China's espionage playbook: LinkedIn lures, university infiltration and hidden bugs

They want to know everything about any nation it believes will stand in its way
Intelligence expert Anthony Glees explains China's rationale for the scope and intensity of its espionage operations against Western nations.

Across the digital and physical landscapes of Britain and America, China's intelligence apparatus has quietly woven itself into the fabric of everyday professional life — a LinkedIn message here, a research grant there, a teapot that shatters to reveal something far more sinister. What intelligence experts now describe as a shadow operation of historic scale is not the stuff of Cold War cinema but of ordinary human ambition and trust, exploited with patience and precision. The goal, analysts warn, is nothing less than the reshaping of global order in Beijing's image, with stolen secrets, compromised institutions, and surveilled citizens as the raw material.

  • MI5 estimates over 20,000 UK nationals have already been approached online by Chinese intelligence operatives, a figure that signals not an isolated threat but a systematic campaign running at industrial scale.
  • Fake LinkedIn recruiters, bugged teapots, and a Chinese engineer impersonating NASA colleagues for four years reveal how thoroughly Beijing has embedded deception into the routines of professional and civic life.
  • Universities, government ministries, telecommunications networks, and even the mobile phones of senior Downing Street officials have all been penetrated, leaving Western institutions scrambling to understand the full dimensions of the breach.
  • Arrests in the UK and US — including a California mayor, a former Labour advisor, and the first Britons ever convicted of spying for China — suggest intelligence agencies are beginning to surface what had long been invisible.
  • Experts warn that stolen personal data on potentially every British citizen could be fed into AI systems, used to map vulnerabilities, or deployed to manipulate public opinion, meaning the damage may compound long after the intrusions themselves.

The methods are almost mundane — a LinkedIn message from a polished recruiter, a research grant from a generous foreign partner, a farewell gift from gracious hosts. Yet these are the instruments through which China's intelligence services have built what experts now call a shadow operation spanning Britain and America, targeting officials, academics, and civil servants with a patience that makes the scale of the intrusion easy to miss until it is very difficult to contain.

MI5 last year unmasked two fake LinkedIn profiles — 'Amanda Qiu' and 'Shirly Shen' — operated by Chinese intelligence, each presenting as a professional headhunter for world-class firms. Security Minister Dan Jarvis called it calculated espionage. Intelligence expert Anthony Glees explained the logic: LinkedIn is a platform where professionals advertise their expertise and ambitions, making themselves visible to anyone hunting for access to sensitive information. Agents cultivate long-term relationships, sometimes using romantic interest to lower a target's guard, before gradually extracting what they came for. MI5 estimates over 20,000 UK nationals have been approached this way.

Universities have proven equally fertile ground. Chinese intelligence officers befriend students in engineering and information technology, offering funded trips to China and research opportunities that gradually become leverage. The physical world has not been spared either. A UK civil servant posted to Beijing received a tea set as a parting gift; back home in Britain, when the teapot shattered on the kitchen floor, a recording device was found inside. Meanwhile, GCHQ has warned that China may have harvested personal data on every British citizen through hacking campaigns dating to 2021, with the Salt Typhoon cyber operations penetrating UK telecommunications and, reportedly, the mobile phones of senior Downing Street officials.

Across the Atlantic, the FBI issued an arrest warrant in 2024 for Song Wu, a Chinese aerospace engineer who spent four years impersonating colleagues and friends to extract sensitive missile software from NASA, the Air Force, the Navy, the Army, and the FAA. Days before Donald Trump's visit to Beijing, a California mayor agreed to plead guilty to acting as a Chinese agent, and a New York man was convicted of running a secret Chinese police station on American soil.

Glees estimates thousands of Chinese operatives work on American soil, and he reserves sharp criticism for Western governments themselves — pointing to Britain's decision to permit a new Chinese embassy at Royal Mint Court and to allow senior officials to hold off-the-record conversations at Beijing think tanks. The espionage, he argues, is not opportunistic but purposeful: every stolen file, every compromised relationship, every harvested dataset feeds China's ambition to remake the world on its own terms before the century is out.

The methods are almost mundane. A LinkedIn message arrives from someone claiming to recruit for a prestigious firm. An email lands in your inbox from what appears to be a colleague. A gift arrives from a business contact abroad. These are the tools China's intelligence apparatus now relies on to extract secrets from British and American officials, academics, and civil servants—and they are working with alarming consistency.

Intelligence expert Anthony Glees describes the threat as reaching critical mass. Speaking to The Sun, he laid out the scale plainly: Britons face espionage at the same intensity as American targets, with the Chinese government running what amounts to a shadow intelligence operation across both nations. The evidence is mounting. Earlier this month, two men became the first people in British history convicted of spying for China after orchestrating what prosecutors called a shadow policing operation. In March, three UK citizens—including a former Labour advisor and the husband of a Labour MP—were arrested on suspicion of working for Beijing.

