Young people at risk in digital kidnapping scams

Young people at risk in digital kidnapping scams

RMIT psychology and cyber security experts are raising alarm about a growing wave of online kidnapping scams in Vietnam, which use sophisticated tactics to exploit young adults and their families.

The scams typically begin with scammers posing as police, government officials, or trusted organisations. Victims are coerced into isolating themselves from loved ones, while family members are manipulated into believing the individual has been kidnapped, sometimes using AI-generated voice deepfakes.

“While the scams vary, they generally fall into two categories: those that offer a benefit and those that promise to help avoid a negative outcome,” says Dr Katrina Philips, Senior Lecturer in Psychology at RMIT Vietnam. “In at least some cases in Vietnam, young people are manipulated because they do not wish to disappoint their parents.”

So, how do the scammers manipulate their victims?

Dr Phillips explains: “In most cases, the scammers don’t start with the request. Rather they establish a hook, a way to get the person to engage.” 

Scammers often begin by establishing trust, impersonating legitimate authorities or companies using stolen credentials and logos. Once that trust is secured, they create urgency, warning the victim they must act immediately or face severe consequences.

“The scammers then pitch an idea that solves the issue, this is often called the pitch, and the scammer provides a solution to the non-existent issue,” says Dr Phillips. 

Why young people are being targeted

Experts say young people, especially recent graduates or those going through major life changes, are especially at risk. Scammers use public data, breached databases, and social media to profile potential victims. 

Some research suggests that if you have fallen for a scam in the past, you may be more likely to be targeted in the future.  

Perpetrators often target individuals based on prior information. (Image: Freepik) Perpetrators often target individuals based on prior information. (Image: Freepik)

“There’s a myth that only the most vulnerable are targeted,” Dr Phillips adds. “In reality, scammers look for people who are accessible: tech-savvy, financially dependent on family, or emotionally isolated.”

Changes in behaviour, such as unusual social withdrawal, increased secrecy about online activity, or emotional instability, may be early warning signs that a young person is being coerced online.

Sophisticated, multiplatform attacks

RMIT cyber security experts say the technical side of these scams is equally advanced. 

RMIT senior lecturer in Software Engineering Dr Jeff Nijsse notes: “Criminals use social engineering, phishing websites, malware, and even AI-powered tools, such as voice cloning software, to trick both victims and their families.”

RMIT senior lecturer in Information Technology Dr Sreenivas Tirumala highlights: “They often demand self-isolation while using VoIP (Voice over Internet Protocol) calls to extract bank information or OTPs (one-time passwords) by posing legal threats.”

Dr Joshua Dwight, RMIT Associate Program Manager for IT and Software Engineering, says that popular platforms in Vietnam such as Facebook, Zalo, WhatsApp, and Telegram are commonly used in these scams, due to their wide reach and encryption features.

He explains: “WhatsApp is particularly useful to scammers because it’s hard to trace. But the truth is, scammers are using both new and old technologies – from deepfakes to SMS phishing. 

“This provides the scammers with many routes to engage victims and conduct more serious crimes like blackmail, kidnapping, and human trafficking.”

From left to right: Dr Katrina Philips, Dr Jeff Nijsse, Dr Sreenivas Tirumala, and Dr Joshua Dwight (Image: RMIT Vietnam) From left to right: Dr Katrina Philips, Dr Jeff Nijsse, Dr Sreenivas Tirumala, and Dr Joshua Dwight (Image: RMIT Vietnam)

What can be done?

Dr Tirumala advises a combination of awareness, prevention, and verification as key strategies for families and schools: 

  • Educate and empower students – Cyber security awareness plays a vital role in differentiating a scammer from a genuine individual.

  • Limit online exposure – Avoid oversharing personal or travel information. Key information such as date of birth, identification details, mobile numbers and address should never be exposed to everyone.  

  • Verify all communications – Double-check calls, emails, and requests through trusted sources. This will help you buy time and verify whether the caller is a genuine person.  

  • Pause before responding to urgency – No legitimate authority imposes last-minute deadlines without verification. 

“If the opportunity seems too good to be true, it generally is,” Dr Dwight says.

As a psychology expert, Dr Phillips emphasises the importance of protecting young people by fostering open and supportive relationships. “It’s important to ensure our children can ask questions and seek advice rather than hide what is happening.” 

Story: June Pham

Related news