Close Protection for UHNW Families After a Crypto Kidnap
Close protection for UHNW families matters in the few seconds between leaving a building and getting safely inside a vehicle.
That is one of the first things I thought about when I read the reporting out of Toronto this week.
On October 14, 2026, Toronto police announced that seven men, including three members of the Canadian Armed Forces, face a combined 82 criminal charges in connection with the alleged July 25 kidnapping of a crypto exchange owner. Police allege the victim was targeted as he approached his vehicle, abducted at gunpoint, handcuffed and assaulted while suspects attempted to gain access to cryptocurrency assets and business-related security systems. CryptoSlate reported the same sequence of allegations and noted that police have not disclosed a successful transfer of assets. CBC News also reported on the October 14 announcement and the involvement of three Canadian Armed Forces members. Every charge remains an allegation unless and until proven in court.
For me, the crypto element is not the central protection lesson.
The car door is.
Whatever the attackers allegedly wanted, police say the physical interception occurred while the victim was approaching his vehicle. That is the part family offices, principals and protection teams should study carefully.
A person can have strong home security for high net worth individuals, layers of alarms around an estate and extensive business controls, and still become exposed during a thirty-second movement between a building and a waiting vehicle.
That transition deserves its own security plan.
I discuss the broader structure around these problems in my High net worth security guide, but this case highlights one very specific issue: protection cannot begin after the principal is already inside the SUV. It has to cover the approach to it.
For families evaluating family office high net worth individuals security, that distinction matters. So does the difference between somebody whose job is to drive a vehicle and somebody functioning as a protective driver inside a coordinated security operation.
It is also why I view high net worth security as a system rather than a collection of individual services. The residence, vehicle, driver, protector, route, destination, parking location, communications and response plan have to work together.
Close protection for UHNW families at the car door
The few steps between a protected building and a vehicle can create a deceptively vulnerable moment.
The principal is moving. A door has to be opened. Attention naturally shifts toward getting into the vehicle. The vehicle itself may limit visibility. There may be pedestrians, staff, family members, luggage or other distractions around the movement.
And unlike inside the residence, you generally do not control everything beyond the property line.
That is why I want a protector thinking about the departure before the principal ever walks outside.
Where is the vehicle?
How is it positioned?
What can be seen from the doorway?
Who has been standing nearby?
Has anything changed since arrival?
Can the vehicle leave immediately?
Is there another vehicle blocking the intended path?
Has someone been sitting in a parked car longer than would normally make sense?
Is the principal being brought toward the vehicle because it is ready, or is the principal being brought out and then forced to wait while somebody sorts something out?
These sound like small operational questions. They are not.
They are exactly the type of details that determine whether close protection for uhnw families is proactive or reactive.
When I talk to families about close protection for UHNW families in Los Angeles, I try to move the conversation away from the image of a bodyguard standing next to somebody and toward the actual mechanics of moving that person safely through changing environments.
A protector should not simply accompany the principal to the vehicle.
The protector should help control the movement to the vehicle.
There is a difference.
The same applies to private security for high net worth family operations. If residential personnel, drivers and executive protection personnel are operating independently, gaps can appear precisely during handoffs.
The residential team sees the principal leave the house.
The driver assumes the residential team has checked the exterior.
The protector assumes the driver has checked the vehicle.
Everybody has performed a piece of the operation, yet nobody necessarily owns the entire departure.
I prefer clear responsibility.
Before movement, someone should know what the environment looks like, whether the vehicle is secure, where it is positioned and whether anything has changed since the previous movement.
That becomes particularly important when the family has a recognizable routine.
If a principal leaves the same residence at roughly the same time, enters the same vehicle in the same location and follows the same general pattern, an outside observer does not need access to an internal schedule to begin understanding that routine.
I am not saying every routine creates an imminent threat. It does not.
I am saying predictable movement gives someone watching from outside more information than I want them to have.
What recommended hnw security teams do differently
When families ask me what recommended hnw security teams tend to do differently, my answer is usually not about how intimidating the personnel look.
It is about preparation.
Professional protection work tries to remove avoidable uncertainty before the principal reaches the vulnerable point.
The driver knows the departure.
The vehicle is positioned.
The route has been considered.
The immediate exterior is observed.
The protector knows where the principal is going.
The receiving side is ready when advance work is warranted.
And if something does not look right, there is enough discipline in the operation to delay or change the movement rather than forcing the schedule through the problem.
That is the standard I want to work toward, and it is how MSB Protection works to that standard.
The same philosophy applies to our executive protection work. The visible protector is one component. The planning around the protector is what gives that person options.
Key takeaways
- The vehicle approach deserves specific protection. Toronto police allege that the victim was targeted as he approached his vehicle. For a protection team, that should immediately raise questions about departures, observation around parked vehicles, positioning and who controls the movement from door to car.
- A driver and a protective driver are not the same job. A capable chauffeur may drive extremely well. A protective driver should also be thinking about surveillance indicators, vehicle condition, positioning, escape options, timing and what is happening around the principal before the door closes.
- Vehicles should be treated as part of the security perimeter. GPS trackers were among items reportedly seized during the Toronto investigation. That does not establish how any individual device was allegedly used, but it is enough to remind security teams that vehicles can provide information about a principal’s movements and should be incorporated into physical inspection routines. CryptoSlate reported GPS tracking devices among the seized items.
