Security Intelligence

Security for Esports and Gaming Industry Executives | CloseProtectionHire

Q: "What is swatting and how serious a threat is it to streamers and esports personalities?"

"Swatting is the malicious practice of placing a false emergency call (typically reporting an armed hostage situation or active shooter) to direct a police armed response to a victim's home address. The intent is to cause distress, physical harm from the police response, and reputational damage. In the United States, documented swatting cases have resulted in deaths: in December 2017, Andrew Finch was shot and killed by Wichita police following a swatting call placed by Tyler Barriss, who was subsequently convicted and sentenced to 20 years. Several high-profile streamers including Pokimane, xQc, and Dr Disrespect have been publicly swatted during live streams. The FBI has treated swatting as a federal matter and has prosecuted perpetrators under 18 U.S.C. 1038 (false information and hoaxes) and 47 U.S.C. 223 (harassment). The threat is highest for streamers and content creators who have disclosed or had their home address exposed, and for those with large audiences who attract a small proportion of determined hostile actors."

Q: "How are professional esports players and streamers targeted for home address exposure?"

"Address exposure methods in the gaming community include: doxxing (deliberate public posting of personal information on forums and social media -- 4chan, Reddit, Discord), package delivery interception (intercepting delivery notifications or sending unordered deliveries to confirm an address), IP address logging (direct connections in some game clients can expose IP addresses, which can then be used with a targeted social engineering call to an ISP to elicit the subscriber's address), social engineering of local utilities and service providers, and in some cases real-world surveillance of known public appearances. Streamers who have posted geo-identifiable background details in their stream environment (street visible through window, distinctive architecture, local business signage) inadvertently assist address identification."

Q: "What security precautions apply to a major esports tournament in a P1 city?"

"Major esports tournaments -- The International (Dota 2), League of Legends World Championship, Valorant Champions -- are held in cities globally including in P1 city environments. Manila, Jakarta, Bangkok, and Istanbul have all hosted major esports events. The security framework for player and team travel to P1 cities applies the same threat assessment as any professional sports team: vetted transport from airport to hotel, accommodation security review, team movement security, social media OPSEC briefing, and MEDEVAC planning. For players travelling as individuals (rather than as part of an organisation with security infrastructure), the K\u0026R risk in P1 cities -- particularly for players with publicly known prize earnings and cryptocurrency holdings -- requires specific individual security planning."

Q: "How does cryptocurrency and NFT gaming create specific wealth exposure risks for the gaming community?"

"The intersection of gaming and cryptocurrency has created a population of gaming professionals with significant, publicly verifiable digital asset holdings. Blockchain OSINT tools (Arkham Intelligence, Nansen, DeBank) allow anyone to track wallet activity and estimate holdings. Gaming influencers and NFT project founders who have made public statements about their holdings, or whose on-chain activity is attributable to their public wallet addresses, have created a precise wealth target. The physical security response is the same as for any cryptocurrency holder: hardware wallet physical security, residential security review, routine variation, and communications security. The additional gaming-specific risk is that the target audience -- including potentially hostile actors -- has a very high digital literacy and the ability to conduct sophisticated on-chain and OSINT research."

Q: "What is the security risk at gaming industry conferences and trade shows?"

"Gaming conferences -- E3 (suspended post-2023), Gamescom (Cologne), Tokyo Game Show, Taipei Game Show, Gamescom Asia (Singapore) -- concentrate high-value IP, competitive intelligence, and industry leaders in public-facing environments. The competitive intelligence risk mirrors the pattern at any technology trade show: unreleased game footage, hardware specifications, and business deal details are all commercially sensitive. Additionally, major gaming companies (Activision Blizzard/Microsoft, Sony Interactive Entertainment, Nintendo, Tencent, NetEase) attract state-sponsored economic espionage interest for their IP, particularly from PRC-aligned threat actors targeting Western gaming IP for market entry without licensing costs. The FBI/NCSC/CISA 2023 joint advisory on PRC economic espionage is directly relevant to gaming executives attending international events."

Security for esports executives, professional gamers, streamers, and tournament organisers: swatting threats, tournament travel to P1 cities, streaming OPSEC, crypto wallet targeting, and conference security.

