Cyber kidnapping is a scam in which criminals use phone calls, texts, and digital tools to convince you that a loved one has been abducted, then demand ransom for someone who was never actually taken. No one is in danger, but the panic is real, and families have wired tens of thousands of dollars before realizing the “victim” was safe the whole time. The scheme is getting harder to spot as scammers add AI-cloned voices and doctored photos to their playbook.
How the Scam Plays Out
It starts with research. Scammers mine social media profiles, public records, and other online sources to learn about potential targets and their families. They look for moments of vulnerability: a family member traveling, a student studying abroad, someone temporarily unreachable by phone.
Then the call comes. The caller claims to have kidnapped your loved one and creates urgency through threats of violence, often playing pre-recorded screams or distressed voices in the background. Some scammers spoof the caller ID so the call appears to come from the victim’s own phone. They insist you stay on the line, which prevents you from reaching the supposed victim or contacting police.
Payment demands almost always involve cryptocurrency or wire transfers to overseas accounts. Those methods move fast, are nearly impossible to reverse, and leave little trail.
The Self-Isolation Variant
In a more disturbing version, scammers contact the “victim” first and convince them to hide somewhere alone — a hotel room, a tent, a remote spot — and take photos or videos that make it look like they are being held captive. The scammers then send those images to the family and demand payment. The person cooperates because they believe their family will be harmed if they don’t.
In December 2023, a 17-year-old Chinese exchange student in Utah was found alone in a tent on a freezing mountainside after scammers convinced him to isolate and stage photos appearing to show captivity. His family had already wired ransom money overseas before police located the teen, cold and scared but physically unharmed.
Why AI Has Made It Worse
The FBI warned in December 2025 that criminals are sending altered “proof of life” photos and videos to make their threats more convincing.1Internet Crime Complaint Center (IC3). Criminals Using Altered Proof-of-Life Media to Extort Victims These images can look authentic at a glance but often contain subtle errors: missing tattoos, incorrect scars, distorted body proportions. Scammers sometimes send them through timed or disappearing messages so you can’t study them for long.
Voice cloning is the bigger shift. With just a few seconds of audio pulled from a social media video or voicemail, scammers can generate a synthetic version of a loved one’s voice that sounds authentic. When a panicked parent hears what seems like their child crying for help, rational thinking goes out the window. That emotional overload is the whole point. It’s the single biggest reason these schemes succeed.
What to Do If You Get the Call
The FBI’s most important advice: hang up.2Federal Bureau of Investigation. Virtual Kidnapping The scammer’s entire strategy depends on keeping you panicked and on the line. The moment you disconnect and try reaching your loved one through a separate call or text, the scheme falls apart. In most cases, that person will answer normally and the scam is over in a minute.
If you can’t bring yourself to hang up, do not say your loved one’s name. The scammer often doesn’t actually know who they’re pretending to have, and feeding them the name confirms it. Ask questions only the real person would know, such as the name of a family pet. Slow things down by saying you need to write down the instructions or gather the money. While you stall, use a second phone or ask someone else to try reaching the person who has supposedly been taken.
Never pay. Wire transfers and cryptocurrency payments are essentially irreversible. Once the money is sent, you are not getting it back from the scammer.
Set up a family code word now, before anything happens. It should be something only your household knows, used to verify that any emergency is real. It costs nothing and is one of the most effective defenses against these scams.2Federal Bureau of Investigation. Virtual Kidnapping
Reporting It
Whether you lost money or not, report the incident to the FBI’s Internet Crime Complaint Center at ic3.gov. IC3 is the central intake point for cyber-enabled crime and shares reports with FBI field offices and law enforcement partners.3Internet Crime Complaint Center (IC3). Home Page Include any phone numbers the scammer used, payment information, screenshots of text conversations, and any proof-of-life images they sent.1Internet Crime Complaint Center (IC3). Criminals Using Altered Proof-of-Life Media to Extort Victims
Also contact your local police. Even when the scammer is overseas, a local report creates a paper trail that supports any future investigation and is often required to file a victim compensation claim.
How to Make Yourself a Harder Target
Lock down your social media. Scammers build their schemes from publicly available information: vacation photos that reveal when you’re traveling, school names that identify where your children study, check-ins that broadcast your location in real time. Set profiles to private and limit who can see your friends list, photos, and personal details.
Review which third-party apps have access to your social media accounts and revoke permissions for anything you no longer use. Turn on two-factor authentication for every account and use different passwords across platforms. None of this makes you invisible, but it raises the effort required to target you, and most scammers move on to easier marks.
Talk to your family about how these scams work, especially teenagers and college students. Exchange students and young people who are temporarily separated from their families are frequent targets, as the Utah case showed. Someone who recognizes the playbook is far less likely to comply or panic when a threatening call arrives.
How Cyber Kidnapping Is Prosecuted
No federal or state law uses the label “cyber kidnapping.” Prosecutors instead stack charges under existing statutes based on what the scammer actually did. The most serious of those is the federal law against transmitting interstate threats to kidnap or harm someone in order to extort money, which carries up to 20 years in federal prison.4Office of the Law Revision Counsel. 18 USC 875 – Interstate Communications Wire fraud, which covers using electronic communications to carry out a scheme to defraud, also carries up to 20 years, and every call or text in the scheme can count as a separate count.5Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television Scammers who clone a voice or spoof a phone number can face an additional mandatory two years for aggravated identity theft on top of whatever the underlying crime carries.6Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft
In one of the better-known federal cases, a Houston woman was indicted in 2017 on 10 counts, including wire fraud and money laundering, for running a virtual kidnapping operation that targeted multiple families.2Federal Bureau of Investigation. Virtual Kidnapping State prosecutors can bring their own charges in parallel under extortion, fraud, stalking, or harassment laws. The practical catch is that many cyber kidnappers operate from overseas, and bringing anyone to justice across borders requires international cooperation that can take years or never materialize at all. That’s why the preventive steps matter more than the statutes do: the best outcome in a cyber kidnapping case is the one where no money ever changes hands.