinforced concrete walls, substantial brick buildings, or natural earth berms. Light wooden structures and drywall partitions do not provide blast protection.
• Avoid Line of Sight to Glass: Never allow evacuees to gather in open courtyards, parking plazas, or sidewalks facing building facades fitted with glass curtain walls. An explosive shockwave will shatter commercial glass panes, projecting razor-sharp glass fragments hundreds of feet.
• Clear Routes Away from Threat: Ensure designated evacuation routes direct occupants away from the suspected package location rather than funneling crowds past the hazard.

---

5. Suspicious Mail & Package Recognition (US Postal Inspection Service Standards)

The United States Postal Inspection Service (USPIS) and federal law enforcement agencies have established specific physical, visual, and chemical indicators that distinguish potentially hazardous mail parcels from ordinary correspondence:

Visual and Physical Package Indicators

• Excessive Postage: Multiple low-denomination stamps affixed across the package rather than a standard commercial meter strip or digital barcode, used by perpetrators to avoid face-to-face interaction with postal window clerks.
• Defective Addressing: Handwritten or poorly typed addresses; crude cut-and-paste lettering from magazines or newspapers; severe misspellings of common words, proper names, or street addresses; incorrect professional titles (e.g., "Head Administrator Officer"); or addressed to a position without an individual name (e.g., "To the CEO").
• Restrictive Endorsements: Conspicuous markings such as "Personal," "Confidential," "To Be Opened Only By Addressee," "Do Not X-Ray," or "Fragile — Handle with Care."
• Structural and Dimensional Anomalies: Lopsided, uneven, or asymmetrical shape; rigid envelopes containing stiff cardboard or sheet metal inserts; springiness or strange resistance when lightly flexed; visible spring mechanisms; or protruding wires, string, or aluminum foil.
• Sensory and Chemical Signatures: Oily grease stains, chemical dampness, or discoloration bleeding through the outer wrapping paper; white, gray, or yellowish crystalline powder leaking from folded seams; strange odors such as bitter almonds, marzipan, petroleum, shoe polish, sulfur, or turpentine.
• Origin Irregularities: No return address present; an unverified or fictitious return address; or a postmark originating from a distant metropolitan hub or foreign nation that does not correlate with the stated return address.

---

6. Security Officer Action Protocol: The Cardinal Non-Handling Rule

The fundamental operating principle for private security personnel encountering an unverified parcel or potential improvised explosive device is absolute non-manipulation:

NEVER touch · NEVER move · NEVER tilt · NEVER open · NEVER submerge

The Fatal "Submersion Myth"

A dangerous misconception exists among untrained individuals that placing a suspicious package into a bucket, trash can, or sink filled with water will extinguish a fuse or render an explosive safe. Submerging an explosive device in water is extremely dangerous and potentially lethal. Water can short-circuit delicate electronic timing circuits, dissolve chemical separation barriers, accelerate exothermic chemical reactions, or cause instantaneous detonation.

Mandatory Step-by-Step Response Sequence

1. Freeze and Clear: Immediately stop all handling. Leave the package in the exact location and physical orientation in which it was discovered. Do not adjust surrounding furniture or objects.
2. Isolate the Room: Evacuate all personnel from the immediate room or office suite. Close interior doors behind you to help contain blast pressure and fragments, but do not lock doors (responding law enforcement bomb technicians require unobstructed access).
3. Establish Standoff Perimeter: Deploy security staff or visual barriers at hallway intersections, stairwells, and exterior entrances to establish an exclusion perimeter meeting or exceeding the CISA mandatory evacuation distance for the suspected device (for example, 70 feet for a pipe bomb or 150 feet for a briefcase), and move outdoor evacuees to the preferred distance.
4. HVAC Mitigation for Airborne Hazards: If chemical, biological, or radiological agents (such as anthrax powder or toxic chemical vapors) are suspected due to powders or strange odors, immediately contact facility engineering to shut down the building Heating, Ventilation, and Air Conditioning (HVAC) system. This prevents toxic airborne contaminants from circulating through air ducts to other floors.
5. Emergency Notification via Landline: Dial 911 immediately from a hardwired landline phone located outside the exclusion perimeter. Request police; responding police will call in a bomb squad, such as a county unit or the New Jersey State Police Arson/Bomb Unit.
6. First Responder Reception: Meet arriving police officers and bomb technicians at the designated outer staging area. Provide facility floor plans, keys, and an exact factual description of the package's location, indicators, and surrounding building hazards (e.g., natural gas lines, chemical storage).

---

7. Comprehensive Reference Table: Threat Management & Evacuation Standards

---

8. Practical Scenarios & Common Compliance Pitfalls

Scenario: The Mailroom Parcel with Almond Odor

Scenario: During morning mail sorting in a corporate headquarters, a mailroom clerk alerts Security Officer Vance to an unusual parcel addressed to the Chief Executive Officer. The package is heavily taped with duct tape, bears $35 in small postage stamps, has no return address, displays the handwritten endorsement "CONFIDENTIAL — OPEN ONLY BY CEO," feels unusually rigid, and emits a faint odor resembling bitter almonds. The clerk asks if they should open the corner with a box cutter to see what is inside.

Proper Protocol: Officer Vance commands the clerk to immediately step away from the package without touching it. He orders all clerks to evacuate the mailroom immediately. Vance closes the mailroom door behind them, deploys barrier tape at hallway intersections well beyond the CISA 70-foot mandatory evacuation distance for a package-sized device, and ensures all security staff refrain from using two-way radios or cell phones. He uses an office desk landline to notify building maintenance to shut down the HVAC system and calls 911 to request immediate bomb squad and hazmat response.

Common Compliance Pitfalls

• Carrying the Package Outside: Attempting to carry a suspicious package out of the building to the parking lot. Movement, tilting, or friction can trigger mercury tilt switches, pressure-release fuses, or unstable chemical mixtures.
• Transmitting Over Radios: Keying a two-way radio microphone to broadcast "I found a bomb in the mailroom!" The transmitted RF energy can induce electrical currents in electronic blasting caps, triggering premature explosion.
• Pulling the Fire Alarm Pull Station: Activating the standard manual fire alarm pull station during a bomb threat. This can funnel hundreds of evacuating occupants directly into lobbies or hallways where the explosive device is staged.