‘Five Eyes’ warns of Chinese spies using job sites like LinkedIn to hire sensitive data workers
London: The UK domestic security service MI5 has issued a fresh warning about suspected Chinese espionage activity targeting British government and military personnel through online job platforms.
The alert comes from a joint bulletin by the Five Eyes intelligence alliance, which includes the United Kingdom, United States, Australia, Canada and New Zealand. The agencies involved are ASIO, CSIS, FBI, MI5 and NZSIS.
The bulletin warns of what it describes as an “aggressive” online recruitment strategy linked to Beijing’s military intelligence services, aimed at gaining access to sensitive or classified information.
Fake job adverts used to target defence and policy professionals
According to the intelligence warning, Chinese military intelligence operatives are creating fake but convincing job advertisements on professional networking sites and online recruitment platforms.
These listings often advertise non-existent roles such as foreign policy analysts, defence analysts or similar positions. The goal is to attract individuals who may have access to government, military or strategic information.
The agencies say the recruiters often pose as employees of private consultancies, thinktanks or human resources companies, making the offers appear legitimate while concealing their real identities.
LinkedIn, Indeed and Upwork among platforms used
The bulletin highlights that recruitment activity has been observed across major professional and freelance platforms, including:
- Indeed
- Upwork
Applicants are often contacted after applying to these roles, with agents carefully reviewing CVs to identify individuals who may have access to sensitive or strategically valuable information.
Even candidates without direct access to classified material may still be targeted if they have indirect exposure to government policy, defence insights or strategic data.
How the recruitment and intelligence-gathering process works
The intelligence bulletin outlines a step-by-step approach used by the suspected operatives.
After CV screening, shortlisted candidates are interviewed virtually. During these interviews, recruiters hide their true identities and ask probing questions about access to government contacts, military operations or policy knowledge.
Successful applicants are then assigned a trial task, often requiring them to write a report on topics such as China’s relations with other countries, defence developments or international trade.
As the engagement continues, candidates are gradually pressured to share “non-public” or sensitive information. Communication is then moved to encrypted messaging platforms to avoid detection.
Payment offered through global transfer services and crypto channels
The bulletin also states that recruits may be paid for their work, typically ranging from a few hundred dollars to several thousand dollars per report.
Payments are made through a wide range of services, including:
- PayPal
- Payoneer
- Zelle
- Skrill
- Wise
- Western Union
- E-transfer systems
- Cryptocurrency transactions
This financial incentive is seen as part of the wider strategy to normalise engagement and deepen access over time.
Who is being targeted in espionage recruitment campaigns
The Five Eyes warning outlines several categories of individuals considered high-risk targets:
- Security clearance holders, especially those working in defence, foreign affairs, security or intelligence
- Military personnel, including those stationed in the Indo-Pacific region, with knowledge of operational capabilities or regional activity
- Individuals with indirect or peripheral access to government information, including academics, journalists, freelance writers, thinktank employees and professionals linked to defence, security, policy or economic sectors
National security risks and potential prosecution warnings
The bulletin warns that the ultimate objective of these operations is to obtain privileged military, political and economic intelligence that could give China a strategic and tactical advantage over Five Eyes nations.
It also stresses that anyone involved in the unauthorised disclosure of sensitive information could face prosecution under espionage laws.
China intelligence strategy described as increasingly aggressive
The document states that China’s military intelligence services are expanding their use of professional networking sites and online recruitment platforms to target government and military personnel across Five Eyes countries.
It further explains that intelligence officers or their affiliates pose as consultants, recruiters or HR professionals working for legitimate-seeming organisations, before gradually extracting valuable information from targets.
Previous MI5 warnings over LinkedIn recruitment activity
The latest warning builds on earlier alerts issued by MI5, which had previously flagged similar attempts to recruit individuals working in sensitive UK sectors through LinkedIn.
Officials have previously estimated that agents posing as recruitment consultants may have attempted to contact at least 20,000 Britons in targeted sectors with potential job offers linked to intelligence gathering activity.