- Access to a person can become access to something else. Police allege the attackers attempted to reach cryptocurrency assets and business-related security systems through physical control of the victim. From a physical security perspective, that means a person with access can themselves become a target.
- High net worth security services have to connect the home, vehicle and destination. Security for uhnw family offices should not treat residential security, driving and executive protection as isolated functions.
What Toronto police allege
The facts we can responsibly discuss are limited, and I want to keep them that way.
According to the October 14 reporting, Toronto police say the investigation began with the July 25 abduction of a crypto exchange owner. Police allege the victim was approached near his vehicle, abducted at gunpoint, handcuffed and assaulted.
Seven men now face a combined 82 criminal charges, including three men identified as members of the Canadian Armed Forces. None of those charges should be treated as proof of guilt.
According to CBC News, police announced the development on Wednesday, October 14. Police allege the attackers attempted to gain access to cryptocurrency assets and business-related security systems during the abduction.
Police also listed GPS tracking devices, handcuffs, portable radios and controlled substances among the items seized during searches connected with the investigation. Those seizures do not by themselves tell us how every piece of equipment was allegedly used, and I would not speculate beyond what investigators have said.
CryptoSlate additionally reports that police have not disclosed a successful transfer of cryptocurrency assets. That is worth stating plainly because there is no reason to embellish the incident.
The physical sequence already gives us enough to discuss.
A person reportedly approaches a vehicle.
That person is allegedly intercepted.
The attackers allegedly establish physical control.
Once they control the person, they allegedly attempt to use that person to obtain access to other assets and systems.
For somebody involved in personal security for high networth individuals, that sequence should change how we think about the protection problem.
The valuable asset may not be sitting inside the car.
The person walking toward the car may be the access point.
That changes where security effort needs to go.
Why the vehicle is the attack point
I have spent years working around principals whose movements have to happen without turning their lives into a military operation.
That balance matters.
A family still has to live.
Children have to get to school. Executives have meetings. Families go to restaurants. People leave hotels. They attend events. They fly. They visit friends. They walk from a residence to a vehicle several times a day.
Good protection has to fit around that reality.
But routine movement should never be mistaken for low-risk movement.
The transition to a vehicle is interesting from a protective standpoint because the principal is moving from one controlled environment to another.
Inside a residence, security may include gates, cameras, access control, alarms, staffed posts and physical barriers.
Inside a moving security vehicle, the team has mobility.
Between those two environments, however, the principal may briefly be outside both layers.
That is where planning matters.
I do not want the principal standing beside an unlocked vehicle while a driver loads bags.
I do not want the principal walking toward a vehicle nobody has observed since it was parked.
I do not want an executive protection agent discovering that a driveway exit is blocked after the principal is seated.
And I do not want a driver staring at a phone when the person being protected is approaching the car.
What I want is a clean movement.
Vehicle checked.
Environment observed.
Driver ready.
Protector ready.
Door open at the appropriate moment.
Principal enters.
Doors close.
Vehicle moves.
That may take seconds, which is exactly the point.
A protective driver sees the approach
This is why a security driver for UHNW families should be understood differently from somebody hired primarily for transportation.
Driving skill matters. Smoothness matters. Discretion matters. Knowing the city matters.
But for protective work, the driver’s awareness begins before the transmission goes into drive.
The driver should know what is happening around the vehicle.
That includes what has changed.
A vehicle parked nearby that was not present before.
Something attached to or placed around the protected vehicle that deserves a closer look.
A person lingering near the anticipated departure point.
An unusual obstruction.
Someone approaching as the principal emerges.
A vehicle positioned in a way that could interfere with departure.
None of those observations automatically means an attack is underway. The purpose of awareness is not to turn every anomaly into a crisis.
The purpose is to notice the anomaly early enough to evaluate it.
That is a major part of physical high net worth security.
The closer the principal gets to an unknown problem, the fewer options the team generally has.
Twenty yards away, I may be able to stop the movement.
At the car door, my choices are narrower.
Once somebody has made physical contact, the problem has changed completely.
That is why personal security should create distance between detection and contact wherever practical.
The same logic applies to security for uhnw family offices. If an executive has access, authority or knowledge that another person may want to exploit, protecting the office while ignoring the executive’s physical movement misses part of the exposure.
And it applies to home security for high net worth individuals as well. A sophisticated residence means little if departures become predictable, vehicles sit unobserved in exposed locations or nobody owns the exterior movement.
My company also runs its own in-house research and development aimed at threats like these. I chose to build that capability because I want our protection planning challenged against how an attack may actually happen, rather than treating a written procedure as the end of the job. It is one of the ways I have chosen to set MSB Protection’s work apart from conventional security service providers.
The lesson for me is simple: a plan has to survive contact with the way people really move.
Not the way the movement looks on paper.
A family office can purchase high net worth security services, a residence can have physical barriers, and a principal can have a protection agent nearby. But if nobody is looking closely at the few seconds between the building and the vehicle, a significant gap can remain.
That gap is where I would start.
GPS trackers and pre-attack surveillance
One detail in the Toronto investigation deserves attention from anybody responsible for protecting a family that moves regularly between residences, offices and other locations.
According to CryptoSlate’s reporting on the October 14 police update, GPS tracking devices were among the items investigators seized during searches connected to the case.
