PROJECT: THE STAGED KIDNAPPING SCAM - WHEN FAMILY MEMBERS BECOME THE TARGET
PLEASE SHARE THIS PUBLIC DOCUMENT
Kidnapping-related scams exploit one of the strongest emotional vulnerabilities in any family:
the fear that a loved one has been abducted, harmed or is in immediate danger.
Criminals manufacture emergencies, create the impression that a family member is being held against their will
and demand urgent payments in exchange for that person's supposed release.
In many instances, no physical kidnapping has taken place.
Instead, perpetrators use threatening telephone calls, manipulated photographs, recordings, social media information
and psychological intimidation to convince relatives that an abduction is real. The objective is to create panic,
prevent rational decision-making and obtain money before the family has an opportunity to verify the information.
These incidents are commonly described as virtual kidnapping scams or staged kidnapping scams.
They differ from genuine kidnappings because the victim is not necessarily being held captive.
The family, however, experiences the fear and pressure associated with a real abduction.
SSS warns that these schemes can result in substantial financial losses and severe emotional distress.
Families must understand how the scams operate and how to respond without placing
a potentially vulnerable person at additional risk.
HOW THE STAGED KIDNAPPING SCAM WORKS:
The perpetrators construct a believable emergency and then manipulate the family into believing that immediate payment is the only way to prevent serious harm.
The approach may involve several stages.
1. IDENTIFYING AND RESEARCHING THE TARGET:
Criminals may identify potential targets through social media, online advertisements, public information, compromised accounts or information obtained from acquaintances and other sources.
They look for details that can make a fabricated kidnapping believable, including:
Names and photographs of family members.
Telephone numbers and communication patterns.
Relationships between parents, children, spouses and other relatives.
Employment details, travel arrangements and daily routines.
Information about holidays, business trips or family events.
Photographs showing vehicles, residences and frequently visited locations.
The more information criminals obtain, the easier it becomes to construct a convincing emergency.
Information that appears harmless when shared individually can become valuable when combined. A photograph, travel update or public announcement may provide criminals with details they can use to impersonate someone or establish credibility during a threatening call.
2. THE THREATENING TELEPHONE CALL:
The scam often begins with an unexpected telephone call from an unknown number.
The caller may claim to have kidnapped a family member and threaten to injure or kill that person unless money is transferred immediately.
The caller may:
Shout instructions and use aggressive or threatening language.
Claim that the supposed victim has been beaten or restrained.
Demand that the family remain on the telephone.
Instruct relatives not to contact the police.
Threaten retaliation if the family delays payment.
Demand payment through an immediate electronic transfer or another difficult-to-reverse method.
The perpetrators deliberately create confusion and urgency. They want relatives to react emotionally rather than assess whether the information is credible.
3. MANIPULATED PHOTOGRAPHS AND RECORDINGS:
Technology has made these scams increasingly convincing.
Criminals may use photographs obtained from social media, manipulated images, stolen recordings, edited videos or artificial intelligence-generated material to create the impression that someone is being held captive.
A photograph may show a person with their hands tied, blindfolded or apparently injured. However, the image may have been digitally altered, taken out of context or created using material obtained from an entirely different source.
Voice recordings and AI-generated voice impersonation can also be used to imitate a family member. A distressed voice saying a parent's name or asking for help can be particularly effective in triggering an immediate emotional response.
Families must understand that a photograph, video or voice recording does not independently establish that a kidnapping has occurred.
4. ISOLATING THE FAMILY FROM INDEPENDENT VERIFICATION:
A significant feature of these scams is the perpetrators' attempt to control communication.
Relatives may be instructed to:
End other telephone calls.
Avoid contacting the supposed victim directly.
Keep the incident secret.
Prevent other family members from becoming involved.
Remain available to the caller.
Transfer money within a specified period.
These instructions aim to prevent independent verification and keep control of the situation.
The demand for secrecy is particularly important. Criminals know that involving another trusted person or contacting the authorities may expose the deception.
THE EXPLOITATION OF FAMILY PANIC:
The success of a staged kidnapping scam depends largely on psychological manipulation.
When someone believes that a child, spouse, parent or sibling is in immediate danger, the normal decision-making process can be disrupted. Fear may override caution, and relatives may become willing to pay substantial amounts without establishing whether the emergency is genuine.
