Category: Crime & fidelity · Reviewed by Amy Price, Account Executive · Last reviewed 2026-06-05
Kidnap, ransom and extortion insurance (commonly K&R) covers ransom payments, response costs and consequential losses arising from kidnap of insured persons, hijacking, wrongful detention, hostage-taking and extortion events; the cover is written principally by Lloyd’s specialist syndicates and is typically combined with specialist crisis response services from professional security consultancies.
Category: Crime and fidelity Also known as: K&R insurance, K&R, kidnap insurance, KR&E insurance First codified: Lloyd’s wordings from c.1970s following the wave of corporate kidnaps in Latin America Related legislation: Terrorism Act 2000 [1]; Reinsurance (Acts of Terrorism) Act 1993 [2]; Insurance Act 2015 [3]; Bribery Act 2010 [4]
K&R insurance addresses the specific exposures of kidnap, hostage-taking and extortion. The cover developed in the 1970s in response to the wave of corporate kidnaps targeting multinational executives in Latin America (notably Argentina, Brazil, Colombia and Mexico), and has since expanded to address a wider range of exposures including hijacking, wrongful detention by states or non-state actors, hostage-taking, cyber extortion and product extortion [5][6].
The principal cover sections of a typical K&R policy are:
Ransom payments: indemnity for ransom monies paid in response to a covered event, including local currency conversion costs, transit expenses and similar associated costs.
Response costs: cover for the costs of engaging a specialist crisis response consultant to advise on the management of the event, including fees, expenses and (where applicable) costs of negotiation.
Hostage or detainee expenses: cover for medical care, psychological support and family liaison expenses during and after the event.
Legal liability: cover for liability arising from the event including (in some wordings) liability to third parties affected by the response.
Lost income: cover for the insured person’s lost income during detention.
Death or dismemberment: cover for personal accident-style benefits where the insured person is killed or injured during the event.
Cyber extortion: extension to the traditional product addressing extortion demands following unauthorised access to computer systems. This sub-class has grown rapidly since c.2015 with the proliferation of ransomware attacks.
Product extortion: cover for extortion demands relating to threatened contamination or sabotage of products (food, consumer goods, medicines), including the costs of product withdrawal and brand recovery [5][6].
The cover is purchased by multinational corporations with employees travelling to or based in higher-risk markets, by high net worth individuals (and their families and key personnel), by educational institutions with overseas programmes, by NGOs and aid organisations operating in conflict zones, and by various other organisations with K&R exposure. The Lloyd’s K&R market is the global centre, with most of the world’s K&R business written through specialist Lloyd’s syndicates [5][6].
The Terrorism Act 2000 (as amended) is the principal UK statutory framework for terrorism offences and counter-terrorism measures. Sections 15–18 create the principal terrorist financing offences including the offence of providing or receiving terrorist property and the offence of money laundering for terrorist purposes. The Act creates significant legal complexity for K&R insurers and insureds where the kidnap or extortion is connected to a proscribed terrorist organisation [1][7].
The Counter-Terrorism Act 2008 (and subsequent counter-terrorism legislation including the Counter-Terrorism and Border Security Act 2019) expand the legal framework. The Sanctions and Anti-Money Laundering Act 2018 and supporting regulations administered by the Office of Financial Sanctions Implementation impose duties on UK persons in respect of sanctioned individuals and entities, with the result that ransom payments to sanctioned actors can be unlawful and uninsurable [4][8].
The Bribery Act 2010 imposes criminal offences for bribery and applies to UK companies’ activities globally. Ransom payments typically fall outside the bribery offences (the payment being made in response to duress rather than to obtain improper advantage), but the boundary requires careful management particularly where local government officials are involved in the K&R event [4].
The Insurance Act 2015 governs the duty of fair presentation for K&R placements. Disclosure of travel patterns, geographic exposure, security arrangements and prior incidents is critical to the underwriting [3].
The Reinsurance (Acts of Terrorism) Act 1993 enables the Treasury to reinsure terrorism risks through Pool Re. The K&R market interacts with the broader terrorism insurance regime but is structurally separate; K&R cover responds to the specific kidnap/extortion event rather than to property damage from terrorism. See terrorism insurance and Pool Re [2].
