FBI warns some online job offers may have a hidden goal: recruiting spies for China

The FBI and its intelligence partners across the Five Eyes alliance have issued a joint warning that Chinese military intelligence services are using fake online job advertisements to infiltrate sensitive Western networks. The Five Eyes Alliance detailed the warning in a June 3, 2026, bulletin titled “Safeguarding Our Secrets.”

According to the update, released jointly by the FBI, Britain’s MI5, Canada’s CSIS, Australia’s ASIO, and New Zealand’s NZSIS, Chinese intelligence operatives are leveraging professional networking sites and online job platforms, targeting current and former government employees, military personnel, and intelligence professionals. Security clearance holders and military personnel stationed in the Indo-Pacific region face the highest level of risk.

The update explicitly names mainstream professional networking and freelance platforms, including LinkedIn, Indeed, and Upwork, as primary channels for the operation. Western security agencies state that Chinese intelligence officers typically pose as headhunters, HR professionals, or consultants representing fictitious cover companies based outside of China.

From direct targeting, to fake job listings

In a significant shift from traditional digital espionage, where operatives directly message a targeted individual, the bulletin warns that spies are now posting thousands of fake job listings for foreign policy, defense analysis, consulting, or research roles. This allows the operatives to passively rank applicants based on their resumes and the likelihood of possessing sensitive government data.

The multi-stage recruitment process typically begins with virtual screenings, where operatives conduct online interviews probing candidates about their specific government contacts, unit activities, or technical areas of expertise. Following that, applicants are introduced to the “trial report,” or seemingly legitimate paid assignments.

After a financial relationship is established, the operation shifts into an encrypted escalation phase. Once there, recruiters move the conversations onto encrypted messaging apps and gradually increase the pressure to extract non-public, classified, or privileged intelligence.

The alliance warns that even if an applicant only provides unclassified data, Beijing’s intelligence services can piece these reports together. They could then form a comprehensive operational picture that threatens Western defense and economic infrastructure.

In statements obtained by Inc. Magazine, a LinkedIn spokesperson underscored that creating deceptive profiles or misrepresenting identities is a direct violation of their terms of service. The statement emphasized that the platform remains aggressively focused on detecting state-sponsored abuse and dismantling fake accounts.

Meanwhile, Upwork responded by confirming it remains heavily vigilant regarding sophisticated state actors attempting to exploit its freelance marketplace. Indeed has not publicly commented on the matter.

China rejected the espionage allegations. Reuters reported that China’s embassy in London described the accusations as “fabricated” and “malicious slander.” Western authorities have urged job seekers to rigorously vet unsolicited offers, preserve records of suspicious contacts, and report them immediately to national security channels like the FBI’s Internet Crime Complaint Center (IC3).