Serious risk · handled calmly
Express Kidnapping, Explained Calmly
The most serious risk on this site, and the one most distorted by rumor. Express kidnapping is real, specific, and — for a prepared traveler — highly preventable. This brief describes it plainly, without the movie version, so you can take the two or three precautions that actually matter and then enjoy your trip.
Updated August 2026
What it is, without the rumor
Express kidnapping — secuestro exprés — is a short, financially-motivated abduction. It is not the prolonged, ransom-for-millions scenario the name conjures; it is a fast cash extraction, usually lasting from an hour to a night. The typical pattern: a victim gets into an unlicensed taxi or a vehicle posing as a rideshare, is taken under threat to a series of ATMs, made to withdraw the daily maximum from their accounts, sometimes has their card used or a modest ransom demanded from family, and is then released. Perpetrators want money quickly and quietly; violence is uncommon when victims cooperate, because a compliant victim is a fast, low-risk transaction and a resisting one is not.
That plain description matters, because fear out of proportion to the facts leads to worse decisions than the facts warrant. The realistic goal is not dread — it is the two or three specific precautions that make you a poor target.
How it works
The mechanism is almost always the vehicle. An unregulated car — a libre cab flagged on the street, a taxi that pulls over to offer a ride, occasionally a cloned or fake rideshare — is the delivery method, because it puts a tourist alone in a space the perpetrator controls, with no record of the driver, plate, or route. From there:
- The pickup. You enter, or are steered into, an unbooked vehicle — most often when tired, at night, or in a hurry, when the temptation to take the cab right there is highest.
- The redirect. Once moving, the situation turns: a second person may be waiting, a weapon implied, the doors controlled. The demand is your cards and PINs.
- The ATM circuit. You’re driven to withdraw the daily maximum, often across the midnight boundary to capture two days’ limits. This is why a low daily limit is a hard cap on the entire event’s cost.
- The release. With the cash secured, release usually follows — the whole point was speed and money, not you.
Remove step one — the unregulated vehicle — and the chain almost never starts. This is why the prevention is so unusually effective for something that sounds so frightening.
How to prevent it
Do this instead
Three habits, in order of importance. One: book every ride — Uber, DiDi, Cabify, or an official sitio stand, never a street hail and never a car that stops for you; the app’s record of driver, plate, and route is itself the deterrent, and matching the plate before you enter is the whole discipline. Two: cap the exposure — set a low daily ATM limit with your bank before travel, so a forced withdrawal can only reach a bounded amount. Three: lower your profile — don’t flash cash or expensive devices, sort your ride home before a night out rather than after, and keep to the central colonias late.
The first habit does most of the work. Everything serious about this risk enters through an unbooked vehicle, so a traveler who simply never uses one has removed the primary path — which is exactly why millions of careful visitors experience Mexico City as the welcoming city it mostly is.
If it happens
What it looks like
Comply. This is a financial transaction to the people involved, and cooperation is what keeps it short and non-violent — the outcome you want.
- Do not resist, and do not attempt to escape a moving vehicle. Hand over cards, give PINs, stay calm and cooperative. Your low daily limit has already bounded the loss.
- Keep yourself the easy option — quiet, compliant, unmemorable. The perpetrators’ incentive is a fast, clean transaction; give them no reason to escalate.
- Observe only what’s safe — nothing worth a risk. Details can wait.
- After release: get to a safe, public place, call 911, freeze every card immediately, and file a report (denuncia) at the Ministerio Público — needed for insurance and card disputes. Contact your embassy if documents or your passport were taken.
- Afterward, be kind to yourself. Compliance is not weakness; it is the correct, trained response that gets people home safely, and it worked. The prevention habits are how you make sure of a next trip on your own terms.
Quick answers
How common is express kidnapping for tourists?
Uncommon in absolute terms, and heavily concentrated among people using street-hailed or unlicensed taxis — which is exactly why the prevention is so effective. The large majority of visitors to Mexico City never encounter it, and those who ride only through apps or official sitios remove almost the entire risk. It is a reason to choose transport carefully, not a reason to cancel a trip.
What actually happens during an express kidnapping?
It's a short, financially-motivated abduction — typically one to a few hours, often overnight in the worst cases. Victims are driven between ATMs and made to withdraw their daily maximum, and sometimes their card is used or a small ransom requested from family, before release. It is frightening, but when victims comply it is usually non-violent — the perpetrators want a fast cash transaction, not a confrontation.
How do I prevent express kidnapping?
Three habits cover almost all of it: book every ride through an app (Uber, DiDi, Cabify) or an official sitio and never hail on the street; keep your ATM daily withdrawal limit low so a forced withdrawal is capped; and don't advertise that you're a cash-carrying tourist. The transport rule alone removes the primary delivery mechanism.
What should I do if it happens to me?
Comply and stay calm — this is the single most important thing. Treat it as the financial transaction it is to them: hand over what they ask, don't resist, don't attempt escape from a moving vehicle, and give the PINs. A low daily ATM limit means the maximum loss is bounded. Note what you safely can for afterward, and report to police (911) and your bank once released.