Ares Security
← All insightsBest Practices · 4 min read
Best Practices

Online threats to talent, venues and events: what you need to know

Ares Intelligence Desk · 4 min read

A comment under a post. A message to a performer's account. A thread calling for people to show up at your doors. Most threats to talent, venues and events now start online, often days or weeks before anything happens in person. Most of it turns out to be noise. The hard part is knowing which part is not, and knowing it in time to act.

Why online threats matter more than they used to

Public schedules, ticket listings, tagged photos and live posts make it easy for anyone to know where talent will be and when doors open. The same tools let a group organize a protest in an afternoon. Security that starts at the front door is starting late.

The signs that deserve a closer look

Experienced analysts look at behavior over time, not one angry post:

Fixation on one person, show or venue

Talk of traveling, buying tickets or showing up

A personal grievance, or a cause tied to your event

Specific details like dates, places or routes

A shift in tone, or sudden silence after heavy contact

On its own, none of these means danger. Together, and in context, they can.

Why it is hard to judge on your own

Most worrying posts are not crimes, and some quiet accounts are the real concern. People use several accounts, delete posts and change names. Reading one message out of context leads to one of two mistakes: panic over noise, or missing the pattern that mattered.

Staff who start digging on their own can tip the person off or cross lines they should not. And no one on a busy operations team has time to watch accounts around the clock while also running the event.

What to do the moment something worries you

A few basics hold in every case:

If a message threatens violence or names a time, place or weapon, call 911 first

Save it, with screenshots that show the account, link, date and time

Do not reply, argue or post about it

Route all contact from that person to one person on your team

These steps protect your options. What comes next depends on who you are dealing with, and that takes a closer look.

What good monitoring looks like

Strong monitoring is a process, not a one-time search. It usually has three parts:

An assessment: who is behind the account, their history and how worried to be

Checks before key moments, in the weeks, days and hours before an appearance or event

Live watch during the event, so anything posted from the line or the lobby reaches the team on site in minutes

It stays with public information, it is written up in plain terms, and it ties back to the people on the ground. Intel that never reaches the officer at the door does not protect anyone.

When online meets on site

The value of monitoring shows up at the venue. A good finding changes who stands at which door, how talent arrives and leaves, how the lobby is held and when the local precinct gets a call. That is why it works best when the people reading the posts and the people working the event are briefed on the same plan.

Venues and events, not just people

Not every threat is one person. A political theme, a controversial guest or a known cause can draw protests or disruption. Watching for calls to show up, planned routes and timing gives you room to adjust staffing and entry before a crowd forms. Treat any event with a political theme like a protest event, not just a talk.

Questions to ask before you hire someone

Who reads the posts, and what is their background?

Do they stick to public information only?

How fast do findings reach you during an event?

Can they connect what they find to the officers on site?

What do you get in writing afterward?

Frequently asked questions

Is it legal to monitor someone online? Reviewing public posts and records is legal. Hacking, fake accounts or pretending to be someone else to get access is not, and a professional never does it.

Should we block the person? Usually not right away. Blocking can push them to new accounts, and you lose sight of them. Save everything first.

How early should monitoring start? For a planned event, about two weeks out. For a person of concern, as soon as something feels off.

Where we come in

Ares is led by a former detective in the NYPD Intelligence Division, and our team runs threat reviews and online monitoring alongside officers on site at theaters and live venues, museums and events. If something online has you uneasy, we are glad to take a look.

This article is general information, not legal or fire code advice. Requirements change, so confirm the details for your site with the agency named or with us before you rely on them.

Ares Intelligence Desk · The Intelligence Desk tracks what is changing in New York and beyond, from new laws to new threats, and what it means for the people you protect.
Want a plan for your site or event? Talk to Ares. We answer 24/7 at (929) 560-6055.