Perpetrators exploit several emotional responses:
FEAR:
The family believes that a loved one may be injured or killed.
GUILT:
Relatives may feel responsible for securing the person's release.
URGENCY:
Artificial deadlines create pressure to act immediately.
CONFUSION:
Conflicting information makes it difficult to establish what is happening.
ISOLATION:
Instructions to keep the incident secret prevent relatives from obtaining independent assistance.
EMOTIONAL COERCION:
Threats against the supposed victim are used to force compliance.
Criminals may also exploit existing family difficulties, financial circumstances or strained relationships.
A relative who is particularly protective of a family member may be more vulnerable to these tactics because the perpetrators know that emotional attachment can be used to influence financial decisions.
The family must recognise that the criminal's objective is not necessarily to establish a believable story over an extended period. Their goal is to create enough fear to get payment before the deception is uncovered.
WARNING SIGNS THAT AN ABDUCTION MAY BE STAGED:
Although every incident must be assessed on its own merits, certain indicators may suggest that a family is being targeted through a virtual kidnapping scam.
These include:
1. IMMEDIATE RANSOM DEMANDS:
The caller demands money before providing independently verifiable information about the supposed abduction.
2. UNUSUAL PAYMENT INSTRUCTIONS:
The family is instructed to transfer money into unfamiliar accounts, use cryptocurrency, purchase vouchers or make payments through unusual channels.
3. RESTRICTIONS ON COMMUNICATION:
The caller insists that relatives must not contact the supposed victim, other family members or the police.
4. LIMITED VERIFIABLE INFORMATION:
The caller cannot provide reliable details about the circumstances of the alleged abduction.
5. MANIPULATED AND SUSPICIOUS EVIDENCE:
Photographs, videos or voice recordings appear designed to provoke panic but cannot be independently authenticated.
6. CHANGING INSTRUCTIONS:
The perpetrators repeatedly change payment details, deadlines or explanations.
7. UNSOLICITED CONTACT:
The family receives an unexpected call claiming that a loved one has been abducted, despite having no other information suggesting that the person is missing.
These indicators do not prove that an incident is fabricated.
A genuine kidnapping must never be dismissed simply because certain features resemble a known scam.
HOW FAMILIES SHOULD VERIFY A SUSPECTED KIDNAPPING:
The greatest challenge is determining whether the emergency is genuine without inadvertently placing the supposed victim at further risk.
Families should approach the situation as a potentially serious criminal incident until the facts have been established.
1. REMAIN CALM AND AVOID IMMEDIATE PAYMENT:
Do not allow the caller to dictate every action through threats and artificial deadlines.
Avoid making impulsive financial decisions. A demand for immediate payment does not establish that the person has been kidnapped.
If possible, have one relative manage communication with the caller while another independently attempts to establish the supposed victim's whereabouts.
2. CONTACT THE SUPPOSED VICTIM THROUGH AN INDEPENDENT CHANNEL:
Use a telephone number or communication channel already known to the family.
Do not rely exclusively on contact details supplied by the caller.
If the person cannot be reached, try alternative established communication channels and contact someone who may know their whereabouts, such as a trusted colleague, friend or relative.
However, if the caller claims to be monitoring the victim's telephone or movements, do not send messages that could expose attempts to verify the situation or potentially increase danger. Inform the investigating authorities of these concerns.
3. ESTABLISH THE PERSON'S LAST KNOWN MOVEMENTS:
Determine:
When and where the person was last seen.
Who last communicated with them.
Whether they were travelling or attending an appointment.
Whether their vehicle, workplace or residence can be accounted for.
Whether there are independently confirmed reasons for their temporary unavailability.
This information can help establish a reliable timeline.
Do not send relatives into potentially dangerous locations to investigate independently.
4. ASK FOR VERIFIABLE INFORMATION:
Where it can be done safely, obtain details from the caller that can be independently assessed.
For example, ask for information about the circumstances of the supposed abduction that is not publicly available.
A photograph or recording should be preserved in its original form. Do not edit, circulate or publicly distribute it unnecessarily.
Specialist investigators may be able to examine metadata, image manipulation, recording characteristics and other digital evidence.
5. INVOLVE THE SAPS IMMEDIATELY:
A suspected kidnapping must be reported to the South African Police Service (SAPS).
Families should not delay reporting because a caller has instructed them to remain silent or because they suspect the incident may be a scam.
