DOJ Seizes 13 Domains in Alleged Chinese Spy Scheme

Federal authorities on Wednesday seized 13 internet domains that prosecutors say were part of a Chinese intelligence-linked scheme to recruit current and former U.S. government employees with access to classified and sensitive information.

According to court documents, the operators created at least 13 fake consulting company websites beginning in November 2023 and used them to advertise jobs targeting current and former government workers, military personnel, and security clearance holders.

The Department of Justice said the websites have denied any involvement by any foreign government. 

A spokesman with the Chinese embassy in London called the claim that it was involved with the websites “malicious slander” and said it was entirely fabricated.

The DOJ said the websites promoted positions such as “Senior Analyst” and “International Affairs Consultant” and sought individuals with expertise on topics of interest to the Chinese government.

Prosecutors allege the recruiters used fake identities, AI-generated profile photos, encrypted messaging applications, and payments routed through overseas accounts to conceal their identities and activities.

According to an affidavit supporting the seizures, applicants were offered money in exchange for reports and information. Recruiters allegedly pressured candidates to provide confidential or insider information and used contracts and confidentiality agreements to make the consulting opportunities appear legitimate.

The Justice Department alleged that the scheme involved bribery of current and former public officials, identity theft, and international money laundering.

Assistant Attorney General John Eisenberg warned that foreign actors increasingly use offers to obtain sensitive information from Americans.

“These domain seizures offer a glimpse at how foreign actors can use promises of easy money to lure Americans into revealing sensitive or classified information that they are duty‑bound to protect,” said Assistant Attorney General for National Security John Eisenberg. “Anyone approached online with offers of easy income for vague ‘consulting’ work should treat those overtures with extreme caution and remain vigilant for warning signs of malicious targeting.” 

The FBI said the operation highlights efforts by Chinese intelligence services to use online job postings, professional networking platforms, artificial intelligence, and digital payment systems to target Americans with access to sensitive information.

Authorities said the websites were promoted through job boards and online platforms, including Upwork, Expertia AI, Hubstaff Talent, Wellfound, and Post Job Free.

Following the seizures, the FBI replaced the websites with warning pages stating the domains had been seized as part of a law enforcement investigation. Officials said the action was intended to disrupt ongoing efforts to recruit Americans and obtain sensitive U.S. government information.

“The fake consulting company domains seized by the FBI illustrate the lengths the Chinese government’s intelligence services will go to as they try to use AI-generated content to trick, recruit, or coerce current and former U.S. security clearance holders into sharing sensitive information,” Assistant Director Roman Rozhavsky of the FBI’s Counterintelligence and Espionage Division said in a statement. “The FBI and our partners have observed China’s intelligence services resort to using AI, professional networking sites, and online payment platforms to target Americans, and we have taken actions to defend the homeland and our national security.”