That does not establish whether a tracker was used to follow the victim before the alleged kidnapping. The publicly reported facts do not support that conclusion.
But from a protection standpoint, the discovery raises a practical question.
When was the last time somebody physically inspected the vehicles your family uses?
Not just a routine maintenance inspection.
I mean an inspection specifically intended to identify anything that does not belong on or around the vehicle.
In my experience, vehicles are an area where families can become comfortable with routines that would deserve much closer scrutiny elsewhere.
A family may have carefully controlled access to its residence. Visitors might be screened. Household employees may have assigned access privileges. Security personnel might monitor cameras, gates and deliveries throughout the day.
Yet the vehicle carrying the principal may spend hours parked outside a restaurant, in a commercial parking facility or at a location where nobody from the protection team maintains continuous observation.
That creates a different exposure.
If somebody wanted to learn about the family’s movements, an improperly secured vehicle could provide an opportunity for surveillance.
Why a GPS-tracker sweep belongs in the protection plan
I think periodic physical inspections should be considered for vehicles regularly used by exposed principals.
The inspection program should be risk-based rather than arbitrary.
A family with a low public profile and limited exposure may not require the same frequency as a principal who has received threats, is involved in a contentious dispute or regularly travels through environments where vehicle access cannot be controlled.
But I would still want the protection team to understand the basic question: who is responsible for detecting unauthorized equipment?
A proper inspection process should include examination of accessible areas where foreign objects or unusual attachments might be found, while leaving complex mechanical or electrical inspections to qualified personnel.
The team should also pay attention to the vehicle’s recent history.
Has it been parked somewhere unfamiliar?
Was it left unattended for an extended period?
Did somebody report seeing an unfamiliar person near it?
Was there unusual activity around the parking location?
Is there anything physically different about the vehicle?
If something suspicious is discovered, the response should be controlled. I would not want a protector improvising, damaging equipment or putting the family at further risk. Depending on the circumstances, the team may need to move the principal to a safer location, involve law enforcement and preserve the suspected device for examination.
The important part is having a procedure before something happens.
A GPS-tracker sweep is not a substitute for situational awareness, and a clean inspection does not establish that surveillance is absent.
It is one layer.
That distinction matters in high net worth security because no individual measure should be treated as capable of solving every exposure.
Physical surveillance is not always sophisticated
There is another point I make when discussing vehicle-related surveillance.
Technology can matter, but observation does not necessarily require sophisticated equipment.
Someone can learn a surprising amount simply by noticing recurring patterns.
Which vehicle leaves a residence in the morning?
Does the family regularly use the same driveway?
Is a vehicle left outside while somebody attends a standing appointment?
Does a driver wait in the same location every day?
Is there a routine around school pickup or office departure?
These are ordinary details of daily life. There is nothing inherently suspicious about a person noticing them.
The protection problem arises when those observations become part of an effort to follow, approach or interfere with someone.
That is why I dislike security arrangements in which personnel respond to events without documenting patterns.
An unfamiliar vehicle parked near a residence once may mean nothing.
A vehicle repeatedly appearing near separate destinations could deserve further examination.
Someone standing near an office entrance may simply be waiting for transportation.
The same person repeatedly appearing around a principal’s arrivals and departures may create a different concern.
Professional judgment matters.
I do not want protectors treating every stranger as a threat. That quickly becomes intrusive and counterproductive.
I want them capable of recognizing meaningful changes and escalating concerns appropriately.
For security for uhnw family offices, this means information should move between the residential team, executive protection personnel, drivers and whoever coordinates the principal’s schedule.
A residential agent may observe an unusual vehicle near the home.
The driver may later observe something similar near an office.
If nobody communicates, neither observation may receive much attention.
If the information is shared and documented, the protection team has a better opportunity to identify a pattern.
That is one reason I value clear reporting as much as physical presence.
A protector who sees something but fails to communicate it has not completed the job.
Access as the target, not just cash
The second part of the Toronto allegations concerns what the attackers reportedly attempted after physically controlling the victim.
According to the Toronto Police Service, the suspects allegedly attempted to gain access to cryptocurrency assets and business-related security systems. Police have not disclosed a successful transfer of cryptocurrency assets.
The specific technical details are not necessary to understand the physical protection problem.
The allegation is that somebody was physically abducted and then pressured in connection with assets and systems to which that person may have had access.
That should concern family offices well beyond the cryptocurrency industry.
A principal may have authority within a private business.
An estate manager may control access to multiple properties.
A family office executive may oversee sensitive operations.
An assistant may know personal schedules, travel arrangements and household routines.
A security director may administer access-control procedures.
These individuals can become important to a protection operation even when they are not the family members receiving close protection.
The question is not whether everyone with responsibilities should have a permanent bodyguard.
They should not automatically.
The question is whether the family’s security assessment has identified the people whose physical safety could become relevant to the wider operation.
Family office high net worth individuals security has to consider employees
I have seen family offices devote considerable attention to protecting the principal while treating the people who support the principal as an entirely separate matter.
Operationally, that can create gaps.
Consider an estate manager who routinely arrives before the family.
That person may know which gates are used, when household contractors are expected, where vehicles are parked and how deliveries are handled.
Or consider an executive assistant who coordinates travel, appointments and movements between properties.
Neither role automatically requires close protection.
But if credible threats are present, those people should be included in the assessment.
They may need different procedures for arriving and departing.
