What Is Zoom Bombing? Definition and Prevention Tips

You’re running a book club meeting, a town hall, or a work training session through Zoom when suddenly a stranger’s face pops up, a hateful slur is typed into the chat, and your screen is taken over by pornography. That moment of violation—an uninvited intruder seizing control of a video call—is known as zoom bombing.

Term coined: 2020 · Common disruption type: Offensive screen sharing and audio · Primary platform targeted: Zoom

The table below outlines key dimensions of zoom bombing, from its origin to legal response.

What does zoom bombing mean?

Zoom bombing is the unwanted, disruptive intrusion into a video-conference call by an uninvited participant, often with the intent to harass, shock, or offend attendees. The Oregon Department of Justice defines it as a situation where an uninvited person enters a meeting without permission. The FBI’s guidance treats it as a form of video-teleconferencing hijacking, and West Yorkshire Police describes the intrusion as typically involving offensive or explicit images.

“[A] situation where an uninvited person enters a meeting without permission.”

Oregon Department of Justice

“[T]he intrusion typically involves offensive or explicit images.”

West Yorkshire Police

What is Zoom Bombing?

The term zoom bombing emerged in early 2020 as the COVID-19 pandemic forced millions of people onto video calls for work, school, and social gatherings. The University of California, Irvine Office of Information Technology explains that uninvited participants gain access when meeting settings are left open. What started as isolated trolling quickly became a widespread nuisance.

University of California, Irvine Office of Information Technology notes that typical disruptions involve offensive screen sharing, hate speech, and obscene audio. The cost of a single incident can be significant: a school district, government committee, or therapy group that gets bombed loses not just a meeting but trust in the platform itself.

The implication: zoom bombing is not just a technical glitch—it is an intentional act of disruption that exploits open access by default, and its legal and social consequences depend heavily on where it happens and whom it targets.

Is zoom bombing illegal?

Whether zoom bombing breaks the law depends on jurisdiction, the content displayed, and the intent behind it. At the federal level, the U.S. Department of Justice, U.S. Attorney’s Office for the Eastern District of Michigan warned in April 2020 that teleconference hijacking can lead to state or federal charges, including disrupting a public meeting, computer intrusion, using a computer to commit a crime, hate crimes, fraud, or transmitting threatening communications.

Is Zoom bombing a crime?

In many cases, yes—but with nuance. The Oregon Department of Justice says zoom bombing may be a crime if explicit, specific, and imminent threats are made. Otherwise, the Oregon DOJ treats it as a non-criminal bias incident under state law—still harmful, but prosecuted differently. The Michigan warning emphasized that fines and imprisonment are potential outcomes.

• The Computer Fraud and Abuse Act (CFAA) can apply when an intruder accesses a meeting without authorization.
• State-specific hate crime or harassment statutes add layers depending on the nature of the disruption.
• New York and other states have considered or enacted legislation specifically targeting zoom bombing.

What this means: the legal landscape is patchwork. A zoom bomber who flashes hate symbols in Oregon may face a bias-incident report; the same act in Michigan could trigger a felony computer-intrusion charge. For hosts of public meetings, the safest bet is to assume the legal system will act slowly, and design security accordingly.

How do you stop zoom bombing?

Preventing zoom bombing is far easier than dealing with its aftermath. The CISA / FBI guidance summary lists a set of controls that, when applied together, block the vast majority of unauthorized entries. The key is not to rely on a single setting but to layer them.

How to prevent Zoom bombing?

• Require a meeting password for every session. The University of California, Irvine Office of Information Technology recommends unique meeting IDs and strong passwords for each meeting.
• Enable the waiting room feature to screen participants before admission. The UCI Office of Information Technology stresses this as a frontline defense.
• Restrict screen sharing to the host only. This single setting prevents a bomber from taking over the visual feed. The UCI OIT lists it as non-negotiable for public meetings.
• Lock the meeting once all expected participants have joined. This stops late-arriving intruders.

How to get rid of a Zoom bomber?

If a bomber gets in despite precautions, swift action limits the damage. The West Yorkshire Police advises victims to report the incident to the platform and, depending on the content, to local police. Follow these steps immediately:

1. Click Security → Remove Participant to eject the intruder.
2. Enable Mute All Participants to stop audio disruption.
3. Use the Report function in Zoom to log the incident with the platform.
4. Save the chat transcript and any screenshots as evidence.

How to deal with zoom bombing?

The human response matters as much as the technical one. For hosts of public meetings, announcing clear expectations at the start—listing the moderation tools being used—can deter casual intruders. The FBI/CISA guidance also stresses keeping videoconferencing software up to date as part of the defense.

The pattern: prevention is a process, not a toggle. The most secure meetings combine several controls, and the moments of greatest vulnerability are when a host forgets even one.

What are examples of zoom bombing?

Real incidents make the abstract problem concrete. During the peak of 2020, public lectures, school classes, and community meetings were repeatedly targeted. Oregon Department of Justice documents examples where intruders displayed pornography, shouted racial slurs, and typed hate speech into chat windows. The West Yorkshire Police confirms the pattern: offensive or explicit images are the most common form of disruption.

• A university lecture on race and law was bombed with white supremacist imagery.
• A middle school class had a meeting link shared on a public Discord server, leading to a stream of profanity.
• A town hall meeting for a local government was disrupted by someone mimicking a public official’s name.

The catch: if you search for meeting IDs online, automated tools and bots have been known to scan for unprotected Zoom links and pass them to troll groups. The problem is not just individual bad actors—it is the infrastructure that makes those actors feel untouchable.

Why do people do zoom bombing?

Motivations range from simple mischief to targeted harassment. Some perpetrators treat it as a prank—a way to get laughs from an online audience. Others use zoom bombing to make political or ideological statements. The CISA / FBI guidance does not analyze motive, but law enforcement actions suggest a spectrum from juvenile trolling to hate crimes.

• Trolling for attention: Live-streaming the disruption to an audience on platforms like Twitch or Discord.
• Political statements: Using a public meeting to broadcast slogans or symbols.
• Mischief: Bored individuals looking for an easy target.
• Automated tools: Bots that scan for non-password-protected meeting IDs.

The paradox: anonymity fuels the behavior, but the same anonymity makes it harder for law enforcement to identify every perpetrator. The result: a high-disruption, low-risk environment for the bomber—unless they get caught in one of the jurisdictions actively prosecuting these cases.

Frequently asked questions