Provide investigators with:
The caller's telephone number and any other contact details.
The exact wording of threats and ransom demands.
Screenshots, photographs, videos and voice recordings.
Bank account details and payment instructions.
The timeline of communications.
Information about the supposed victim's last known movements.
If a genuine abduction is taking place, early reporting and coordinated investigative action may be critical.
6. PRESERVE FINANCIAL AND DIGITAL EVIDENCE:
Do not delete messages, call logs, emails, recordings or social media communications.
If money has already been transferred, contact the relevant bank immediately and request assistance in tracing or attempting to stop the transaction. Obtain a reference number and preserve all transaction records.
Do not confront suspected perpetrators or attempt to arrange an independent rescue.
WHAT FAMILIES SHOULD NEVER DO:
The following mistakes can increase financial losses, compromise evidence or create additional safety risks:
Do not transfer money solely because someone threatens to harm a family member.
Do not disclose banking credentials, PINs, passwords or one-time passwords.
Do not follow instructions to keep the incident secret from the police.
Do not publish details of a suspected kidnapping on social media while an investigation is underway.
Do not circulate potentially manipulated photographs as confirmed evidence.
Do not attempt to trace or confront the caller personally.
Do not send family members to investigate suspicious locations without police guidance.
Do not assume that a failed telephone call means that the person has been abducted.
Do not dismiss a genuine kidnapping as a scam without verification.
Families must also avoid making public statements that could compromise an active investigation or expose the supposed victim's location.
PREVENTION: REDUCING THE INFORMATION AVAILABLE TO CRIMINALS
Prevention begins with limiting the personal information criminals can collect and establishing communication arrangements within the family.
Practical measures include:
1. FAMILY VERIFICATION ARRANGEMENTS:
Establish a trusted family contact who can assist during emergencies.
Agree on a private family verification question or code word.
Make sure relatives know which established telephone numbers to use when verifying an emergency.
Encourage family members to contact one another before responding to unexpected financial demands.
2. DIGITAL SECURITY:
Review social media privacy settings.
Avoid posting real-time travel information or details that reveal when a home is unoccupied.
Restrict access to personal photographs and family information.
Use strong, unique passwords and multi-factor authentication.
Be cautious about accepting unfamiliar contact requests.
Avoid sharing recordings, identification documents and personal information with unverified individuals.
3. FINANCIAL PRECAUTIONS:
Establish a family rule that ransom demands or emergency payment requests must be independently verified.
Never disclose banking credentials or one-time passwords.
Be particularly cautious of requests for cryptocurrency, voucher purchases or transfers to unfamiliar accounts.
A family verification system cannot guarantee that criminals will be unable to exploit personal information.
It can, however, make it more difficult for them to manipulate relatives without detection.
THE SOUTH AFRICAN CRIMINAL AND INVESTIGATIVE CONTEXT:
South African families must distinguish between a staged kidnapping scam and a genuine kidnapping or extortion incident.
Both can involve threats, intimidation and demands for money, but the underlying criminal conduct and investigative requirements may differ.
A fabricated kidnapping may involve fraud, extortion, intimidation, impersonation and offences relating to the unlawful use of personal or digital information, depending on the circumstances.
A genuine kidnapping is a serious criminal offence. Where ransom demands are involved, additional offences may arise depending on the conduct of the perpetrators.
The SAPS should be notified when a person is believed to be missing under suspicious circumstances or when a ransom demand is received.
Digital evidence is particularly important in these investigations. Telephone records, messaging accounts, banking transactions, device information, IP-related evidence and the origin of manipulated media may assist investigators in identifying the perpetrators.
Families should understand that criminals may operate across provincial or national borders, use disposable telephone numbers and employ multiple intermediaries to conceal their identities.
This makes early evidence preservation and coordinated investigative work essential.
THE IMPACT ON VICTIMS AND FAMILIES:
The consequences of a staged kidnapping scam extend beyond financial losses.
Relatives may experience prolonged anxiety, emotional distress, guilt and difficulty trusting subsequent communications. Elderly parents, children and vulnerable family members may be particularly affected.
Even after discovering that the kidnapping was fabricated, families may continue to experience fear because criminals have demonstrated that they possess personal information and are willing to use threats to obtain money.
Where substantial payments have been made, the financial consequences may also affect household stability, savings and long-term financial security.
