The year 2026 opened with a stark warning for the world's wealthiest individuals. Across three continents, a pattern had solidified: high-net-worth individuals were no longer incidental targets of opportunistic crime. They had become the primary objective of sophisticated, well-resourced criminal operations whose methods had evolved far beyond the kidnappings of the twentieth century.
The data is unambiguous. Ransom and extortion cases targeting individuals with assets exceeding ten million dollars rose sharply in 2025, with the trend accelerating through 2026. The geography of risk has shifted too — organised criminal groups in Southern Europe, the broader Middle East and Southeast Asia are demonstrating capability that would have seemed implausible a decade ago.
The New Anatomy of Kidnapping
What distinguishes the 2026 threat is the intelligence groundwork that precedes each incident. Criminal operatives — often with military or law enforcement backgrounds — conduct weeks of open-source intelligence gathering before any approach. They cross-reference property records, social media, company filings, school enrolment records and luxury consumption data to build target profiles of remarkable accuracy.
Express kidnapping — the short-duration abduction designed to extort immediate payment — has become the preferred urban model. Victims are typically held for twelve to seventy-two hours while family or associates are pressured to transfer cryptocurrency. The average express kidnapping in Western Europe resolves within forty-eight hours; the family is rarely prepared for the financial demand or the psychological devastation that follows.
Crypto Wealth Creates Unique Exposure
Cryptocurrency wealth is, by design, liquid and pseudonymous — which makes it enormously attractive to extortionists. Unlike a brokerage account, crypto holdings can be coerced in real time. The perpetrator needs no bank intermediary; they need the private key holder under duress. Several high-profile incidents in 2024 and 2025 involved individuals known publicly to hold substantial digital assets. In each case, targeting was traced to forum posts, conference appearances or social media activity the victims had considered innocuous.
The digital footprint of UHNWI individuals has become a primary intelligence asset for hostile actors. Managing that footprint — removing, obfuscating or controlling what is publicly accessible — is now a core component of any serious protection programme.
Travel Remains the Highest-Risk Window
Airport arrivals, hotel check-ins, restaurant bookings and vehicle transfers create predictable patterns that surveillance operatives exploit with minimal resources. A principal who maintains excellent digital hygiene at home can inadvertently reveal their location through hotel loyalty platforms, reservation systems or the social media activity of travelling companions.
Professionally deployed close protection begins with advance work — a pre-travel assessment of routes, venues, medical facilities and local threat intelligence — conducted before the principal lands. This advance process is not a luxury; it is the operational foundation that determines whether a protection detail can respond to a developing threat or remains perpetually reactive.
What Effective Protection Looks Like in 2026
The protective model that works today is not a conspicuous ring of large men in identical black suits. That model announces the principal's presence, attracts attention, and — increasingly — signals to local criminal networks that a wealthy target is nearby. The effective model is intelligence-led, low-profile and proactive.
It begins with a comprehensive threat and vulnerability assessment specific to the individual: their travel patterns, public profile, known associates, business sector and the geopolitical environments they frequent. At the operational level, this means close protection officers with genuine surveillance detection capability, security-trained drivers who understand anti-ambush protocols, and a communications architecture that keeps the protection team coordinated without broadcasting the principal's movements.
In 2026, neither locks nor luck is a sufficient security strategy. The wealthy individuals who invest in professional security proactively, rather than reactively after an incident, navigate the world with measurably better outcomes — and considerably less likelihood of appearing in kidnapping statistics.
Need Close Protection?
Algoz Group connects HNWI and UHNWI principals with vetted close protection operators across Europe, the Middle East, Brazil and Asia.
Request a Confidential Consultation