The Coast Guard Counterintelligence Service (CGCIS) is warning members that foreign adversaries are actively targeting federal workers for recruitment as spies in the wake of continuing mass government layoffs.
New intelligence indicates agents from China, Russia, and other countries have set their sights on recently fired probationary workers, or those with security clearances, hoping to obtain valuable information about U.S. critical infrastructure or national security interests. These foreign intelligence officers actively search LinkedIn, TikTok, Reddit, and Chinese social media site Xiaohongshu – known as RedNote – for potential sources. In at least one instance, a foreign agent was instructed to create a company profile on LinkedIn, post a job listing, and actively track federal employees who indicated they were “open for work.”
A Washington, D.C.-based think tank also recently found a network of Chinese firms trying to lure fired government workers. Max Lesser, a senior analyst with the Foundation for the Defense of Democracies told Reuters that the network he uncovered, “seeks to exploit the financial vulnerabilities of former federal workers affected by mass layoffs.”
CGCIS reminds members to be cautious with their online presence. Posting about your frustration, status as a recently fired employee, or any other OPSEC sensitive information could make you a target. Our adversaries have successfully preyed on upset and disgruntled government workers during past furloughs.
“Everyone is vulnerable at the end of the day,” said one CGCIS agent. “What we want Coast Guard members to know is that the threats are still out there, and you need to be vigilant and report suspicious activity.”
Military members also make attractive targets because of the information they have access to. Earlier this month, two active-duty soldiers and an Army veteran were arrested for conspiring to sell classified materials on Army combat vehicles, rocket systems and military exercises to agents of the Chinese government for as much as $50,000, according to federal officials.
Is a foreign agent trying to recruit you?
Think you might have been approached online or targeted by someone suspicious? CGCIS offers the following guidelines to help members recognize when a person reaching out with an offer might be a threat:
- It’s too good to be true. This includes jobs offering remote or flexible work, and a salary that seems high for the role advertised.
- Flattery. Your contact might overly praise or focus on your skills/experience, especially if your government affiliation is known.
- Scarcity. Emphasis on limited, one-off, or exclusive opportunities. “Act now or lose out.”
- Lack of depth/detail. Lack of visible or verifiable company information online, or the role lacks details.
- Urgency. Contact may be overly responsive or attempt to rush you into making a decision.
- Imbalance. A lot of focus on the company you’re being recruited for, rather than company vetting you as a candidate.
How to report suspicious communications
If you think an adversary might be trying to recruit you or other Coast Guard members, you can report this in any of the following ways:
- CGCIS reporting hotline: 866-399-3411
- CGCIS Washington Field Office 24/7 Duty Phone: 202-701-3216
- Email counterintelligence@uscg.mil
- Speak to a local CGCIS Agent
-USCG-