FOLLOW US

Legal Snapshot

• Deputies say a false 911 report led to DDG being handcuffed during a livestreamed paintball event in Castaic on Aug. 10, 2025; no arrests were made at the scene.
• Detectives opened a criminal probe into the caller; California law allows restitution of emergency response costs upon conviction for false emergency reporting.
• Investigators can combine 911 call metadata, carrier records, and VoIP logs—plus STIR/SHAKEN authentication data—to unmask spoofed callers and support state and possible federal charges.

By Samuel Lopez – USA Herald

A fake 911 call nearly turned deadly for rapper–streamer DDG when Los Angeles County sheriff’s deputies rolled on a report of an armed man “threatening to harm everyone” at a paintball tournament in Castaic—only to find no gun, no threat, and a hoax that played out live to thousands of viewers. Deputies briefly detained DDG, then released him after determining the call was bogus; detectives are now hunting the caller.

“The anonymous caller fabricated a claim that DDG was armed and threatening people… This reckless and malicious act… put everyone present — including law enforcement — in harm’s way,” DDG’s attorney and manager, Dimitri Hurt, said, adding that DDG was “deeply shaken” though physically unharmed.

How a “Digital Manhunt” Exposes a Swatter

Swatters often hide behind spoofed caller ID or internet telephony, but modern 911 and telecom infrastructure leaves a trail:

• 911 Call Metadata (ANI/ALI): Public Safety Answering Points receive the caller’s number (ANI) and location record (ALI) or a “pseudo-ANI” for wireless calls, which can be used to identify the originating provider and call path—even if the visible caller ID was spoofed. mn-mesb.org
• Carrier and VoIP Logs: Investigators subpoena the originating carrier/VoIP service for call detail records, account data, payment instruments, IP login history, and device identifiers. Spoofing commonly rides over VoIP, which providers can document. LEB
• STIR/SHAKEN Authentication: Under the TRACED Act, carriers implement caller-ID authentication; attestation data traveling with calls helps trace the upstream source and identify where spoofing occurred. Federal Communications Commission Federal Register
• Pen Register/Trap-and-Trace Orders: When appropriate, courts can authorize real-time dialing/receiving metadata capture to map contact networks tied to a suspect line or account. Texas DCAA Center for Democracy and Technology
• Preservation and Stored-Records Process: Investigators can issue preservation requests and seek court orders under the Stored Communications Act to lock down and obtain metadata swiftly—before it disappears. Department of Justice

Put together, these tools allow detectives to peel back spoofing layers, correlate IPs to subscriber accounts, and—if needed—coordinate across jurisdictions or federally if the communication crossed state lines.