Five Eyes warns of Chinese spy recruitment via fake LinkedIn job ads

When money is dangled, people get sucked into this
A university ethics professor explains why ordinary professionals fall for Chinese intelligence recruitment schemes.

In a rare moment of unified public voice, the Five Eyes intelligence alliance — the United States, Britain, Canada, Australia, and New Zealand — has issued a joint warning about Chinese military operatives systematically using professional networking platforms like LinkedIn to recruit government and military personnel into espionage. The operation is patient and methodical: what begins as a routine job inquiry gradually becomes a structured intelligence relationship, with recruits drawn in by flattery, modest payments, and the slow escalation of requests. The warning reflects not only the scale of the threat but the recognition that the most dangerous vulnerabilities are often human ones — the career transition, the financial need, the desire to feel that one's expertise matters.

  • Chinese operatives are posing as legitimate recruiters on LinkedIn and job platforms, targeting professionals whose resumes signal access to classified or sensitive government information.
  • The recruitment follows a calculated escalation — from a plausible job ad to virtual interviews, trial reports on sensitive topics, and eventually a shift to encrypted messaging apps where classified exchanges can occur with less visibility.
  • Even unclassified information is considered valuable, as operatives combine policy documents, military capability details, and installation data to construct a comprehensive picture of Five Eyes vulnerabilities.
  • Recently departed government and military personnel are identified as especially at risk, caught in the vulnerable window between public service and private sector careers where financial inducements carry greater weight.
  • The joint public statement from all five agencies simultaneously is itself described by experts as unprecedented, signaling that the threat has reached a threshold serious enough to break the alliance's usual pattern of individual, quieter warnings.

Five Eyes intelligence agencies — the United States, Britain, Canada, Australia, and New Zealand — have issued a joint public warning about Chinese military spies using fake job postings on LinkedIn and similar platforms to systematically recruit government and military personnel. Titled "Safeguarding Our Secrets," the bulletin marks an unusual moment of coordinated, public messaging from an alliance that typically issues such alerts individually and quietly.

The operation is methodical. Operatives pose as recruiters for consultancies, think tanks, or HR firms, posting convincing job advertisements and targeting individuals whose professional profiles suggest access to sensitive information. Initial contact feels routine — a recruiter notices a resume, reaches out with an opportunity. But what follows is a structured escalation: virtual interviews probing government contacts and access levels, then requests to write trial reports on topics like Indo-Pacific strategy or China's bilateral relations. Payment arrives promptly, through third-party platforms like PayPal or Wise, creating distance from the source. Once a recruit has accepted money and produced work, requests intensify, and the conversation migrates to encrypted apps like Signal or WhatsApp — by which point the relationship has quietly become an intelligence operation.

Clive Hamilton, a professor of public ethics at Charles Sturt University, told the ABC that while the method is not new, its scale and brazenness are striking. "When money is dangled before people, and then they're flattered for the importance of their work by their handlers, people get sucked into this," he said. The agencies note that even unclassified material becomes operationally valuable when combined with other reporting to map Five Eyes vulnerabilities.

Australia is considered a particular focus, given its deepening security engagement across the Asia-Pacific and the number of Australians — military officers, analysts, diplomats — who eventually leave government service and enter a vulnerable career transition. Hamilton noted the rarity of the joint warning itself: to his knowledge, the five agencies have never before issued a coordinated public alert of this kind. China has denied the claims, calling them fabrication. The Five Eyes agencies, clearly, disagree.

Five Eyes intelligence agencies—the United States, Britain, Canada, Australia, and New Zealand—have issued a joint warning about Chinese military spies systematically recruiting government and military personnel through fake job postings on LinkedIn and other professional networking platforms. The bulletin, titled "Safeguarding Our Secrets," represents an unprecedented coordinated alert from the alliance, marking a rare moment of unified public messaging about a threat the agencies describe as both aggressive and evolving.

The operation works with methodical precision. Chinese operatives pose as recruiters for private consultancies, think tanks, or human resources firms, posting legitimate-looking job advertisements on platforms where professionals congregate. They target individuals whose resumes suggest access to classified or sensitive information—government employees, military personnel, academics, journalists, and defense sector professionals. The initial contact is designed to appear routine: a recruiter reviews a resume, sees potential, and reaches out with an opportunity.