They may need to understand what suspicious approaches look like.
They may need an emergency contact protocol that functions outside normal business hours.
And they need to know that a security concern can be reported without disrupting their employment or creating unnecessary embarrassment.
A protection program cannot depend on people remaining silent because they are unsure whether an incident is worth mentioning.
Protecting access without turning employees into suspects
There is a balance here.
Family office personnel often work in environments where confidentiality is essential.
They may have been with a family for years. They know personal details. They develop close working relationships.
I do not believe effective security requires treating them as potential criminals.
It requires identifying responsibility and exposure.
For example, a household employee who notices a vehicle repeatedly waiting near a service entrance should know whom to contact.
A family office employee who receives an unusual request to arrange an unscheduled physical meeting should have a straightforward way to verify it.
An estate manager who feels threatened should know that the response will be taken seriously.
And if an employee has access responsibilities that could create risk under physical coercion, the family should understand that exposure and build appropriate safeguards.
Those safeguards might include controlled access, separation of responsibilities, well-defined authorization procedures and the ability to suspend access promptly during an emergency.
My focus remains on the physical side.
Preventing an unauthorized person from reaching an employee.
Identifying troubling approaches before they escalate.
Ensuring an employee can summon help.
Making sure a security incident does not allow an outsider to move freely through the residence or office.
And giving the responding security team clear instructions.
That is what private security for high net worth family operations should account for.
The principal is central to the protection program, but the surrounding people and properties also influence the principal’s safety.
An alarm is useful when somebody knows what happens next
I also want families to think carefully about what happens after an alarm or access-control alert.
A system can report that a door was opened.
It cannot independently determine every reason the door was opened.
A camera may show somebody approaching a gate.
That image still needs to be interpreted.
An access-control system may indicate an unusual event.
Somebody needs to understand whether the event calls for verification, a security response or emergency assistance.
This is where physical security personnel and established procedures become important.
Who receives the alert?
Who determines whether the principal or an employee may be in danger?
Who contacts law enforcement when circumstances warrant?
Who prevents additional people from entering the affected area?
Who checks that family members are accounted for?
Who maintains communication without overwhelming the people responding?
I prefer these questions to be answered during planning.
Not while somebody is standing at a gate wondering whom to call.
Personal security for high networth individuals in digital assets
There is a temptation to view an incident involving cryptocurrency as fundamentally different from other physical attacks against business owners.
Certainly, different businesses present different exposures.
But the protection problem described in Toronto is familiar in one important respect.
Police allege that an individual was intercepted near a vehicle, physically restrained and assaulted, and then subjected to attempts to obtain access to assets and business-related systems.
That is a physical attack against a person.
The fact that the reported objective involved digital assets does not change the importance of recognizing danger before the victim reaches the attack point.
For a family whose business interests include digital assets, I would begin the physical assessment in much the same way I would approach another exposed executive.
Where does the person live and work?
How frequently do they travel?
What does a normal day look like?
Which public appearances or professional responsibilities increase their visibility?
How are vehicles used?
Who handles transportation?
Where are arrivals and departures conducted?
Are family members routinely present during business movements?
What happens if the principal believes someone is following them?
These questions do not assume a threat exists.
They establish the physical circumstances surrounding the person.
A business profile does not tell me everything about personal risk
I would not automatically assign a higher threat level to someone simply because they are involved in cryptocurrency.
That would be a poor assessment.
The person’s actual exposure matters.
Credible threats matter.
Public visibility matters.
Past incidents matter.
Travel patterns matter.
Specific circumstances around the person and their family matter.
Someone with substantial business responsibilities may have a relatively discreet lifestyle.
Another person may regularly attend public events, travel without protective support and maintain highly predictable schedules.
Those situations deserve different recommendations.
For security for uhnw family offices, the assessment should establish what protection is justified rather than automatically recommending a large team.
Sometimes the appropriate recommendation may involve improving residential procedures, vehicle inspections and staff awareness.
In another situation, protective transportation may be appropriate.
And where the threat is more immediate or credible, dedicated close protection for uhnw families may be warranted.
I want the response to match the risk.
I also want the family to understand what each proposed measure actually does.
A surveillance camera does not replace a protector.
A driver does not automatically provide executive protection.
A guard posted at the front gate does not automatically control what happens at an office parking garage.
And a bodyguard cannot make an unsafe movement safe simply by standing next to the principal.
Each component has a purpose.
The value comes from coordinating them.
Family members should not inherit unnecessary exposure
Another concern is how business-related risk can carry over into ordinary family life.
An executive might have a demanding public profile, but their spouse and children may prefer a quiet, private routine.
I would not want the family’s security arrangements to draw unnecessary attention to them.
Protective procedures should be discreet.
That might mean limiting unnecessary exposure during departures, coordinating transportation carefully and ensuring that staff members understand how to respond to an unexpected approach.
For children, the procedures should be appropriate to their age and circumstances.
They should not feel responsible for detecting sophisticated threats.
Adults and trained personnel carry that responsibility.
The objective is to preserve normal family life while reducing avoidable vulnerabilities.
I often explain this in practical terms.
If the family has to stop at the same crowded location every morning, we should understand the movement and decide whether any adjustments are warranted.
If a child is collected from school by a driver, the handoff should be clear.
If a principal attends an event, the vehicle should not become an afterthought.
If the family arrives home late at night, the receiving side should know the vehicle is expected.