6 May 2026

Written by James Whitfield

Speak to the Team

The esports and gaming industry has grown from a niche entertainment sector to a multi-billion-dollar industry with professional athletes, international organisations, and C-suite executives who face a security environment that is in some respects unique and in others identical to other high-profile sectors.

This guide addresses the security requirements for esports professionals, gaming industry executives, content creators with large followings, and the organisations that manage them.

The Swatting Threat

Swatting – the practice of placing a fabricated emergency call to direct armed police to a target’s home address – is the most distinctive and lethal security threat specific to the gaming and streaming community.

Documented incidents. The most serious outcome occurred on December 28, 2017, when Andrew Finch was shot and killed by Wichita Police Department officers who responded to a swatting call placed by Tyler Barriss following a dispute in the Call of Duty community. Barriss was subsequently convicted of multiple federal charges and sentenced to 20 years in federal prison. The case established that swatting can directly cause death and that perpetrators face serious federal criminal consequences.

High-profile streaming personalities who have been publicly swatted during live broadcasts include Pokimane, xQc, Ludwig, and Loeya. The public nature of a live swatting event – visible to thousands of viewers in real time – increases the reputational and psychological harm for the target and provides validation to the perpetrator.

Federal law. US federal prosecutors have charged swatting perpetrators under 18 U.S.C. 1038 (false information and hoaxes affecting emergency services), 18 U.S.C. 875 (interstate threats), and 47 U.S.C. 223 (harassment using telecommunications). Sentences of 5-25 years have been imposed.

The UK equivalent. In the United Kingdom, swatting would constitute an offence under the Communications Act 2003 s.127 (sending a false or offensive message), the Malicious Communications Act 1988, and potentially the Terrorism Act 2000 s.51 (communicating false information about bombs). UK police have prosecuted swatting cases, though the frequency is lower than in the US.

Address Protection

The root cause of swatting vulnerability is the exposure of a target’s home address. Address protection strategies for high-profile gaming professionals:

Registered address service. All public-facing communications – social media profiles, company registrations, fan mail, merchandise supplier accounts – should use a PO box or registered address service rather than the home address. In the UK, Companies House filings can use a registered agent’s address. In the US, a registered agent service can be used for business registrations, and a separate PO box for public communications.

Property ownership anonymisation. Owning property in a personal name creates a public record linking the name to an address in most jurisdictions. A property-owning LLC or trust (properly structured with legal advice) removes the direct link. This approach is used by many high-profile entertainment figures and is legally straightforward.

Background detail discipline in streams. Streams, YouTube videos, and TikToks recorded at home should be audited for geo-identifiable details. Street names or business signage visible through windows, distinctive architectural features, local delivery vehicles, and postal codes visible on packages are all potential address indicators. A background audit of existing content is appropriate for any streaming professional.

Registering with local police. Some US police departments have created swatting prevention registries that allow residents to register their addresses as likely swatting targets, ensuring that any emergency call to that address is verified before armed response is deployed. Where such registries exist, registration is the single most effective structural mitigation.

Cryptocurrency and Wealth Exposure

The esports and gaming community has a significantly higher proportion of cryptocurrency-engaged individuals than most professional sectors. Sources of gaming-adjacent wealth exposure:

Tournament prize earnings. Major esports tournament prizes are publicly reported. The winner of The International (Dota 2) 2024 shared a prize pool of over USD 3 million. Individual prize earnings are verifiable and create a publicly documented wealth indicator. For players who have converted prize earnings to cryptocurrency and used wallet addresses associated with their public identity, on-chain balance and transaction history are fully transparent.

Content creator revenue. Top-tier streamers and YouTube gaming creators generate eight-figure annual revenues from subscriptions, advertising, sponsorship, and brand deals. Financial press coverage and creator self-disclosure on social media (luxury purchases, property, travel) create a precise wealth profile for a motivated criminal researcher.

NFT and gaming crypto projects. The gaming industry has been a significant adopter of NFT and Web3 gaming mechanics. Executives and founders of gaming NFT projects who hold significant token allocations have publicly verifiable on-chain holdings. Blockchain analytics tools used by professional investigators and by criminals are accessible to anyone with internet access.

