Spy Trap Lurks on LinkedIn

China’s intelligence services are using fake job ads on LinkedIn, Indeed, and Upwork to hunt for government insiders and military personnel with security clearances — and the United States just joined four allied nations in sounding a rare public alarm.

Story Highlights

The Five Eyes intelligence alliance — the U.S., United Kingdom, Canada, Australia, and New Zealand — issued a rare joint bulletin warning that Chinese intelligence officers are posing as online recruiters through fake “cover companies.”
Targets include current and former government employees, military personnel, and defense contractors holding security clearances or access to sensitive information.
The operation uses professional platforms including LinkedIn, Indeed, and Upwork to make initial contact and extract classified or privileged information.
China’s Ministry of State Security is identified as the driving force behind the recruitment scheme, according to the joint bulletin published by MI5 and allied agencies.

Five Eyes Rings the Alarm on Chinese Spy Recruitment

The Five Eyes intelligence alliance — comprising Australia, Canada, New Zealand, the United Kingdom, and the United States — issued a joint bulletin warning that Chinese intelligence officers are masquerading as corporate recruiters and consultants on professional networking platforms. The bulletin, published by Britain’s MI5 and partner agencies, describes a deliberate, state-directed operation targeting people with access to government, defense, and technology information. Allied security services called the tactic an “increasingly wide array” of professional networking exploitation.

Canada’s Security Intelligence Service corroborated the warning, describing China’s Ministry of State Security as the key actor behind the scheme. The bulletin notes that fake job advertisements are placed on platforms including LinkedIn, Indeed, and Upwork — platforms millions of professionals use daily without suspicion. The operation is not a random scam; it is a structured intelligence collection effort designed to identify, approach, and cultivate individuals who hold or previously held sensitive access.

How the Spy Trap Works

Chinese intelligence officers create fictitious “cover companies” and post legitimate-looking job listings or consulting opportunities. Once contact is established, operatives work to extract non-public information through what appears to be routine professional conversation. The Five Eyes bulletin emphasizes that even unclassified information becomes valuable when combined with other privileged data, meaning a target does not need to hand over classified documents to cause serious national security damage.

Primary targets include current or former government and military personnel who hold security clearances, along with professionals in the defense and technology sectors. The tradecraft is deliberately low-cost and scalable — a fake LinkedIn profile costs nothing to create, blends easily into normal recruiting activity, and can reach thousands of potential targets simultaneously. Security experts note this approach is far harder to detect than traditional cyber intrusion because it exploits human trust rather than software vulnerabilities.

Why This Warning Carries Weight

Joint public warnings from the Five Eyes alliance are rare. The fact that intelligence agencies from five nations coordinated a simultaneous public disclosure signals that the threat has reached a threshold serious enough to override the usual preference for classified handling. The Federal Bureau of Investigation (FBI), MI5, and their counterparts do not typically expose active intelligence concerns unless the scale or urgency demands a public deterrence response directed at both potential targets and the platforms hosting the fake accounts.

Five Eyes Issues Joint Alert on Chinese Targeting Government and Military Personnel Through LinkedIn and Job Platforms#FiveEyes #China #ChineseIntelligence #Chinese #Espionage pic.twitter.com/MSuwuWDulD

— The Defense News (@TheDefenseNews) June 4, 2026

China’s government issued a categorical denial, as it routinely does when confronted with espionage allegations. However, the denial does not address the bulletin’s specific operational details — the fake cover companies, the platform-by-platform targeting, or the focus on security-cleared personnel. A blanket denial without engaging the documented specifics does little to undermine a coordinated warning backed by five independent intelligence services. Americans with government or defense backgrounds who receive unsolicited outreach from unknown recruiters on professional platforms should treat those contacts with serious skepticism and report them to their security officers.