None of this requires making the family feel under siege.
It requires discipline from the people providing protection.
Arrivals, departures and parking
If I were reviewing a family’s protective arrangements after studying the Toronto allegations, this is where I would spend considerable time.
I would want to examine actual movements.
Not simply read a security plan.
I would want to observe how the principal leaves the residence, approaches the vehicle, reaches the office and returns home.
What happens when the schedule changes?
What happens when the driver arrives early?
What happens when the principal comes out late?
What happens if another vehicle occupies the usual pickup location?
What happens when the weather is poor, the principal is carrying items or several family members are departing at once?
These details make a difference.
A departure procedure that works under ideal conditions may fail when ordinary circumstances change.
The residence departure
At a staffed residence, I want the team to establish that the departure environment is suitable before the principal moves.
That may involve coordination between the residential security personnel and the driver.
The vehicle should be prepared and positioned appropriately.
The immediate surroundings should be observed.
Any known concern should be communicated.
The principal should not be unnecessarily exposed while waiting for transportation.
If the property has a motor court, gated driveway or garage that allows a more controlled movement, the team should evaluate how to use that space effectively.
There are tradeoffs.
A gate can restrict access, but it can also create a point where a vehicle has to stop.
A driveway can offer privacy, but poor positioning may complicate departure.
A garage may provide shelter from public observation, but visibility, ventilation, vehicle maneuvering and emergency access need consideration.
I do not believe there is one arrangement that works for every estate.
The property has to be evaluated.
The office arrival
Office arrivals can be more complicated because the protection team may control little of the surrounding environment.
Other vehicles are moving.
Employees are arriving.
Pedestrians may be passing through.
Parking facilities may be shared with unrelated businesses.
The driver may have limited space to stop.
That is why the approach should be considered before reaching the destination.
Where can the principal exit safely?
Is there a reasonably controlled entrance?
Can the driver avoid unnecessary waiting in an exposed location?
Does the receiving party know the principal is arriving?
If the expected entrance becomes unavailable, is there an alternative?
These are normal advance-work questions.
A protective driver should have enough familiarity with the destination to avoid discovering obvious problems with the principal already in the vehicle.
Parking is part of the protection assignment
I also look closely at what happens to the vehicle after the principal exits.
A security vehicle should not simply be parked wherever space happens to be available without considering the consequences.
Does the parking location allow the driver to remain aware of the surrounding environment?
Can the vehicle be accessed by unauthorized people?
Will the driver be able to reposition it for departure?
Is communication with the protector reliable?
Does the parking arrangement make the principal wait in an exposed area later?
A driver who drops off a principal and then becomes unavailable creates a gap.
A driver who remains available but stops observing the environment can create another.
The job includes readiness.
And readiness is not the same as leaving the engine running.
It means understanding the assignment, remaining attentive, maintaining communication and being able to support a safe movement when the principal is ready.
When a movement should be delayed
There are circumstances where delaying a movement may be the sensible decision.
An unexplained disturbance near the intended exit.
A suspicious vehicle interfering with departure.
A credible warning involving the principal.
An unexpected person attempting to approach or confront the family.
A vehicle condition that has not been resolved.
An access-control issue affecting the departure route.
I would rather explain a short delay than force the principal through a situation the team has not adequately assessed.
That requires trust.
It also requires security personnel who can communicate calmly.
A protector should be capable of saying that an entrance is temporarily unsuitable and offering a practical alternative without alarming everyone present.
The principal should understand that the delay serves a specific purpose.
And once the concern has been assessed, the team should make a reasoned decision about proceeding, modifying the movement or requesting additional assistance.
This is part of what makes high net worth security services effective.
The people involved need enough judgment to recognize when the ordinary routine should change.
They also need enough restraint not to interrupt family life unnecessarily.
That balance is developed through preparation, communication and experience.
It cannot be replaced by a uniform, an expensive vehicle or an impressive job title.
Drivers and advance work
One of the questions I ask when reviewing a family’s protection arrangements is simple.
Who is responsible for the principal before the vehicle arrives, while the vehicle is waiting, and after the principal gets out?
If the answer changes depending on whom I ask, there is a problem.
In my experience, transportation is frequently treated as a separate service. The family hires a driver. Someone else handles residential security. An executive protection agent accompanies the principal when necessary. A family office employee coordinates the schedule.
Each person has a job, but that does not automatically mean there is a coordinated protection operation.
And when responsibility is unclear, the vehicle becomes an obvious place for mistakes.
The driver may be excellent at navigating Los Angeles traffic.
The residential agent may be excellent at controlling access to the property.
The executive protection agent may be experienced in accompanying principals through public environments.
But unless they coordinate their responsibilities, a principal can still end up standing outside waiting for a vehicle, approaching an unfamiliar pickup location or entering a parking area without anyone having evaluated the surroundings.
That is why I consider advance work an essential part of close protection for uhnw families.
It does not have to be complicated.
It does have to be deliberate.
A protective driver does more than operate the vehicle
There is nothing wrong with employing a professional chauffeur. Families often need dependable transportation, particularly when executives have demanding schedules.
But driving and protective driving are different assignments.
A chauffeur’s primary responsibility is transportation.
A protective driver’s responsibilities also include understanding the security implications of the movement.
That means knowing the intended destination and the practical limitations of the arrival location.