The physical security response to cryptocurrency wealth exposure in the gaming sector mirrors the pattern for any high-net-worth individual with verifiable digital assets: hardware wallet physical security (not hot wallet for significant holdings), residential security review, and the same personal security measures that apply to any HNWI with a public profile.

Tournament and Conference Travel Security

P1 city tournaments. Major esports events have been held in Istanbul, Manila, Bangkok, Jakarta, and Sao Paulo – all P1 cities with material security considerations for travelling professionals. For players and team staff:

Pre-travel threat assessment using FCDO/OSAC advisories for the specific city
Vetted transport from airport to hotel (not public taxi or ride-sharing)
Accommodation security review: team floor or separate accommodation from the public event
Social media OPSEC briefing: no real-time location disclosure, no hotel identification, no transport details
Check-in protocol for the duration
MEDEVAC arrangements confirmed in advance

Esports organisations that have professional security infrastructure (typically the largest, most-funded organisations) apply these measures as standard. Smaller organisations and individual players travelling independently often do not – the duty of care obligation falls on the organisation employing or contracting the player.

Conference IP security. Gaming conferences – Gamescom (Cologne, 300,000+ attendance), Tokyo Game Show, Taipei Game Show, and regional events including Gamescom Asia (Singapore) – present competitive intelligence risks. Unreleased game content, hardware specifications, and commercial deal details at private publisher briefings are all commercially sensitive. The NCSC and FBI/MI6/BfV joint advisory from January 2023 on PRC economic espionage specifically covers technology IP, which includes gaming IP. Executives attending events with a significant PRC-aligned industry presence should apply the clean device protocol (travel-specific device, no access to production systems, factory reset post-travel).

Residential Security for High-Profile Gaming Professionals

For streamers and esports executives whose home address is a known or potentially discoverable attack vector, the residential security review covers the same categories as for any high-profile individual:

Access control. Video doorbell, intercom-verified entry, and perimeter awareness of who is approaching the property before a door is opened. For professionals who stream from home, the security posture of the streaming environment itself – camera angles, window views, acoustic disclosure – is part of the review.

Visitor management. Fan gifts, unsolicited packages, and fan visits to known or inferred home addresses are documented risks in the gaming industry. A policy for handling unsolicited deliveries (handled outside the residential perimeter, not brought inside without inspection) is appropriate.

Incident protocol. High-profile gaming professionals should have a clear personal incident protocol: what to do when a swatting incident occurs (stay on the floor, away from windows, with hands visible, and if possible communicate via mobile to police that this is a likely swatting incident before officers reach the door). This protocol should be briefed to all household members.

For the broader personal security framework for executives and high-profile individuals facing targeting through social media exposure and verifiable wealth indicators, see our guide to managing your digital footprint. For the residential security review applicable to gaming professionals whose home address is an active threat vector, see our residential security for executives guide.

Summary

Key takeaways

Swatting is a documented lethal threat that requires residential address protection as a primary mitigation

The December 2017 death of Andrew Finch demonstrates that swatting is not merely a harassment tactic -- it has killed. The primary mitigation is residential address protection: using a PO box or registered address service for all public-facing communications, using a trust or LLC for property ownership, and ensuring that no broadcast content discloses addressable information. For high-profile streamers, a secondary mitigation is registering the home address with local police as a potential swatting target so that any emergency call to that address is verified before armed response is deployed.

Esports player cryptocurrency holdings are a publicly visible, precise wealth indicator

Prize earnings from major esports tournaments are publicly reported. For players who have converted winnings to cryptocurrency and used identifiable wallet addresses, the on-chain balance is publicly visible to anyone with basic blockchain literacy. This creates a direct link between public identity and quantified wealth. The response is hardware wallet security, address separation, and the same residential and personal security measures that apply to any HNWI with publicly known assets.

Tournament travel to P1 cities requires the same security framework as corporate executive travel

When the League of Legends World Championship or Valorant Champions is held in Istanbul, Manila, or Bangkok, individual player travel is subject to the full P1 city threat environment. Esports organisations sending players to P1 tournaments are exercising a duty of care obligation that requires threat assessment, vetted transport, and MEDEVAC planning -- not just visa and hotel booking.