What follows is a structured recruitment process that gradually escalates. Interviews are conducted virtually, with the recruiter's true identity concealed. Applicants are probed about their government contacts, their military roles, their access levels. If they pass this screening, candidates are asked to write a trial report on seemingly innocuous topics: China's bilateral relations, Indo-Pacific strategy, defense or trade issues. The work appears legitimate, the pay arrives promptly—anywhere from a few hundred to several thousand dollars per report. Money flows through third-party platforms like PayPal and Wise, creating distance between the source and the transaction.

Once a recruit has produced initial work and accepted payment, the requests intensify. Handlers ask for more privileged information, more sensitive material. At some point in this progression, the conversation shifts to encrypted messaging applications—Signal, WhatsApp, or similar platforms—creating a more secure channel for increasingly classified exchanges. The relationship has transformed from a job opportunity into an intelligence operation, and by then, the recruit has already crossed a line.

Clive Hamilton, a professor of public ethics at Charles Sturt University, told the ABC that while the method itself is not new, the scale and brazenness of the recruitment effort is striking. "There are plenty of naive experts out there who seem quite happy to sell their expertise without understanding the risks of doing so," he said. "When money is dangled before people, and then they're flattered for the importance of their work by their handlers, people get sucked into this." The intelligence agencies note that even unclassified information—policy documents, military capabilities, installation details—becomes valuable when combined with other reporting to create a comprehensive operational picture of Five Eyes vulnerabilities.

The joint warning is itself significant. Individual Five Eyes countries have issued espionage alerts before. Britain's MI5 warned MPs about Chinese agents in November. The United States has repeatedly cautioned government employees about Chinese deception operations. Australia's domestic security agency, ASIO, has sounded alarms about unprecedented levels of foreign interference. But a coordinated, public statement from all five agencies simultaneously is unusual enough that experts have called it unprecedented. Hamilton noted the rarity: "There have been warnings from agencies individually in the past, including ASIO, but I'm not aware that they've got together to issue a warning like this in the past."

Australia appears to be a particular focus. The country's growing security engagement throughout the Asia-Pacific region means more Australians hold sensitive information—military officers, intelligence analysts, diplomats. Many of these individuals eventually leave government service to pursue private sector careers, creating a vulnerable window. "They're usually people who've recently left those organisations, and are looking to forge new careers and they are particularly vulnerable to this kind of inducement," Hamilton explained. China has consistently denied such espionage claims, dismissing them as fabrication and slander. But the Five Eyes agencies are clearly convinced the threat is real and coordinated enough to warrant breaking their usual pattern of individual warnings.

When money is dangled before people, and then they're flattered for the importance of their work by their handlers, people get sucked into this.
— Clive Hamilton, professor of public ethics at Charles Sturt University
Even unclassified information on government policy, or on military strategy, capabilities and installations, can be collected and combined with more sensitive reporting to form a comprehensive operational picture.
— Five Eyes intelligence agencies joint bulletin
The Hearth Conversation Another angle on the story
Inventor

Why would someone with actual access to classified information fall for a fake job posting? Doesn't that seem obvious?

Model

Because it doesn't feel like a trap when you're living it. You see a legitimate-looking job ad, you interview with someone who seems professional, you write a report on something that feels like policy analysis. By the time money arrives and the requests get more sensitive, you've already rationalized it—you need the income, the work feels important, the handler has built rapport with you.

Inventor

So it's not about finding people who are already willing to spy. It's about creating the conditions where ordinary people become willing.

Model

Exactly. The agencies call it a recruitment process, and that's precise. It's gradual. It's flattering. It's financial. Most people don't wake up thinking they'll sell state secrets. They wake up thinking they'll do some consulting work.

Inventor

The fact that they're using encrypted messaging—does that mean the people being recruited know at that point that something is wrong?

Model

Not necessarily. By then, the handler has established trust, the person has been paid, and the shift to encrypted platforms can be framed as just normal security practice for sensitive work. The person has already crossed the line; the encrypted app just makes the crossing feel more professional.

Inventor

Why issue a joint warning now? Why not keep this quiet?

Model

Because the operation is too widespread to contain. If Five Eyes agencies are seeing the same pattern across multiple countries, across multiple targets, it means the operation is large enough that people are going to stumble into it. Better to warn people publicly than to keep discovering recruits after they've already started talking.

Inventor

What happens to someone who gets caught?

Model

That's the question the warning is trying to prevent. Once you've handed over classified information for money, you're not just unemployed—you're potentially facing espionage charges. The agencies are essentially saying: recognize this pattern before you become a case file.

Contact Us FAQ