Types of threats include kidnapping employees from their homes or enroute to work to secure a ransom or extort money from the bank as well as an actual or false claim that family members of bank executives have been kidnapped for ransom. The latter ploy is a bluff that depends on bank executives believing extortioners. The threat of actual and faked kidnappings can be prevented by restricting bank employee information available to nonemployees and by training employees to be aware of persons conducting systematic surveillance of their movements. Should an extortion call be received, it should be treated as legitimate until evidence indicates it is a hoax. The deadline for making the payment should be delayed until the legitimacy of the claim can be established. Predetermined procedures for handling a legitimate kidnapping should specify the response of all bank employees, including the hostage. The hostage should generally comply with the kidnappers' instructions, make mental notes of movements and kidnapper characteristics, and not attempt escape unless the odds for success are high.