It means remaining aware of changes around the vehicle.
It means understanding how the principal will enter and exit.
It means maintaining communication with accompanying protection personnel.
And it means knowing when an unexpected condition requires reassessment rather than improvisation.
I would expect somebody performing protective driving duties to understand how vehicle positioning influences the principal’s exposure.
For example, imagine an executive arriving at a busy office building.
The building has a main entrance with frequent pedestrian traffic. Delivery vehicles occasionally stop nearby. Employees and visitors move through the area throughout the morning.
A chauffeur may naturally focus on finding a legal, convenient stopping location.
A protective driver should consider those same practical requirements while also evaluating the principal’s movement from the vehicle to the entrance.
Is the intended drop-off location suitable?
Does the principal have to walk around parked vehicles?
Will luggage or personal belongings delay the exit?
Is somebody meeting the principal?
What happens if the preferred entrance is unexpectedly unavailable?
Is there a reasonably safe alternative?
These questions are not about treating an ordinary office arrival as an emergency.
They are about removing avoidable uncertainty.
Advance work should be proportional to the assignment
When people hear the words advance work, they sometimes imagine a large security team inspecting every location before a principal arrives.
That is not how every family needs to operate.
The level of preparation should reflect the circumstances.
A routine visit to a familiar destination may require relatively little additional preparation.
A large event, unfamiliar location or movement involving a credible threat may require considerably more.
For high net worth security, the question is what information the protection team needs to move the principal without unnecessary exposure.
I generally want to understand the destination, entry and exit arrangements, parking limitations, communication requirements and any known security concerns.
If the principal will attend a private event, I want to know how the event’s security arrangements interact with ours.
If the movement involves an unfamiliar property, I want enough information to prevent obvious problems during arrival.
If it involves a public location, I want the team to evaluate how normal pedestrian and vehicle activity could affect the principal.
And if something changes, I want the driver and protector to be able to communicate without confusion.
Sometimes advance work also means deciding that the original plan is no longer appropriate.
A planned entrance may become blocked.
A parking arrangement may change.
A crowd may form near a pickup location.
A previously available departure route may become unsuitable.
The protection team should have the authority and judgment to adjust.
A written itinerary should support the protection operation, not become something the team follows regardless of the circumstances.
The residential team and driver need a common plan
Consider a family living in a gated estate.
The property has cameras, controlled entrances, alarm systems and security personnel.
The principal leaves for the office each morning.
If the driver arrives from outside the property, residential personnel need to know that the vehicle is expected and understand the departure arrangement.
If the vehicle remains inside a garage or motor court, somebody should be responsible for its readiness.
If a protector accompanies the principal, that person needs to know whether anything unusual has been observed around the intended movement.
The residential team should not assume that the driver has checked everything.
The driver should not assume that the residential team has cleared every concern.
And the accompanying protector should not be expected to discover missing information while the principal is already walking outside.
What I want is a brief, reliable exchange of relevant information.
The vehicle is ready.
The departure location is suitable.
No unresolved security concern has been identified.
The principal can move.
That sounds straightforward because it should be.
However, straightforward procedures still require training and consistent execution.
This is one reason I believe family office high net worth individuals security should include regular coordination between personnel who may technically belong to different departments or contractors.
The principal experiences one security operation.
The people delivering it should function that way.
Training should recreate ordinary disruptions
One of the things I dislike about security training is when every scenario begins under ideal conditions.
Everybody knows their assignment.
The vehicle is positioned correctly.
The route is clear.
The principal follows instructions.
Communications work.
Nothing unexpected happens.
That is useful for introducing a procedure, but it does not tell me how the team handles disruption.
I want to know what happens when a vehicle is unavailable.
What happens when a principal unexpectedly changes the departure time?
What happens when an unfamiliar individual approaches during a movement?
What happens when the preferred entrance is closed?
What happens when the driver and protector receive conflicting instructions?
And what happens when a security employee notices something concerning but cannot immediately determine whether it represents a threat?
Training should allow personnel to make decisions.
It should also reveal whether the written procedures actually work.
A team that performs well during a controlled exercise may still need adjustments in communication, positioning or division of responsibilities.
That is normal.
Finding those weaknesses during training is preferable to discovering them during an actual incident.
For MSB Protection, that is part of how I want protection operations to develop. Training and in-house research and development should help challenge assumptions, identify practical weaknesses and improve the way personnel respond to realistic conditions.
Technology can assist a protection team, but it does not replace observation, judgment or competent response.
The car door remains a physical problem.
The people responsible for protecting that movement need to understand it.
High net worth security after an arrest
The October 14 announcement in Toronto is a significant development in the reported investigation.
According to CBC News, seven men, including three Canadian Armed Forces members, face criminal charges connected to the July 25 incident.
CryptoSlate reports that the 82 charges are the combined total across the accused and that investigators continued examining connections in the case. Charges are allegations, not findings of guilt.
From a physical security perspective, an arrest announcement does not automatically answer every question about a person’s continuing exposure.
It also does not mean that danger necessarily continues.
The appropriate response depends on the circumstances.
I would not tell a family that arrests automatically make them safe.
I also would not use an arrest announcement to suggest they face an ongoing threat without credible information supporting that assessment.
What I would do is reassess.
The protection plan should reflect current information
Suppose a family has experienced a serious threat or violent incident.
Police later announce arrests.
