It's legal in the US. But the case of the American bounty hunter, Duane Chapman, shows that those who do kidnap suspects from foreign countries can be prosecuted by those countries. The Mexican government eventually dropped the extradition efforts. That was a classic case of him doing something that was legal in the US, but not in Mexico.