In a rare joint public warning issued in early June 2026, the Five Eyes intelligence alliance — comprising the United States, United Kingdom, Canada, Australia, and New Zealand — has exposed an aggressive Chinese espionage tactic targeting individuals with access to sensitive information through fake job advertisements on professional networking platforms.
The bulletin, titled “Safeguarding Our Secrets,” highlights how China’s military intelligence services are exploiting open job markets to gather military, political, and economic intelligence that could provide strategic advantages over Western nations.
How the Chinese Espionage Operation Works
Chinese operatives, often linked to military intelligence, create fake profiles posing as recruiters, HR consultants, or employees of seemingly legitimate private consultancies, think tanks, or research firms — frequently appearing to be based outside China.
They post bogus job advertisements on popular platforms such as LinkedIn, Indeed, and Upwork. These openings typically target roles like “foreign policy analyst,” “defense analyst,” or similar consultancy and research positions, often promising flexible hours, competitive pay, or freelance opportunities to attract interest.
Once applications come in, the operatives review CVs and resumes to identify high-value targets: current or former government officials, military personnel (especially those with security clearances or Indo-Pacific expertise), journalists, academics, think-tank researchers, and others holding classified or privileged information.
The cultivation process typically unfolds in stages:
- Initial contact through the platform with personalized messages.
- Requests for sample work, “trial reports,” assessments, or virtual interviews that subtly probe for non-public details.
- Escalation via encrypted apps or other channels, with offers of paid consulting gigs that gradually demand more sensitive information.
- Incentives such as payments (ranging from hundreds to thousands of pounds/dollars) or further opportunities to encourage ongoing cooperation.
Even seemingly unclassified information can be valuable when pieced together with other intelligence, according to the Five Eyes agencies.
Scale and Context of the Threat
This tactic represents an evolution in Chinese intelligence operations, shifting toward scalable, low-risk online methods that leverage the openness of professional platforms. It builds on previous warnings about LinkedIn recruitment and other digital deception strategies.
The joint bulletin underscores the “aggressive” nature of these efforts, marking an unusual level of coordination among the Five Eyes partners in publicly highlighting the issue.
China has not publicly responded in detail to this specific alert but has consistently denied similar past accusations, often labeling them as politically motivated smears.
Official Advice for Protection
Security agencies urge vigilance with the following recommendations:
- Scrutinize unsolicited job offers, especially those that seem too good to be true or come from unverified sources.
- Verify the legitimacy of recruiters and companies through independent checks (e.g., company websites, official registrations, and mutual connections).
- Be cautious of early requests for sensitive or non-public information, pressure to move communications off-platform, or vague company details.
- Report suspicious contacts to relevant authorities, such as the FBI in the US or MI5 in the UK.
Professionals in government, defense, or related fields are particularly encouraged to maintain awareness of these risks in their job searches and networking activities.
Why This Matters
As geopolitical tensions persist, such hybrid intelligence operations allow state actors to gather intelligence efficiently without traditional espionage risks. The “Safeguarding Our Secrets” bulletin serves as both a warning and a call for heightened personal counterintelligence awareness in the digital age.
Individuals and organizations are advised to stay informed through official government channels and exercise due diligence when engaging with online recruitment opportunities. This latest alert reinforces the need for robust cybersecurity hygiene and skepticism in professional interactions online.
About The Author