The emotional impact should not be underestimated. These scams deliberately exploit the natural instinct to protect loved ones, and victims should not be blamed for having reacted under extreme psychological pressure.
THE ROLE OF SSS:
SSS warns families to treat unexpected kidnapping and ransom demands as serious incidents requiring immediate verification and, where appropriate, police intervention.
Specialist investigators can assist with assessing suspicious communications, examining available digital evidence, establishing timelines and identifying potential inconsistencies in the information supplied by perpetrators.
Where a genuine kidnapping is suspected, investigative action must be coordinated with the relevant law enforcement authorities. Families should not undertake independent rescue operations or compromise evidence through direct confrontation.
SSS encourages the public to report suspicious activity and preserve all available information that may assist an investigation.
VERIFY THE EMERGENCY BEFORE SURRENDERING TO THE THREAT:
A staged kidnapping scam is designed to make a family believe that every second matters
and that transferring money is the only way to save a loved one.
Criminals rely on fear, urgency and emotional manipulation.
They may use personal information, manipulated photographs, artificial intelligence
and threatening communications to construct an apparently convincing abduction.
Families must understand that an aggressive ransom demand is not proof of a kidnapping,
just as an inability to reach a loved one does not prove the incident is fabricated.
The correct response is to stay calm, preserve evidence, verify information through independent, safe channels,
and report the matter to the SAPS without delay.
Never allow a criminal to control an emergency through fear.
Verify the circumstances, protect the potential victim and involve the authorities.
RELEVANT SSS PROJECTS:
Specialised Security Services invites the public to the Mike Bolhuis Daily Projects WhatsApp Channel.
This channel is important in delivering insights into the latest crime trends, awareness, warnings and the exposure of criminals.
How to Join the WhatsApp Channel:
1. Make sure you have the latest version of WhatsApp on your device.
2. Click on the link below to join the Mike Bolhuis Daily Projects WhatsApp Channel:
3. Follow the prompts to join the channel.
4. Make sure you click on "Follow", then click on the "bell"-icon (🔔)
CONTACT MR MIKE BOLHUIS FOR SAFETY AND SECURITY MEASURES, PROTECTION, OR AN INVESTIGATION IF NEEDED.
ALL INFORMATION RECEIVED WILL BE TREATED IN THE STRICTEST CONFIDENTIALITY AND EVERY IDENTITY WILL BE PROTECTED.
Regards,
Mike Bolhuis
Specialist Investigators into
Serious Violent, Serious Economic Crimes & Serious Cybercrimes
PSIRA Reg. 1590364/421949
Mobile: +27 82 447 6116
E-mail: mike@mikebolhuis.co.za
Fax: 086 585 4924
Follow us on Facebook to view our projects -
EXTREMELY IMPORTANT: All potential clients need to be aware that owing to the nature of our work as specialist investigators there are people who have been caught on the wrong side of the law - who are trying to discredit me - Mike Bolhuis and my organisation Specialised Security Services - to get themselves off the hook. This retaliation happens on social media and creates doubt about our integrity and ability. Doubt created on social media platforms is both unwarranted and untrue. We strongly recommend that you make up your minds concerning me and our organisation only after considering all the factual information - to the exclusion of hearsay and assumptions. Furthermore, you are welcome to address your concerns directly with me should you still be unsatisfied with your conclusions. While the internet provides a lot of valuable information, it is also a platform that distributes a lot of false information. The distribution of false information, fake news, slander and hate speech constitutes a crime that can be prosecuted by law. Your own research discretion and discernment are imperative when choosing what and what not to believe.
STANDARD RULES APPLY: Upon appointment, we require a formal mandate with detailed instructions. Please take note that should you not make use of our services – you may not under any circumstance use my name or the name of my organisation as a means to achieve whatever end.
POPI ACT 4 of 2013 South Africa: Mike Bolhuis' "Specialised Security Services" falls under Section 6 of the act. Read more here: https://mikebh.link/fntdpv
SSS TASK TEAM:

Copyright © 2015- PRESENT | Mike Bolhuis Specialised Security Services | All rights reserved.
Our mailing address is:
Mike Bolhuis Specialised Security Services
PO Box 15075 Lynn East
Pretoria, Gauteng 0039
South Africa
Add us to your address book
THIS PUBLIC DOCUMENT WAS INTENDED TO BE SHARED, PLEASE DO SO.




