China Using LinkedIn to Recruit Government Insiders

Fraud Management & Cybercrime , Social Engineering China Using LinkedIn to Recruit Government Insiders Five Eyes Agencies Document 5-Step Chinese Job Platform Spy Scheme Jennifer Lawinski • June 3, 2026     Credit Eligible Get Permission Image: Shutterstock/ISMG The intelligence agencies of the Five Eyes alliance published a rare joint bulletin Wednesday warning that China's military intelligence services are systematically using professional networking platforms such as LinkedIn, Indeed and Upwork, to recruit government and military personnel and extract classified or privileged information from Western governments. See Also: How Organizations Are Strengthening Defenses Against Scattered Spider The "Safeguarding our Secrets" alert comes from the U.S. Federal Bureau of Investigation, the Canadian Security Intelligence Service, the Australian Security Intelligence Organization, the New Zealand Intelligence Community and Britain's MI5. It outlines a five-step recruitment operation targeting security clearance holders, active military personnel and anyone with access to sensitive, but not necessarily classified, government information, including academics, journalists, freelance writers and think tank employees. Chinese intelligence officers pose as employees of private consulting firms, think tanks or human resources firms and post job listings for foreign policy and defense analysts on the job platforms, and then screen for applicants who could potentially have access to sensitive information. Those candidates are moved through an interview process that evaluates their access potential, and those chosen are asked to produce a trial report. Recruits are asked to produce additional reports with more privileged information and then move the conversation to a more "secure" platform such as an encrypted messaging platform. Recruits are offered payments, ranging from a few hundred to several thousand dollars per report, and payments are made through third-party platforms, including PayPal, Payoneer, Zelle, Skrill, Wise, Western Union and cryptocurrency. Often the payments come from accounts belonging to individuals the recruit has not met. "While applicants often have no direct access to classified information, even unclassified information on government policy, or on military strategy, capabilities and installations, can be collected and combined with more sensitive reporting to form a comprehensive operational picture," the agencies said. "Certain types of data can place the lives of frontline military or other personnel at risk, can weaken our economic prosperity and enable interference in our democratic processes." The Five Eyes agencies said they have already identified individuals who provided information through this scheme, and that these activities have led to criminal prosecutions, job losses and security-clearance revocation. Last year Britain's intelligence agency published a warning that Chinese agents were using LinkedIn to target members of parliament.