IP address exposure in gaming requires active operational security at the network level

Games with peer-to-peer connection models (some older titles, some voice-over-IP clients) can expose players' IP addresses to opponents. Professional players and streamers should use a VPN for all gaming activity and should ensure that their home network IP is never exposed. The ISP social engineering risk (using an IP to impersonate a subscriber to a telco for address disclosure) is the chain from IP to physical address.

Gaming industry executives face the same state-sponsored IP theft risk as other technology sector leaders

Major gaming studios hold IP valued at billions of dollars. The PRC economic espionage threat documented by FBI/MI6/BfV includes technology IP, and gaming IP (source code, unreleased content, business deals) is commercially valuable to state-affiliated actors seeking to replicate without licensing. Executives at major studios travelling to China-hosted events or meeting with China-based business partners should apply the NCSC clean device protocol.

FAQ

Frequently Asked Questions

Swatting is the malicious practice of placing a false emergency call (typically reporting an armed hostage situation or active shooter) to direct a police armed response to a victim’s home address. The intent is to cause distress, physical harm from the police response, and reputational damage. In the United States, documented swatting cases have resulted in deaths: in December 2017, Andrew Finch was shot and killed by Wichita police following a swatting call placed by Tyler Barriss, who was subsequently convicted and sentenced to 20 years. Several high-profile streamers including Pokimane, xQc, and Dr Disrespect have been publicly swatted during live streams. The FBI has treated swatting as a federal matter and has prosecuted perpetrators under 18 U.S.C. 1038 (false information and hoaxes) and 47 U.S.C. 223 (harassment). The threat is highest for streamers and content creators who have disclosed or had their home address exposed, and for those with large audiences who attract a small proportion of determined hostile actors.

Address exposure methods in the gaming community include: doxxing (deliberate public posting of personal information on forums and social media – 4chan, Reddit, Discord), package delivery interception (intercepting delivery notifications or sending unordered deliveries to confirm an address), IP address logging (direct connections in some game clients can expose IP addresses, which can then be used with a targeted social engineering call to an ISP to elicit the subscriber’s address), social engineering of local utilities and service providers, and in some cases real-world surveillance of known public appearances. Streamers who have posted geo-identifiable background details in their stream environment (street visible through window, distinctive architecture, local business signage) inadvertently assist address identification.

Major esports tournaments – The International (Dota 2), League of Legends World Championship, Valorant Champions – are held in cities globally including in P1 city environments. Manila, Jakarta, Bangkok, and Istanbul have all hosted major esports events. The security framework for player and team travel to P1 cities applies the same threat assessment as any professional sports team: vetted transport from airport to hotel, accommodation security review, team movement security, social media OPSEC briefing, and MEDEVAC planning. For players travelling as individuals (rather than as part of an organisation with security infrastructure), the K&R risk in P1 cities – particularly for players with publicly known prize earnings and cryptocurrency holdings – requires specific individual security planning.

The intersection of gaming and cryptocurrency has created a population of gaming professionals with significant, publicly verifiable digital asset holdings. Blockchain OSINT tools (Arkham Intelligence, Nansen, DeBank) allow anyone to track wallet activity and estimate holdings. Gaming influencers and NFT project founders who have made public statements about their holdings, or whose on-chain activity is attributable to their public wallet addresses, have created a precise wealth target. The physical security response is the same as for any cryptocurrency holder: hardware wallet physical security, residential security review, routine variation, and communications security. The additional gaming-specific risk is that the target audience – including potentially hostile actors – has a very high digital literacy and the ability to conduct sophisticated on-chain and OSINT research.

Gaming conferences – E3 (suspended post-2023), Gamescom (Cologne), Tokyo Game Show, Taipei Game Show, Gamescom Asia (Singapore) – concentrate high-value IP, competitive intelligence, and industry leaders in public-facing environments. The competitive intelligence risk mirrors the pattern at any technology trade show: unreleased game footage, hardware specifications, and business deal details are all commercially sensitive. Additionally, major gaming companies (Activision Blizzard/Microsoft, Sony Interactive Entertainment, Nintendo, Tencent, NetEase) attract state-sponsored economic espionage interest for their IP, particularly from PRC-aligned threat actors targeting Western gaming IP for market entry without licensing costs. The FBI/NCSC/CISA 2023 joint advisory on PRC economic espionage is directly relevant to gaming executives attending international events.

Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.