If you're traveling to Mexico and you open a dating app, you need to read this.
What used to be an occasional scam has become an organized operation. Cartel-affiliated cells, primarily linked to CJNG, are running coordinated kidnapping rings through Tinder, Bumble, and Grindr. The targets are foreigners. The method is consistent. And it's getting worse.
This tactic has evolved from isolated incidents into something that looks a lot more like a business model. Here's what the data shows and what most people get wrong about it.
How the operation works
It follows four steps, almost every time.
First, a scout creates a polished dating profile. The photos look real. Some accounts are even "verified" through the app's own system. The scouts look for profiles that signal foreign citizenship, solo travel, or money. Hotel check-in photos, luxury brand mentions, digital nomad bios. All of it gets flagged.
Second, they move the conversation off the app fast. Within a few hours of matching, the person suggests meeting somewhere private. An Airbnb, a house party, a villa outside town. The line is usually something about avoiding tourist crowds or knowing a better spot.
Third, when the target arrives at the second location, there's an armed team waiting. This is the extraction.
Fourth, the extortion happens quickly. These aren't week-long kidnappings. Most resolve in 24 to 72 hours. Victims are forced to drain their bank accounts through mobile apps or call family in the U.S. or Europe to wire money immediately.
Where it's happening
Puerto Vallarta is the worst right now. The Zona Romantica specifically. LGBTQ+ travelers are being targeted through Grindr with invitations to private house parties. In mid-2025, a joint FBI-Mexican operation rescued a U.S. national who had been held and beaten in a hotel inside the tourist zone.
That was a line the cartels hadn't crossed before. They're crossing it now.
Nuevo Nayarit, just north of PV along the resort corridor, runs the same playbook. Guests get lured away from the relative safety of all-inclusive properties to remote beach locations.
Tulum is different. The abductions there often involve scopolamine. A target meets their "date" at a high-end beach club, gets drugged, and then gets walked out by the person who drugged them. To anyone watching, it looks like a drunk friend being helped to a taxi. The taxi drives to an extraction point.
Who they're targeting
Remote workers in Airbnbs are the primary target. They don't have hotel security. They're alone. They use apps to meet people because they don't have a local social network. Everything about their situation makes them easy to isolate.
The LGBTQ+ community in Puerto Vallarta is being hit disproportionately. The criminals exploit the assumption that victims may hesitate to report what happened to local police, especially if the encounter started as something they don't want to explain.
There's also a newer pattern targeting people who display crypto interests on social media. Cartels have figured out that someone with cryptocurrency holdings is potentially carrying access to large sums on a single device. The dating app gets them physical access to that device.
What's coming next
Two things concern me going into 2026.
The first is automation. Criminal groups are already experimenting with AI to run multiple dating personas at once. One operator managing dozens of convincing profiles simultaneously changes the math on how many targets they can engage.
The second is platform migration. If this tactic works on Tinder, there's no reason it stays there. LinkedIn is another obvious vector for targeting corporate executives traveling to CDMX or Monterrey. An "industry networking" message from an attractive profile suggesting drinks at a private venue follows the same four-step pattern.
What to actually do about it
If you have people traveling to Mexico, or you're going yourself, three rules matter.
Stay public. Meet in hotel lobbies or established restaurants. If someone suggests moving to a private location, that's your signal to leave. No exceptions. It doesn't matter how well the conversation went.
Share your location. Use real-time GPS sharing with someone you trust for the entire duration of any in-person meeting. Set it up before you leave your hotel, not after you arrive somewhere unfamiliar.
Limit what your phone can access. Delete high-balance banking apps before you travel, or carry a second phone with limited funds. If you're in crypto, your cold wallet access should never be on the device you're carrying to a date.
None of this is theoretical. People are getting taken right now, in tourist zones, through apps on their phones. The cartels figured out that the easiest way past a gated resort is to get the target to walk out voluntarily. That's exactly what's happening.