Skip to content

Suspicious Packages, Mail Threats, and Unattended Items: Emergency Protocols

Emergency numbers differ by country. This page uses 911, the number for the United States and Canada. Many other countries use 112, 999, or another number. Find the number for your country.

In an era of complex public security challenges, discovering an unattended backpack in a transit hub, receiving an unexpected parcel with protruding wires, or opening a corporate letter that spills white chemical powder presents an immediate, high-stakes threat. While the overwhelming majority of unattended bags and oddly packaged parcels turn out to be accidental property losses or harmless mail order anomalies, treating a true improvised explosive device (IED), radiological dispersal mechanism, or biological toxin carelessly can result in fatal trauma or widespread facility contamination.

Responding effectively to suspicious items requires understanding standardized security screening rubrics such as the HOT protocol, recognizing mail bomb construction indicators, adhering to national explosive standoff safety perimeters, executing chemical and biological containment maneuvers, and coordinating with emergency bomb disposal squads.

Immediate Action Priorities: The Four Cs Protocol

If you encounter an unattended bag, an anomalous parcel, or a package displaying physical indicators of a bomb or toxic chemical payload, execute the internationally recognized Four Cs Protocol:

Suspicious Item Discovered
            │
            ├──> 1. CONFIRM: Do not touch, shake, tilt, open, or smell the item
            │
            ├──> 2. CLEAR: Evacuate occupants away from the room and line-of-sight
            │
            ├──> 3. CORDON: Seal perimeter boundaries; prevent re-entry into blast zone
            │
            └──> 4. CONTROL: Call emergency dispatch from a safe distance; guide responders
  1. Confirm (Do Not Touch): Under no circumstances should you touch, lift, tilt, shake, probe, or open the item. Improvised explosive devices frequently utilize mechanical tilt switches, anti-disturbance ball bearings, pressure-release triggers, or ambient light sensors engineered to detonate upon minimal physical movement.
  2. Clear the Area: Calmly evacuate all individuals from the room, hallway, or immediate vicinity. Ensure evacuation pathways move behind solid structural barriers and away from plate glass windows.
  3. Cordon the Zone: Establish a physical perimeter around the hazard zone. Close interior fire doors, lock exterior access points, and station building personnel or physical tape at hallway intersections to prevent curious individuals from entering the danger radius.
  4. Control the Response: Once you have moved beyond the minimum evacuation standoff distance, call your national emergency telephone number (911, 112, 999). Provide the dispatcher with precise geographic coordinates, building floor plans, and physical descriptions of the item.

Radio Frequency Hazards: Cell Phones and Two-Way Transceivers

A common and dangerous mistake made by first responders and civilians is standing next to a suspicious parcel while transmitting on a smartphone, two-way radio, or handheld walkie-talkie:

+--------------------------------------------------------------------------+
|                  RADIO FREQUENCY (RF) DETONATION RISK                    |
|                                                                          |
| [Transmitting Radio / Smartphone]                                        |
|              │                                                           |
|              ▼ Emits High-Frequency Electromagnetic Energy (RF Waves)    |
|                                                                          |
| [Internal Circuitry of Improvised Explosive Device (IED)]                |
|              │                                                           |
|              ▼ Protruding wires or detonator legs act as receiving antenna|
|                                                                          |
| Induced Electrical Current Ignites Low-Energy Electric Blasting Cap      |
|                                                                          |
| MANDATE: Maintain at least 100 meters (330 feet) separation before       |
| using mobile phones, Wi-Fi radios, or two-way security transceivers.     |
+--------------------------------------------------------------------------+

Modern commercial blasting caps and improvised electronic detonators can be triggered by microscopic electrical currents (as low as 20 milliwatts). The radio-frequency (RF) energy emitted by cellular phones, Wi-Fi routers, handheld transceivers, and emergency vehicle radios can induce sympathetic electrical currents in nearby wire coils, detonating the device:

  • The RF exclusion boundary: Maintain a minimum separation of at least 100 meters (330 feet) from the suspicious package before turning on, transmitting on, or speaking into a cellular phone or two-way radio.
  • Use hardwired communications: If coordinating an evacuation from inside a facility, use hardwired landline telephones or building public address systems that do not radiate high-frequency electromagnetic fields.

