The U.S. Department of Justice announced the seizure of 13 internet domains allegedly used to lure U.S. persons, including current and former security clearance holders, into disclosing sensitive or classified government information through sham consulting jobs. The sites were presented as consulting companies recruiting current or former U.S. government and military personnel, and the seizures were aimed at disrupting an alleged scheme involving bribery of current and former public officials, identity theft and international money laundering. According to an affidavit supporting the seizure warrants, the conspirators created at least 13 fake consulting company websites beginning in November 2023 and promoted generic roles such as Senior Analyst and International Affairs Consultant through hiring platforms, social media and sites including Upwork, Expertia AI, Hubstaff Talent, Wellfound and Post Job Free. The alleged tactics included aliases and stolen identities, AI-generated photographs, relatively large payments for research reports, use of Telegram and other encrypted applications, requests for exclusive or insider information, and transfers from overseas accounts into the United States, including through cryptocurrency. Court documents said the postings related to topics of interest to the government of the People's Republic of China, although the conspirators denied any foreign government involvement. After the seizures, the FBI replaced the websites with takeover pages stating that the domains had been rendered inoperable to disrupt the alleged illegal activity and associated money laundering.
U.S. Department of Justice2026-06-10
U.S. Department of Justice seizes 13 domains used in fake consulting scheme targeting U.S. security clearance holders
The U.S. Department of Justice seized 13 domains allegedly used by fake consulting firms to recruit current and former U.S. government and military personnel, including security clearance holders, and pressure them for sensitive or classified information. Court filings say the scheme used false identities, AI-generated images, encrypted messaging and overseas payments, and that the postings concerned topics of interest to the government of the People's Republic of China. The FBI has replaced the sites with warning pages, while the conspirators denied any foreign government involvement.