As a disruptive 43-day government shutdown wound down in November 2025, the US Army moved quickly. In a message dated November 13, Lt. Gen. Anthony Hale, the service’s deputy chief of staff for intelligence, warned the force that foreign intelligence officers were online, posing as consulting firms, corporate recruiters, and think tanks, hunting for soldiers rattled by more than six weeks without a reliable paycheck.[s] “If the offer seems flattering, urgent, exclusive, or too good to be true, it probably is,” Hale wrote, and Army Counterintelligence Command described a “massive uptick” in such approaches. This is what modern spy recruitment looks like: a flattering message that lands the week your finances fall apart, sent by someone who has never met you.
The pattern is not hypothetical. Korbein Schultz, a 25-year-old former Army intelligence analyst, was contacted in 2022 through a freelance work platform shortly after he received his Top Secret clearance. The person on the other end, named in court records only as Conspirator A and assessed as a likely Chinese agent, posed as a client from a geopolitical consulting firm and asked for analyses of US military capabilities, particularly regarding Taiwan and the war in Ukraine. Schultz ultimately transmitted at least 92 government documents and pocketed about $42,000. In April 2025 he was sentenced to seven years in prison.[s] It was, in the language of counterintelligence, a clean piece of spy recruitment.
How Spy Recruitment Actually Begins
The opening move is almost always mundane. Foreign services no longer need to spot a target across a diplomatic reception; they scan professional networks and job boards for people who hold access and have a reason to be unhappy. Researchers at the Foundation for Defense of Democracies traced a cluster of fake, China-registered consulting websites, dubbed the Foresight Network, that posted remote policy-analyst openings paying as much as $8,500 a month and aimed at former federal employees and public-policy experts amid the 2025 workforce cuts.[s] The sites were crude, with template headshots and stilted English, yet crudeness is not a defect in this trade. “You don’t even have to create a shell company. You just have to create a low-effort website,” analyst Max Lesser told Nextgov, whose report also noted a State Department official sentenced to 48 months for handing classified documents to Chinese agents through a similar consulting-firm cover.
That is the engine of contemporary spy recruitment: an approach cheap enough to send by the thousand, aimed at a few people who matter. China’s Ministry of State Security, long reliant on patient human-intelligence work, increasingly uses online platforms, professional networking sites, and academic contacts to identify and approach potential sources.[s] The first contact may be opportunistic, but the objective is deliberate: a small number of well-placed people whose access is worth the effort.
The true scale of spy recruitment is easy to understate, because the public mostly sees the convictions. A 2026 study by Sweden’s defence research agency, FOI, commissioned by the country’s security and intelligence services, examined 70 people convicted of espionage across 20 European countries between 2008 and 2024.[s] Those cases clustered in Estonia and the Baltic states, with far fewer in Western Europe, and the authors were candid that convictions capture only part of the picture. Even so, the study widened the portrait of who becomes a spy: alongside the classic cleared insider, it identified ten types, including non-experts in civilian jobs and one-time agents who hand over information once and disappear. Russia stood out as the defining threat behind the European cases.
MICE: The Four Doors to Betrayal
For decades, intelligence officers have summarised why people betray their country with a single acronym: MICE, for Money, Ideology, Coercion, and Ego. The FOI study found that the old shorthand still holds. The motives behind its 70 convictions reflected “economic drivers, ideological beliefs, coercion, or ego-related dissatisfaction,” and the authors concluded that MICE remains viable as a way of reading real cases.[s]
Money is the most familiar door. In a Cipher Brief review of William Costanza’s book on treason and betrayal, former senior CIA officer Sean Wiswesser revisits Aldrich Ames, the agency officer who, by Costanza’s account, spied for Moscow largely to fund his second wife’s expensive tastes, and in doing so gave up roughly a dozen Soviet sources working for the West, among them Adolf Tolkachev, the asset later known as the “billion-dollar spy.”[s] Ego opens another door: officers who feel passed over, aggrieved, or convinced of their own brilliance have sold secrets to feel powerful. But Costanza’s central argument is that the doors are rarely used one at a time. No single motive explains treason, he writes; personal history, ideology, ego, and structural weakness interplay at a complex psychological level. The clean categories are useful labels for what is, in practice, a tangle.
A Newer Theory of the Pitch
Some counterintelligence analysts argue that MICE, built in the Soviet era, explains a spy’s motive but says little about how a handler manipulates one into existence. Former CIA employee Randy Burkett proposed an alternative in the agency’s journal Studies in Intelligence, borrowing from the psychologist Robert Cialdini’s principles of influence. He called it RASCLS: Reciprocation, Authority, Scarcity, Commitment and Consistency, Liking, and Social Proof.[s] Where MICE asks why a person betrays, RASCLS describes the mechanics of spy recruitment, the levers a handler pulls. Do a small, unsolicited favour and the target feels obliged to return it. Manufacture scarcity and urgency. Build real liking over weeks of friendly messages. These are the same persuasion principles that con artists use on ordinary victims, turned on people with security clearances.
The two frameworks pull in different directions, and the disagreement is worth stating plainly. The state-commissioned FOI study insists MICE still captures real convicted spies. The influence-psychology camp counters that MICE cannot account for the emotionally driven recruit: the laid-off worker acting less from greed than from anger and a sense of betrayal. Both can be right, because they answer different questions. One names the wound; the other describes the knife.
Why the Pitch Lands Now
What makes the current moment dangerous is the supply of wounds. The 43-day shutdown furloughed roughly 750,000 federal workers, on top of a year of layoffs and buyouts that left many more feeling discarded.[s] Hale’s warning was specific about the targeting: adversaries were scanning online for individuals “expressing dissatisfaction or describing financial insecurity.” Anger, fear, and the feeling of having been thrown away by your own employer are precisely the emotional states a skilled recruiter looks for, and a digital approach lets foreign services find the disgruntled cheaply and from a distance. Spy recruitment, in other words, has industrialised the search for the vulnerable moment.
This is the point where institutional distrust stops being a cultural complaint and becomes a security problem: a workforce that feels betrayed by its own government is a softer target for a foreign one. The dynamic is not confined to Washington. Taiwan has reported a sharp rise in espionage prosecutions, many involving serving personnel and veterans, with recruitment often beginning from something as ordinary as debt or a job search.[s] The Cold War ran on the same fuel: Soviet handlers built sprawling informant networks out of grievance, ideology, and money. The difference is the delivery. Where the KGB had to cultivate a source in person, over years, today’s first approach is a single message, and the recruiter can send a thousand of them before breakfast.
The Defence Is Recognition
Because the psychology is durable, the defence has to be habitual. Counterintelligence officials keep returning to the same unglamorous advice: recognise the shape of the pitch. An unsolicited offer that is flattering, urgent, exclusive, and more lucrative than the work could possibly justify, arriving from a consulting firm you have never heard of, is the modern recruiter’s signature. Every successful spy recruitment depends on the target answering instead of reporting, which is why intelligence services now press current and former employees to flag these contacts the moment they arrive rather than entertain them.[s]
The uncomfortable lesson running from 70 European convictions to a rising American caseload is that the most damaging spies are seldom exotic. They are ordinary people reached at a bad moment by an offer that felt like rescue. The motives that drive betrayal, money, grievance, ego, the small favour that quietly obligates, have not changed in a century of spy recruitment. Only the speed and reach of the approach have. Understanding that psychology is no longer the concern of counterintelligence professionals alone; in an era when the pitch can find anyone with a profile and a problem, it has become everyone’s business.