The HOT Protocol for Assessing Unattended Items

Public safety and transport agencies use the HOT protocol to differentiate ordinary lost personal property from genuine threats:

HOT Protocol Decision Flowchart
              │
              ├──> H - Is the item HIDDEN?
              │         └── Concealed behind trash bins, wedged under stairs, placed to evade cameras?
              │
              ├──> O - Is the item OBVIOUSLY SUSPICIOUS?
              │         └── Protruding wires, timers, chemical smells, tape wraps, powder leaks?
              │
              └──> T - Is the item TYPICAL OF ITS LOCATION?
                        └── A gym bag in a gym locker room is typical; a pressure cooker in a subway is not.
Criteria Harmless Lost Property High-Threat Suspicious Item
H - Hidden Left in plain sight on a bench, open passenger seat, or cafe table Concealed deliberately behind radiator grilles, inside trash receptacles, or under stairs
O - Obviously Suspicious Standard manufactured luggage with luggage tags and brand logos Visible electrical wiring, external batteries, oily stains, antenna rods, chemical odors
T - Typical of Environment A student backpack in a university lecture hall or study lounge A sealed metal ammunition can or taped cardboard box abandoned in a municipal government lobby

If an item satisfies any two criteria of the HOT protocol, treat it immediately as a potential explosive device and initiate evacuation.

Postal Mail and Parcel Bomb Screening Indicators

Mail bombs sent via postal services or private parcel delivery couriers are designed to target specific corporate executives, government officials, or public figures. Postal screening personnel, administrative receptionists, and home occupants should screen unexpected deliveries against these established visual indicators:

+--------------------------------------------------------------------------+
|                 ANATOMY OF A SUSPICIOUS POSTAL PARCEL                    |
|                                                                          |
| [Excessive Stamps / No Meter Mark]   [Restrictive Endorsement: Personal] |
| ┌──────────────────────────────────────────────────────────────────────┐ |
| │ [STAMP][STAMP][STAMP][STAMP]       CONFIDENTIAL - CHIEF EXECUTIVE    │ |
| │                                                                      │ |
| │                                    To: Mr. Jon Doe (Title Mispelled) │ |
| │ [No Return Address]                    100 Executive Blvd, Suite 4   │ |
| │                                                                      │ |
| │ • Oily stains or greasy discoloration on brown kraft paper wrapping  │ |
| │ • Protruding wire filaments, aluminum foil, or string ties           │ |
| │ • Rigid, stiff envelope that resists normal bending (Sheet explosive)│ |
| │ • Lopsided weight distribution or heavy metallic rattle               │ |
| │ • Faint chemical odor: Bitter almonds, marzipan, acetone, or sulfur  │ |
| └──────────────────────────────────────────────────────────────────────┘ |
+--------------------------------------------------------------------------+

Visual and Physical Screening Checklist

  • Excessive or unusual postage: The sender frequently applies significantly more postage stamps than necessary to avoid having to speak with a postal service clerk at a retail counter.
  • Restrictive delivery endorsements: Markings such as "Personal," "Private," "Confidential," "Eyes Only," or "To Be Opened Exclusively by Addressee" are intended to prevent administrative assistants from opening the parcel before it reaches the target.
  • Misspelled names or incorrect professional titles: Hand-lettered or poorly cut-out magazine lettering with misspelled executive titles or distorted company names.
  • Anomalous physical construction:
  • Lopsided balance: The weight of the parcel is concentrated at one end (indicating a heavy battery, detonator, or lead pipe casing).
  • Excessive reinforcement: The envelope or box is heavily wrapped with excessive layers of duct tape, filament tape, or heavy electrical tape.
  • Rigid letter mail: A standard paper envelope that feels unnaturally stiff, heavy, or springy when handled gently, indicating internal cardboard stiffeners or flexible plastic sheet explosives.
  • Chemical and aromatic leaks: Oily discoloration seeping through wrapping paper, or faint chemical scents resembling marzipan, shoe polish, bitter almonds, bleach, or burnt match heads.