International conventions including the International Convention against the Taking of Hostages 1979 and the various anti-terrorism conventions provide an international legal framework for hostage-taking offences [9].
A K&R placement is typically arranged confidentially to avoid creating an incentive for kidnap by signalling insurance cover. The insured’s identity may be known to the underwriter but the policy is typically marked confidential and the insured undertakes not to disclose the existence of cover [5][6].
The K&R cover is closely integrated with the specialist crisis response consultancy that the insured will engage in the event of a kidnap or extortion. The major K&R underwriters typically have arrangements with named consultancies (Control Risks, the Ackerman Group, GardaWorld and others) that provide 24/7 response capability with field-experienced consultants able to deploy to anywhere in the world within hours [5][6].
Underwriters assess K&R risk based on the insured’s travel and operational patterns, geographic exposure (with operations in higher-risk countries commanding substantially higher premium), the security arrangements in place (including pre-travel training, secure travel arrangements, in-country security support), the sector of operations (extractive industries, NGOs and certain other sectors face elevated risk in certain markets), and the insured’s prior experience [5][6].
In the event of a kidnap or extortion, the insured immediately contacts the crisis response consultancy through the dedicated 24/7 helpline. The consultancy deploys experienced negotiators (typically former military, law enforcement or intelligence personnel with specific kidnap negotiation experience) to support the insured in managing the event. The insurer is notified but typically remains in the background, providing financial indemnity rather than operational support [5][6].
Ransom negotiations are highly delicate and case-specific. Best practice (developed over decades of K&R experience) emphasises building rapport with the kidnappers, slowing the negotiation pace, reducing initial demands through patient negotiation, and ensuring that any payment is made only against confirmed release. Average kidnap durations in major markets are weeks to months; ransom amounts ultimately paid are typically a small fraction of initial demands [5][6].
Standard K&R: cover for kidnap, ransom, wrongful detention, hijacking and extortion events affecting named insureds.
Corporate K&R: cover for employees and directors of the insured corporate during travel and overseas posting.
Family K&R: cover for the family members of insured persons.
High net worth K&R: cover for high net worth individuals and their families.
Educational institution K&R: cover for students and staff on overseas programmes (study abroad, gap year, postgraduate research).
NGO K&R: cover for aid workers and humanitarian personnel in conflict zones.
Cyber extortion K&R: extension or standalone cover for ransom payments following ransomware and similar cyber extortion events.
Product extortion cover: separate cover for product-related extortion including the costs of product withdrawal.
Crisis response only (no ransom indemnity): cover for the response costs only, used by organisations that prefer not to indemnify ransom payments for ethical or policy reasons.
Multinational K&R programme: global cover for multinational corporations with consistent cover across all operations.
A UK-headquartered multinational mining company with operations in West Africa, Latin America and Asia places K&R cover for its employees and directors travelling to or based in higher-risk markets. The placement provides limits of US$25m per occurrence with US$2m for response costs and US$1m for additional family expenses. Annual premium is approximately US$220,000 reflecting the substantial geographic exposure. The placement is supported by a 24/7 crisis response retainer with a leading specialist consultancy. During the policy year, two events occur: a brief 6-hour wrongful detention of an employee at a roadblock (with no ransom paid; response costs of US$45,000 covered) and a 28-day kidnap of a contractor with eventual ransom payment of US$650,000 plus US$280,000 of response costs. Both events are managed through the crisis response retainer and the K&R cover responds for the financial loss. Figures in this example are illustrative.
This entry is part of the Apex Insurance Wiki. Last reviewed by Matt Bartlett on 2026-06-05. Next review: 2026-12-05.
Apex Insurance Brokers Limited. Authorised and regulated by the Financial Conduct Authority, FRN 724952. Registered in England and Wales, Companies House 07014570. This entry provides general information about UK insurance concepts and is not regulated advice. Consult your insurance broker on your specific position.
Apex Insurance Brokers serves UK professional services firms and commercial businesses. Call 0117 325 0027, email hello@apexinsurancebrokers.co.uk, or request a quotation.
Get a quote