The playbook is sophisticated but relies on human nature. MI5 last year exposed two fake LinkedIn accounts operated by Chinese intelligence: one under the name Amanda Qiu, the other Shirly Shen. Both profiles featured professional headshots of women and presented themselves as recruiters for world-class companies and global headhunting firms. Security Minister Dan Jarvis called the operation "calculated" espionage. Glees explained the appeal of the platform: professionals use LinkedIn to broadcast their expertise and ambitions, making themselves visible to anyone hunting for access to classified information. When a target catches an agent's attention, the agent develops a long-term relationship, posing as a recruiter or researcher before gradually extracting sensitive material. In some cases, these accounts function as honeypots—using seduction or romantic interest to lower a target's guard. MI5 estimates that over 20,000 UK nationals have been approached by Chinese spies through online channels.

Universities have become another hunting ground. Chinese intelligence officers befriend students in high-value fields like engineering and information technology, particularly at London's elite institutions. They offer glossy trips to China, all-expenses-paid research opportunities, and funding for academic work. What begins as opportunity becomes leverage. As researchers grow dependent on Chinese money and collaboration, their willingness to share information shifts. Glees noted that the sophistication of these operations masks something darker: the machinery of a one-party dictatorship determined to cement Xi Jinping's power and China's global dominance for the rest of the century.

The physical world has not been forgotten. In 2023, a UK civil servant working at the Beijing embassy received a tea set as a parting gift from Chinese hosts. Months later, while washing up at home in Britain, the employee knocked the teapot to the floor. It shattered, revealing a recording device embedded inside. The bug had not captured classified material, but the incident exposed the lengths Beijing will go to surveil its targets. Meanwhile, cyber operations have reached unprecedented scale. GCHQ warned last year that China may have harvested personal data on every British citizen through hacking campaigns dating to 2021. The agency attributed the Salt Typhoon cyber attacks—which penetrated UK telecommunications systems and critical infrastructure—to Beijing. Chinese hackers are believed to have infiltrated the mobile phones of senior Downing Street officials for years. The stolen data could be weaponized in multiple ways: training artificial intelligence systems, identifying individual and collective vulnerabilities, or shaping public opinion.

Across the Atlantic, the threat is equally acute. In September 2024, the FBI issued an arrest warrant for Song Wu, a Chinese citizen who created a fake Gmail account to infiltrate NASA, the Air Force, Navy, Army, and the Federal Aviation Administration. Wu posed as friends and colleagues, having researched his targets extensively before making contact. Behind the false identity was an engineer at a Chinese state-owned aerospace and defense corporation that manufactures military aircraft. Over four years, Wu allegedly convinced victims to share sensitive software related to advanced tactical missiles, causing them to unwittingly violate export control laws. He faces charges of wire fraud and aggravated identity theft. The Center for Strategic and International Studies warned last week that Beijing has "aggressively ramped up" its irregular warfare activities against the United States.

Glees estimates thousands of Chinese spies operate on American soil, with the most valuable positioned to access classified information. The timing of recent incidents suggests the pressure is intensifying. Just days before Donald Trump visited Beijing for talks with Xi Jinping, Eileen Want, the mayor of Arcadia, California, agreed to plead guilty to acting as a Chinese agent. Two days before that, a New York man was convicted of operating a secret police station on behalf of China. The Home Office responded with assurances that it would hold anyone accountable for threatening British security and that it has deployed robust measures to defend against state-backed threats. But Glees offered a sharper critique: the government itself has been reckless, allowing China to build what he called a "super-spy Embassy" in Royal Mint Court in London and permitting high-ranking officials to conduct off-the-record conversations at Beijing think tanks. The espionage, he warned, serves a singular purpose: fueling China's ambition to remake the world according to its rules.

Brits are every bit as much at risk as our key American allies – subjected to espionage running at extremely high levels
— Anthony Glees, intelligence expert
China has been trying to collect population level data on British people to work out what our vulnerabilities are individually and collectively
— Ciaran Martin, former head of UK's National Cyber Security Centre
La Conversación del Hearth Otra perspectiva de la historia
Inventor

Why does China bother with something as simple as a fake LinkedIn account when it has such sophisticated cyber capabilities?

Model

Because it works. A person gets a message from someone who seems to understand their career, who offers opportunity. That's not a firewall or encryption—that's human judgment, and it's easier to manipulate than any code.

Inventor

But surely people in sensitive positions are trained to spot this?

Model

Training and reality diverge. You can tell someone to be suspicious, but ambition and loneliness are powerful. Someone offers you a research grant, a trip, a connection—and you want to believe it's real. By the time you realize it isn't, you've already shared something.

Inventor

The tea pot with the bug seems almost quaint compared to hacking into government phones.

Model

It's not quaint. It's a reminder that they're patient and willing to take physical risks. The cyber attacks are about scale and speed. The tea pot is about intimacy—they're in your home, listening while you eat. Both work together.

Inventor

What's the endgame here? What does China actually want with all this data?

Model

Control. They want to know what makes you vulnerable, what makes your country vulnerable. They want to train machines to predict your behavior. They want to know which officials can be turned, which systems can be broken. It's not espionage for its own sake—it's preparation.

Inventor

Preparation for what?

Model

For a world where China sets the rules. That's what Glees keeps saying, and it's not hyperbole. Every piece of data is a brick in that architecture.

Contáctanos FAQ