National Explosive Standoff Safety Perimeters

The United States Department of Homeland Security (DHS), Federal Bureau of Investigation (FBI), and international military explosive ordnance disposal (EOD) commands maintain standardized minimum safe evacuation distances for explosive hazards:

+--------------------------------------------------------------------------+
|             EXPLOSIVE STANDOFF DISTANCE MATRIX (DHS / FBI)               |
|                                                                          |
| DEVICE TYPE            ESTIMATED EXPLOSIVE    MINIMUM MANDATORY  OUTDOOR |
|                        MASS (TNT EQUIVALENT)  INDOOR EVACUATION  STANDOFF|
| ──────────────────────────────────────────────────────────────────────── |
| Small Pipe Bomb        2.3 kg (5 lbs)         21 meters (70 ft)  366 m   |
|                                                                  (1,200ft|
| Briefcase / Backpack   23 kg (50 lbs)         46 meters (150 ft) 564 m   |
|                                                                  (1,850ft|
| Compact Passenger Car  227 kg (500 lbs)       98 meters (320 ft) 457 m   |
| (Sedan VBIED)                                                    (1,500ft|
| Full-Size Cargo Van    1,814 kg (4,000 lbs)   195 meters (640 ft)838 m   |
|                                                                  (2,750ft|
+--------------------------------------------------------------------------+

Understanding the Glass Hazard Horizon

When an explosive device detonates, the blast pressure wave (overpressure) travels through ambient air at supersonic speeds.

  • Primary blast injury: Lethal lung rupture and gastrointestinal perforation occur in close proximity to the detonation point.
  • Secondary blast injury (Flying Glass): Blast pressure shatters commercial plate glass, tempered storefront windows, and residential window panes kilometers away. High-velocity razor-sharp glass shards account for over 80 percent of secondary casualties in urban explosive events.
  • Indoor evacuation doctrine: Never shelter behind windows, glass atrium doors, or drywall partitions. Move to interior structural corridors constructed of reinforced concrete, structural masonry, or below-ground basements.

Chemical and Biological Powder Threats: White Powder Protocol

Receiving an envelope that contains unverified white powder, granules, or liquid vials indicates a potential biological attack (such as Bacillus anthracis / anthrax spores, ricin toxin) or toxic synthetic opioids (such as aerosolized fentanyl carfentanil).

Letter Opens & Powder Spills
              │
              ├──> 1. Set Down Gently: Do not shake, blow, sweep, or touch powder
              │
              ├──> 2. Isolate Airflow: Shut off room and building HVAC systems immediately
              │
              ├──> 3. Evacuate Room: Close interior doors; prevent others from entering
              │
              ├──> 4. Decontaminate Skin: Wash hands and face with copious soap and water
              │
              └──> 5. Bag Clothing: Remove outer garments; place in double plastic bags

The Immediate Powder Containment Sequence

  1. Set the letter down gently: Do not shake the envelope, throw it into the trash, or attempt to brush powder off your skin or desk. Shaking or wiping aerosolizes microscopic particles into the room air currents, ensuring deep inhalation into lung alveoli.
  2. Cover the spilled material: Gently cover the envelope and spilled powder with an inverted plastic wastebasket, clean plastic sheeting, or a clear container without disturbing the air.
  3. Deactivate building HVAC systems: Contact building maintenance or manually switch off the central ventilation and air conditioning (HVAC) system immediately. Central HVAC fans suck airborne spores into return air ducts and disperse them across every floor of the building within minutes.
  4. Isolate and seal the room: Evacuate all occupants from the immediate room. Close all doors, lock them, and place a physical sign on the exterior door handle stating: "Hazardous Material: Do Not Enter."
  5. Wash contaminated skin with soap and warm water: Wash your hands, forearms, neck, and face thoroughly with warm water and copious antibacterial soap for at least 60 seconds. Soap and water mechanically rinse spores off the epidermal layer. Do not use household bleach on bare skin, as bleach damages skin tissue and creates portals of entry for toxins.
  6. Remove and contain outer garments: If powder landed on your clothing, carefully remove outer jackets, shirts, and ties, rolling them inward to trap the powder. Place the clothing inside a heavy-duty plastic garbage bag and seal the bag with tape.