That development should become part of the family’s security review.
The protection team should establish what is actually known.
Has law enforcement communicated any continuing concern?
Have there been additional threatening contacts?
Have there been suspicious approaches to the residence, office or family?
Are any protective measures currently in place because of specific information that may have changed?
Does the family need assistance coordinating with investigators?
Which arrangements remain justified?
Which ones may need modification?
Those are reasonable questions.
I do not believe every serious incident should automatically produce an indefinite expansion of security personnel.
The response should be informed by the current risk.
There may be a need for temporary additional protection.
There may be a need to modify transportation procedures.
There may be a need to review who has access to the family’s properties.
There may also be circumstances where existing measures are sufficient.
That is why a reassessment matters.
Review the location where the incident occurred
After an incident involving a vehicle approach, I would pay particular attention to how the person came to be exposed.
Was the vehicle positioned appropriately?
Was the surrounding environment observed?
Was the principal waiting outside?
Was there a protection team present?
Had anybody identified suspicious activity beforehand?
Were there practical alternatives to the chosen departure or arrival arrangement?
These are investigative questions for an internal security review, not assumptions about the Toronto case.
We do not have enough verified information about the victim’s protective arrangements to answer them in that incident.
But any family reviewing its own security can ask them.
The objective is to understand whether a preventable exposure exists.
Sometimes the answer may involve moving a pickup location.
Sometimes it may involve changing parking procedures.
Sometimes it may require a dedicated protective driver.
And sometimes the issue may be poor communication between existing personnel.
I would rather identify a specific weakness and correct it than add personnel without knowing what problem they are supposed to solve.
The family office needs a response plan that works without the principal
Here is another scenario I encourage family offices to consider.
The principal is temporarily unreachable during a scheduled movement.
That does not automatically indicate an emergency. Delays happen. Phones lose service. Meetings run long.
But what happens if the circumstances become concerning?
Who checks with the driver?
Who contacts the accompanying protector?
Who verifies whether the principal reached the destination?
Who contacts the family?
When should law enforcement become involved?
Who has the authority to activate a prearranged response?
A family office should not have to invent those responsibilities during a crisis.
The response plan should establish an escalation process that is understood by the relevant personnel.
It should include appropriate emergency contacts, communication alternatives and procedures for preserving information that may assist responding authorities.
It should also address residential security.
If a serious incident occurs away from home, the residence may need additional access control and coordination.
Family members may need to be accounted for.
Household employees may need instructions.
Security personnel should understand how to handle unexpected visitors or inquiries without exposing private family information.
This is where security for uhnw family offices and residential protection overlap.
The office may coordinate the response, but physical security personnel have to carry out their assigned responsibilities.
And those responsibilities need to be established beforehand.
Protectors must know when to involve law enforcement
Private protection personnel are not a replacement for law enforcement.
Their responsibility is to help prevent exposure, identify concerns, protect the people entrusted to them and respond appropriately within their lawful authority.
When serious violence or an immediate threat is suspected, law enforcement and emergency services have an essential role.
I want protectors who understand that boundary.
They should be capable of recognizing a developing problem and getting the principal away from danger when feasible.
They should know how to summon assistance.
They should be able to preserve relevant observations and communicate clearly with responding officers.
And they should avoid unnecessary confrontation that could make the situation worse.
This is particularly important for families receiving high net worth security services from multiple providers.
A residential team, an outside driver and an executive protection agent may all have different assumptions about who should respond.
Those assumptions need to be resolved before an incident occurs.
Returning to normal without abandoning discipline
Families should be able to return to ordinary life after a security incident when circumstances allow.
That is an important part of protection.
I do not want a family living indefinitely under emergency procedures that no longer reflect its situation.
At the same time, returning to normal should not mean abandoning improvements made after the incident.
If a vehicle inspection program was introduced because nobody previously owned that responsibility, it may make sense to retain it.
If arrival procedures were improved, those changes may continue to provide value.
If reporting between drivers and residential personnel was unreliable, correcting that problem should become part of routine operations.
The aim is to develop a sustainable security program.
One that allows the family to live comfortably.
One that personnel can actually maintain.
And one that does not depend on constant reminders from the principal.
That is what I look for when evaluating recommended hnw security teams: clear responsibilities, competent personnel, practical procedures, consistent communication and a willingness to review what is working.
Security should become more effective as the team learns.
It should not become more complicated simply because something frightening happened.
Frequently asked questions
What does close protection for uhnw families include around vehicles?
Close protection for uhnw families should account for the complete movement between a controlled location and a vehicle, rather than concentrating exclusively on the time spent driving.
Depending on the family’s exposure and the circumstances, that may include a trained protective driver, vehicle inspections, observation around arrival and departure locations, advance work, communication procedures and an accompanying protection agent.
It may also involve coordination with residential security personnel.
For example, if a principal leaves a gated residence, somebody needs to establish that the vehicle is ready and the movement can take place without an obvious unresolved concern.
If the principal arrives at an unfamiliar destination, the receiving arrangements should be understood before arrival.
I would not automatically recommend the same staffing arrangement for every family.
The appropriate measures depend on the principal’s activities, threat exposure, environment and personal preferences.
The goal is to reduce avoidable exposure while preserving normal daily movement.
How does home security for high net worth individuals connect with protective transportation?
Home security for high net worth individuals should not end at the front door or driveway gate.
