It's technically not illegal, but often is. You can't pay terrorist organizations or specially sanctioned orgs. See https://sanctionssearch.ofac.treas.gov

Probably should consult an attorney before paying a ransom (whether for kidnapping or other purposes).