Reporting Procedures: What to Tell Emergency Dispatch

When you call emergency dispatch from outside the danger zone, provide structured, actionable tactical intelligence:

+--------------------------------------------------------------------------+
|                  TACTICAL REPORTING COMMUNICATIONS MATRIX                |
|                                                                          |
| INFORMATION CATEGORY    SPECIFIC REPORTING ELEMENTS                      |
| ──────────────────────────────────────────────────────────────────────── |
| Precise Location        Building name, floor, room number, column number |
| Physical Geometry       Briefcase, parcel, pipe, ammunition tin, backpack|
| Visual Indicators       Wires, switches, batteries, tape, oily stains    |
| Powder / Fluid Release  Color, texture, estimated quantity, aerosol cloud|
| Exposed Personnel       Number of people in room; clinical symptoms      |
| Evacuation Status       Standoff distance established; access control set|
+--------------------------------------------------------------------------+
  • State the physical geometry: Describe whether the item is a cardboard parcel, padded envelope, metallic pipe, or commercial backpack.
  • Detail sensory characteristics: State if ticking sounds, hissing, or chemical odors were detected.
  • Identify contaminated individuals: Inform the dispatcher if any person opened the parcel, touched suspicious powder, or inhaled fumes, so paramedics can dispatch hazardous materials (Hazmat) decontamination units.

Evacuation and Go-Bag Considerations for Children and Pets

Building or neighborhood evacuations triggered by bomb threats or suspicious parcels require specific management for children and domestic animals:

Dependent Care During Security Evacuations
          │
          ├──> Accompanying Children:
          │         ├── Calm, non-alarmist communication: Reassure safety
          │         ├── Physical containment: Keep hold of hands; avoid glass corridors
          │         └── Go-Bag entertainment: Comfort items, coloring pads, audio players
          │
          └──> Companion Animals:
                    ├── Rapid leash containment: Secure dogs; crate cats immediately
                    ├── Pre-staged evacuation kit: Pet food, bowls, rabies records
                    └── Exclusion duration: Animals cannot re-enter for 6 to 12 hours

Protecting Children

  • Maintain a calm, authoritative demeanor: Children mirror adult emotional reactions. Do not scream, run frantically, or use terrifying language. Calmly explain that police need to inspect the building and that you are going outside for a walk.
  • Navigate safely away from glass: When moving children through urban canyons or building lobbies, keep them far away from floor-to-ceiling plate glass windows.
  • Child go-bag supplies: Bomb sweeps by police K9 units and bomb squads can take 4 to 12 hours. Pack a go-bag with sensory items, drawing books, card games, audio players with headphones, and comforting snacks to keep children calm during extended waiting periods outside police cordons.

Managing Companion Animals

  • Immediate physical containment: In residential evacuations, crate cats and leash dogs immediately. If police order a neighborhood evacuation, you may be barred from returning to your home for up to 24 hours while bomb disposal robots inspect the scene.
  • Do not leave pets behind: Take your pets with you. Pack a 3-day supply of pet food, a leash, travel water bowls, and veterinary vaccination papers.
  • Pet-friendly shelter logistics: Identify pet-friendly lodging or veterinary boarding facilities outside the cordoned zone in advance.

What to Expect During the Emergency Response

Understanding the procedures of specialized explosive ordnance disposal (EOD) and Hazmat teams prevents interference with life-saving operations:

  1. Perimeter lockdown: Police will establish inner and outer cordons, diverting traffic and stopping pedestrian transit.
  2. K9 explosive detection: Certified explosive-detection dogs will sweep adjacent areas to ensure secondary devices are not planted along evacuation routes.
  3. Robotic inspection: Bomb squads deploy remote-controlled tracked robotic platforms equipped with high-resolution cameras, radiological sensors, and digital X-ray imaging panels to inspect the package without endangering human lives.
  4. Disruption and disposal: If the item contains explosive components, technicians may employ high-pressure water disruptors or shaped explosive charges to disarm the mechanism on site, generating a loud blast. Do not panic if a controlled detonation occurs.