A residence may have effective perimeter controls, surveillance cameras, intrusion alarms and trained security personnel.
But those measures need to connect with the way family members arrive and depart.
If a driver is expected, the residential team should know the arrangement.
If the principal is leaving, the appropriate personnel should coordinate the movement.
If an unfamiliar person or vehicle creates concern near the property, relevant information should reach the driver and protector before departure.
And if an incident occurs away from the residence, the home security team should know its response responsibilities.
I consider the residence, vehicle and destination connected parts of the same protection operation.
The handoffs between them deserve attention.
When should a family consider personal security for high networth individuals?
I would begin with an assessment rather than a predetermined staffing recommendation.
Personal security for high networth individuals may be appropriate when someone’s exposure, activities or specific threats create risks that ordinary property security and transportation arrangements cannot adequately address.
Examples could include credible threats, repeated unwanted approaches, concerning surveillance indicators, unusually exposed public appearances or serious incidents involving the principal.
A business owner who regularly travels through unfamiliar environments may have different requirements from a family whose movements are relatively private and predictable.
The important question is whether close protection would address an identifiable physical risk.
Sometimes protective transportation and improved residential procedures may be sufficient.
Other circumstances may justify dedicated protection personnel.
A family should understand why each measure is being recommended and how it fits into the overall security arrangements.
What should security for uhnw family offices expect from high net worth security services?
I would expect a clear explanation of how the provider intends to protect the principal during ordinary movements and how personnel will respond when something changes.
That includes identifying who is responsible for transportation, residential coordination, advance work, reporting and emergency response.
It should also include appropriate personnel screening, training, supervision and procedures for communicating concerns.
For a family office, continuity matters.
If a regular driver is unavailable, the replacement should understand the assignment.
If a protector changes, relevant operational information should be transferred securely.
If the principal’s schedule changes, the team should be able to adapt without confusion.
I would also expect the provider to review its procedures periodically.
A security plan should reflect the family’s current circumstances rather than remain unchanged for years.
And the provider should be able to explain what its personnel are trained to do.
Families deserve practical answers.
They should not have to accept vague promises about safety.
Conclusion: Protect the movement before the car door opens
What stays with me about the Toronto allegations is not the cryptocurrency.
It is the reported point of interception.
Police allege that a crypto exchange owner was targeted as he approached his vehicle, abducted at gunpoint, handcuffed and assaulted. Investigators subsequently announced 82 criminal charges against seven men. Those allegations remain subject to the legal process. CryptoSlate’s reporting makes clear that the case also involved alleged attempts to obtain access to assets and business-related security systems.
For families and the people responsible for protecting them, there is a practical lesson in that sequence.
The few seconds around a vehicle can matter enormously.
A driver needs to understand the environment.
A protector needs to understand the movement.
Residential security personnel need to communicate.
The family office needs an escalation plan.
And somebody must take responsibility for ensuring that the principal is not unnecessarily exposed between the building and the vehicle.
Those are the details I want families to examine when they consider private security for high net worth family operations.
My broader approach to these decisions is explained in the High net worth security guide, including how different physical protection measures can work together around a family’s daily life.
After years working in close protection, I have learned that an expensive security program does not automatically mean the details have been handled. I pay attention to whether people know their assignments, whether procedures have been tested and whether the team recognizes a problem early enough to do something useful about it.
For MSB Protection, that is how I approach close protection for uhnw families: build around the actual movements, train for the unexpected and make sure the people protecting the family understand what happens before the car door opens.
Sources
- Toronto Police Service, Kidnapping Case Leads to Cache of Weapons, October 14, 2026
- CryptoSlate, 82 criminal charges follow armed crypto abduction in Toronto, October 2026
- CBC News, 3rd member of Canadian Armed Forces charged in kidnapping probe, October 14, 2026
About Michael Braun
Michael Braun is a former Special Unit Operator, former Manager at Gavin de Becker & Associates, and Founder & CEO of MSB Protection, an executive protection and residential security firm serving high-net-worth and ultra-high-net-worth clients.
Braun has built his career at the intersection of specialized protective operations, executive protection, residential security, protective intelligence, and security risk management. His experience spans special-unit operations, leadership within Gavin de Becker & Associates, and the development and oversight of private protection programs within demanding UHNW environments.
He has been recognized by The Top 100 Magazine as a leading CEO in the private security field and is the subject of an upcoming Marquis Who’s Who feature highlighting his leadership and contributions to the profession.
Today, Braun is recognized for his work in executive protection, UHNW estate security, residential protection, protective intelligence, adversarial security assessments, and security auditing throughout Beverly Hills and Southern California.
His work focuses on moving private security beyond simply “providing a body” and toward intelligence-led, risk-based protection programs designed to identify vulnerabilities before an adversary can exploit them.
Looking for Executive Protection or Residential Security Services?
If you are a high-net-worth or ultra-high-net-worth individual, family office, estate manager, chief of staff, or executive in Beverly Hills, Los Angeles, Malibu or Southern California, MSB Protection provides executive protection, residential security, 24/7 protection, protective intelligence, medical-readiness planning, and security risk management.
We evaluate the complete security environment, from threat exposure and residential vulnerabilities to personnel, technology, procedures, protective intelligence, and emergency response, and build a program around the risks that actually exist.
Contact us for a confidential consultation or message us at +1 (805) 285-2807.