Kidnap and Ransom Risk for Corporate Travellers: A Clear-Eyed Briefing

Kidnapping affecting business travellers is documented, measurable, and concentrated in specific geographic clusters. It is not evenly distributed across the world. Understanding the actual pattern is more useful than a general threat level rating.

This briefing draws on OSAC Crime and Safety Reports (2025-2026), Control Risks RiskMap 2026, and UK FCDO travel advisories to give you a grounded picture of who is at risk, where, and what changes when professional security is in place.

Who Gets Targeted

Profile matters more than passport. The assumption that Western nationals are inherently targeted is partially correct but incomplete. What kidnappers are selecting for is visible economic value combined with operational predictability.

An executive travelling in a premium vehicle, staying at a recognisable five-star property, with a fixed schedule communicated on social media or through open channels, presents an easy intelligence-gathering target. So does a local business owner with a known pattern of cash withdrawals and a predictable daily route.

Control Risks notes in its 2026 RiskMap that a significant proportion of kidnap victims in high-risk Latin American cities are local nationals, not foreign visitors. The foreignness of a target matters less than the visibility of their resources and the reliability of their movements.

Express Kidnapping vs Planned Kidnapping

The distinction matters for understanding which security measures actually counter each type.

Express kidnapping is a short-duration crime, typically two to 24 hours. The victim is detained, forced to make ATM withdrawals, and released once the accessible cash is exhausted. Some involve a rapid phone call to family for a fast, low-value payment. These are opportunistic crimes. They are not typically preceded by extended surveillance. The primary point of vulnerability is the transfer between your hotel and a destination, particularly at night or in unfamiliar areas, in an unmarked or unvetted vehicle.

Planned kidnapping is categorically different. It involves target selection, surveillance of movement patterns over days or weeks, confirmation of financial capacity through open-source intelligence, and coordinated execution. These events are designed to produce a formal ransom demand from a corporate backer or wealthy family. Resolution is typically handled by specialist negotiators working alongside KRE insurers.

In terms of frequency, express kidnapping is far more common. Planned kidnapping accounts for a smaller number of incidents but produces the large-scale events that appear in annual risk reporting. According to OSAC, cities with documented elevated rates of both types include Lagos, Bogota, Nairobi, and Karachi.

Cities with Documented High Kidnap Risk (2026)

Bogota, Colombia. OSAC’s Colombia Crime and Safety Report (2025) rates kidnapping as a significant documented risk, noting that express kidnapping in taxi and ride-hail scenarios remains a particular threat. Close protection in Bogota significantly disrupts this risk through vetted transport arrangements and counter-surveillance protocols.

Lagos, Nigeria. OSAC’s Nigeria Crime and Safety Report (2025) classifies kidnapping as a critical risk. Both express and planned variants are documented. The risk is geographically concentrated rather than uniformly distributed across the city. Security in Lagos requires operators with specific local knowledge, including established relationships with local police and knowledge of current risk zones.

Nairobi, Kenya. UK FCDO rates several Kenyan regions as high risk and advises heightened caution for Nairobi specifically. Express kidnapping in Nairobi has increased according to local security company reporting from G4S Kenya and KK Security covering 2024-2025. Business travellers should use vetted transport for all movements, not street taxis.

Karachi, Pakistan. OSAC’s Pakistan Crime and Safety Report (2025) rates Karachi as critical for criminal threats including kidnapping. The use of unmarked transport at any time in Karachi is an unacceptable risk for any foreign national with a visible corporate or economic profile.

What Professional Security Changes

A CP detail does not make kidnapping impossible. It changes the risk calculus significantly, primarily by disrupting the surveillance and intelligence-gathering phase that precedes planned kidnappings.

Trained CP officers recognise surveillance behaviour. They detect when a vehicle has followed your route across multiple journey segments, when someone at a venue is watching rather than working, and when the operational environment has changed in a way that warrants an immediate route change. This recognition, and the willingness to act on it before an incident develops, is what differentiates professional close protection from an untrained companion.

For express kidnapping, the primary protection is transport protocol. A security driver using vetted privately arranged vehicles removes the main attack vector. OSAC consistently notes that express kidnapping in high-risk cities frequently begins with a compromised taxi or ride-hail scenario. Removing that scenario removes the most common point of exposure.

K&R Insurance

Kidnap, Ransom and Extortion insurance covers the financial costs of a kidnapping event: ransom payments, negotiation fees, specialist security consultant costs, and medical care for the victim post-release. It is standard practice for high-risk business travel and should be treated as a baseline requirement, not an optional extra.

Standard corporate travel insurance policies do not include KRE cover. This gap is significant. An organisation sending employees to Bogota, Lagos, or Karachi without KRE cover in place has not addressed the primary financial risk of those trips.

One requirement: the existence and terms of your KRE policy must not be disclosed to anyone outside the approved list. Disclosure can void coverage and, in some circumstances, increase the principal’s threat profile by advertising the existence of a payout mechanism.

For the communications management that runs in parallel with any K&R response – media silence protocols, family social media management, regulatory disclosure obligations, and the single spokesperson protocol during an active incident – see our crisis communications guide.

For security arrangements across high-risk destinations, speak with our team before you travel. Every engagement is handled under strict confidentiality.