Commentary
Beijing has turned ordinary professional infrastructure into an intelligence collection opportunity.
In 2018, Jun Wei Yeo built what appeared to be a consulting business. He advertised for experts, reviewed résumés, and offered paid research work. According to the U.S. Department of Justice (DOJ), Yeo was working at the direction of Chinese intelligence officers, using professional networking sites to identify Americans with access to information Beijing wanted. Ninety percent of the résumés submitted to one of his fake-company advertisements came from U.S. military or government personnel holding security clearances.
Having direct experience being targeted for recruitment, I know the threat is persistent.
The disguise worked because it looked ordinary. There was no dead drop and no dramatic request for a classified folder. There was a job opportunity. In my case, there was a need to communicate through WhatsApp and pay through PayPal. Those, along with several other red flags, motivated me to turn the contact information over to counterintelligence.
Six years after Yeo’s conviction, the Five Eyes alliance’s intelligence services are warning that China’s military intelligence apparatus has expanded the same model across professional-networking sites and gig-work markets.
Recruitment Has Become an Intelligence Platform
The New Zealand Security Intelligence Service (NZSIS) says China’s military intelligence services are increasingly targeting current and former government officials through professional-networking and online employment platforms. Officers or affiliates pose as recruiters, think tank employees, consultants, or human-resources professionals. They advertise for analysts in foreign policy, defense, security, and international affairs.
The process is incremental. Applicants are interviewed and quietly assessed for access. They may first be paid to write an innocuous research paper. Contact then migrates to encrypted messaging. Requests become more specific. The unidentified “client” begins requesting privileged or nonpublic information. Payments rise with the value of the reporting.
NZSIS adds one detail that should concern every Western government: Successful recruits may be encouraged to remain in government. Their employment keeps information flowing and creates opportunities to identify colleagues who might also be recruited.
This is espionage built around ordinary professional behavior. Expertise is flattering. Consulting money is attractive. By the time the real client becomes apparent, the recruit may already have accepted money or crossed an ethical boundary.
5 Countries Are Seeing the Same Playbook
On June 3, the domestic intelligence services of the United States, the UK, Canada, Australia, and New Zealand issued the joint bulletin “Safeguarding Our Secrets.” It directly attributes this recruitment campaign to China’s military intelligence services.
The target set reaches beyond clearance holders to military personnel in the Indo-Pacific, academics, journalists, think tank employees, freelance writers, and people with peripheral access to policy or economic information.
Canada’s publication of the Five Eyes warning explains why. A recruit does not need a classified document to be useful. Unclassified information about military activities, installations, government intentions, or policy debates can be combined with other reporting to create a broader operational picture. That exposes a weakness in Western security thinking.
Classification systems protect documents, but China’s recruitment model hunts for context: who influences policy, what capability is delayed, which unit is preparing to deploy, where internal disagreement exists, and which colleague might take a paid consulting job.
Institutional memory has intelligence value even after a clearance expires.
The American Cases Show This Is Operational
Yeo pleaded guilty and was sentenced in 2020 for acting as an illegal agent of a foreign power. The DOJ said he identified vulnerabilities such as job dissatisfaction and financial difficulty, paid American targets for reports, and concealed that the information was destined for the Chinese government.
Then, on June 10 this year, U.S. authorities seized 13 internet domains allegedly used to target current and former security-clearance holders. The fake companies advertised positions such as “senior analyst” and “international affairs consultant.”
According to court documents, the operation used fictitious personas, stolen identities, artificial intelligence-generated photographs, contracts, and confidentiality agreements. Recruiters sought “exclusive” or “insider” information, shifted conversations to encrypted applications, and used online payments and cryptocurrency.
The technology improved. The underlying method barely changed. Beijing appears to have adapted a proven recruitment technique to a digital labor market where millions of professionals publicly advertise their employment histories, specialties, and availability for work.
Our Security Model Has a Blind Spot
Western governments still tend to center personnel security on government employment: obtaining a clearance, receiving training, reporting suspicious contacts, and protecting classified systems. What they are missing is how much further the exposure stretches and how the same ecosystem that makes expertise easier to sell also makes expertise easier to target.
Retired officials advertise their experience. Policy specialists move between government, think tanks, and industry. Contractors work remotely. Gig platforms make expertise globally available. Generative artificial intelligence can cheaply create plausible company websites and recruiter identities. The June 2026 DOJ seizures show that several of those capabilities are already being used in alleged Chinese-linked recruitment activity.
Security policy has to follow the person more effectively. Governments should strengthen post-employment counterintelligence briefings for clearance holders, make it easier to report suspicious consulting approaches, scrutinize undisclosed outside employment by sensitive personnel, and work with professional platforms to identify fraudulent recruiting networks.
The objective is friction. Every fake company exposed, recruiter profile removed, payment trail flagged, and potential target warned makes the operation more expensive.
Beijing Rejects the Charge
China rejects New Zealand’s accusations. After the publication of the 2026 NZSIS threat assessment, the Chinese Embassy in Wellington accused the agency of a “Cold War mentality” and said allegations of Chinese espionage either distorted normal exchanges or were fabricated.
Caution in attribution matters. Online fraud is common, other hostile intelligence services recruit sources, and an unusual consulting offer is not proof of espionage. The platforms themselves are being abused; they are not the accused party.
However, the evidence here is still difficult to wave away. Five allied intelligence services have issued the same warning. U.S. prosecutors documented an earlier version of the technique. Federal authorities have now disrupted a new network built around fake consulting companies and job advertisements.
This belongs in the counterintelligence conversation, not merely the cyber-awareness file.
The Spy Service Does Not Need to Knock
China’s advantage comes from making first contact feel normal. A Western official may never meet a Chinese intelligence officer. The approach can come in the form of a recruiter message, a research commission, a consulting contract, or a request for a short paper. The target may believe for weeks that he is simply selling expertise.
China has moved part of the recruitment battlefield into the digital marketplace, where Western professionals build careers, find clients, and advertise their expertise. For decades, governments trained employees to recognize the person asking for secrets. The harder problem now is recognizing the legitimate-looking commercial relationship designed to obtain them.
The strongest element is the shift from protecting classified information to protecting accumulated access, judgment, and institutional memory. That gives the piece a policy argument rather than leaving it as another account of Chinese espionage. The Yeo-to-2026 progression also makes it difficult to dismiss the Five Eyes warning as speculative: The technique has a documented history, while AI, gig platforms, and digital payment systems appear to have made it easier to scale.
Views expressed in this article are the opinions of the author and do not necessarily reflect the views of The Epoch Times.
