The 4 Types of Workplace Violence — and How to Mitigate Each

Workplace violence isn't one problem — it's four. OSHA and NIOSH classify workplace violence into four distinct categories, each with different warning signs, different perpetrators, and different controls. Bundling them together is why so many prevention programs feel exhaustive but never actually reduce risk. Pull them apart, and the playbook gets clearer.

The 4 OSHA-recognized types of workplace violence

The standard typology, used by OSHA, NIOSH, and most state workplace-safety agencies, breaks workplace violence into four types based on the perpetrator's relationship to the workplace:

• Type 1 — Criminal intent. The perpetrator has no legitimate relationship to the business. Robbery, trespass, terrorism, active assailant.
• Type 2 — Customer or client. The perpetrator is a person receiving services from the organization — a patient, customer, student, inmate, or client.
• Type 3 — Worker-on-worker. The perpetrator is a current or former employee.
• Type 4 — Personal relationship. The perpetrator has a personal relationship with an employee — most often an intimate partner — and the violence spills into the workplace.

Each type has its own dominant industries, its own warning signs, and its own prevention levers. The next four sections cover each in turn.

Type 1: Criminal intent

Most common in retail, banking, late-night service, and any environment where cash, controlled goods, or 24-hour access creates an opportunity. Type 1 violence is usually quick, transactional, and external — a robber, a trespasser, an active assailant with no legitimate reason to be on site.

Mitigations that actually work: physical access control, surveillance, cash-handling protocols, lighting, and — critically — a fast, discreet way for staff to alert security and trigger a facility lockdown the moment something starts. The seconds between "this is happening" and "everyone is informed" are the ones that matter.

Type 2: Customer or client

The single largest category by incident count, Type 2 dominates healthcare, social services, education, and any service-delivery environment with a power imbalance or emotional intensity. The perpetrator is someone you're trying to help — a frustrated patient, a destabilized client, a parent in conflict.

Mitigations: de-escalation training, two-staff visit policies, panic buttons in 1:1 settings, environmental design (clear sight lines, escape paths), and a way for a clinician or caseworker to summon help silently without escalating the situation in front of the person they're with.

Type 3: Worker-on-worker

Often missed because organizations want to believe it can't happen here. It can. The perpetrator is a current or recently terminated employee with knowledge of the building, the people, and the schedule. Warning signs are usually present — escalating conflict, harassment complaints, performance crises — but rarely connected.

Mitigations: a clear behavioral-threat-assessment process, HR and security coordination on terminations, immediate access-revocation procedures, and a discreet way for any employee to summon help from their workstation or phone — not just from a fixed panic button at the front desk.

Type 4: Personal relationship

Domestic violence that follows an employee to work. It disproportionately affects women but cuts across every industry and pay level. The perpetrator may have no other connection to the workplace, but they know the employee's schedule, their building, and where they park.

Mitigations: confidential employee disclosure pathways (so HR knows there's a restraining order without it becoming office gossip), front-desk awareness of restricted persons with photos on file, parking-lot escort options, and the same fast duress signaling that supports the other three types.

How Castatus addresses all four types

One platform, three product capabilities, every type covered.

Access control at the front line: Visitor Manager

Castatus Visitor Manager handles the access-control side — who is allowed on site, who isn't, and what the front desk needs to know about the people arriving. Photo capture and badge printing make every legitimate visitor identifiable, and ID scanning adds a verification layer for higher-risk environments.

Request Help and Discreet duress alerts:  SafeStatus with SafeSignal

SafeStatus is the employee mobile-safety app that provides the ability for an employee to request help, and SafeSignal provides a higher level duress-alert capability built into it. Any employee — a teller during a robbery, a nurse alone with an escalating patient, a social worker on a home visit, anyone walking to their car — can trigger a silent duress signal from their phone. Security and designated responders are notified immediately with location, employee identity, and alert type. There's no visible UI on the sender's screen, so the perpetrator never knows. That single capability covers Type 1, Type 2, Type 3, and Type 4.

Coordinated facility response: Crisis Manager

Once an incident is triggered, Castatus Crisis Manager turns the alert into coordinated action across every channel at once — SMS, voice, email, mobile push, and desktop alerts on every workstation. Pre-built templates for active-assailant lockdown (Type 1, 3, 4), shelter-in-place (Type 2 escalation), and facility evacuation cut response time from minutes to seconds. Visitors on site at the time of the incident are pulled into the same notification audience automatically (see touchless visitor check-in for how that works).

What to do this week

Pull your last twelve months of incident reports — including near-misses and verbal-threat reports — and tag each one with its OSHA type. The distribution will surprise you, and it tells you which of the four prevention levers needs investment first. OSHA's workplace violence guidance is the right starting point for the policy side; the Castatus platform handles the operational side. They work better together.