The intersection between the formal and criminal economies presents a range of intractable coordination and enforcement problems. Who orders and facilitates the interactions between private, legal entities, and criminals (potentially) engaged in kidnap for ransom? I analyze the contracts, protocols, norms, and agencies created by insurers to govern this unusual market. Stringent insurance contracts, effective security measures, and orderly resolutions create a profitable market for kidnap insurance. Underwriters manage moral hazard and adverse selection. Business risk consultancies minimize the kidnapping of insured workers, high‐net‐worth individuals, and travellers. Crisis responders ensure that hostages are treated well, keep ransoms moderate and stable, and discourage kidnappers from reneging on agreed ransoms. The state, private sector, and mafias incentivize cooperation and enforce contracts. Understanding this complex polycentric governance architecture is crucial for remedying current trends in “terrorist” kidnap for ransom.