A Chinese exchange student was found alive on December 31 but “cold and scared” in the wilderness of Utah after falling prey to the “cyber kidnapping” scam, with thousands of dollars extorted from his parents.

According to police reports, the 17-year-old Kai Zhuang fled his host family’s residence and went missing early Thursday, December 28,  after cybercriminals convinced him that his parents in China were at risk, coercing him to isolate himself from authorities and society. 

At the same time, his parents in China allegedly received a photo of Zhuang, suggesting he was being held captive. They were then forced by Zhuang’s “kidnappers” to transfer $80,000 as ransom to Chinese bank accounts. Following the contact, they contacted Zhuang’s school officials in Utah, who then alerted the police.

Unaware of Zhuang’s absence, his host family in Riverdale had last seen him on the morning he vanished. As soon as they received the report, the Riverdale Police Department sought public assistance and collaboration with other law enforcement agencies to locate the high school student.

“The family in China believes that the kidnappers are actually with their son. And so through these three-way phone calls and then with the photographs and whatnot. So it’s kind of a double-blind if you will,” said Riverdale Police Chief Casey Warren.

Zhuang was eventually discovered in a tent in an icy canyon approximately 40 km (25 miles) north near Brigham City amid below-freezing temperatures. He did not have any heat source in the tent, only “a heat blanket, a sleeping bag, limited food and water and several phones,” the police said.

Initially suspected as forcibly taken and held captive, CCTV footage revealed Zhuang buying camping gear on his own with his phone and bank records showed multiple camping-related purchases.

U.S. authorities and Chinese officials are now working on the case, as they suspect that other exchange students might have encountered similar scams.

Growing case of cyber kidnapping

In cyber kidnapping cases, criminals manipulate both the student and their family separately, creating a false sense of imminent danger to extort ransom payments. Using voice recordings and photos, these criminals deceive families into believing the threats are real. Victims “often comply out of fear that their families will be harmed if they do not comply with the cyber kidnappers.”

According to a BBC interview with cybersecurity experts, technological advancements enable these crimes. For example, perpetrators leverage social media to gather information about victims before initiating contact, gaining crucial insights into their lives. Meanwhile, artificial intelligence (AI) is used to mimic loved ones’ voices, pressuring victims for ransom payments.

Riverdale Police Chief Casey Warren noted that exchange students are frequently targeted by cyber kidnappers. 

However, no accurate data is available to determine the frequency of cyber kidnappings, as they are largely unreported. Criminals are also improving their tactics, as mentioned by Marie-Helen Maras from the Center for Cybercrime Studies at John Jay College of Criminal Justice, including the ability to spoof numbers, making calls seem to originate from the victim.

In light of these incidents, high-net-worth individuals (HNWIs) who send their children abroad might want to consider establishing customised surveillance or tracking measures that keep their children safe without impeding their freedom. Security firms like Marengo to create robust security plans for such children.

Services like personalised cybersecurity evaluations, ongoing threat surveillance, secure communication tools, and cybersecurity insurance are crucial in safeguarding the children against cyber threats. Meanwhile, deploying close protection officers (CPOs) would enhance their physical security.