Estonia’s domestic intelligence service has issued a stark warning to European influencers, journalists, and policymakers regarding the apply of all-expenses-paid trips to China as a primary tool for intelligence recruitment and political manipulation.
In its annual report released Monday, April 13, the Estonian Internal Security Service, known as Kapo, detailed a sophisticated strategy by the Chinese Communist Party to cultivate “assets” within the European Union. By offering lavish hospitality and fully funded travel, Beijing aims to secure favorable coverage and influence the narratives of cultural figures, academics, and experts who can then speak about their personal experiences of China to a domestic audience.
The warning underscores a growing trend of “soft power” initiatives that mask more aggressive intelligence operations. According to Kapo, these invitations are rarely without strings, noting that “lavish hospitality may carry expectations” and that such generosity often comes at the cost of professional independence and journalistic freedom.
This effort to recruit EU assets through all-expenses-paid trips is part of a broader geopolitical strategy that mirrors tactics used by Russia. Although China focuses on high-profile influencers and professional networking, Russian operations in Europe have shifted toward the use of unconventional proxies, including members of the clergy and minors, to conduct sabotage and espionage.
The Digital and Diplomatic Pipeline
The recruitment process often begins far from Chinese soil. Kapo reported an intensification in 2025 of the use of professional networking platforms, specifically LinkedIn, to identify and target potential intelligence assets. Rather than relying solely on personalized messages, the Ministry of State Security (MSS)—widely considered the largest spy agency in the world—has pivoted toward posting deceptive job advertisements.
These advertisements are designed to attract individuals with specific backgrounds in government service, foreign policy, or security. Once a connection is established digitally, the intelligence services attempt to lure these influential individuals to China or neighboring countries for face-to-face recruitment.
The intelligence service cited specific examples from October 2025, when the Chinese embassy in Tallinn invited Estonian media members to visit the Suzhou and Nanjing provinces. Simultaneously, the Chinese Academy of Social Sciences, a state reckon-tank with close ties to intelligence services, flew “young Estonian experts” to Hangzhou for a China–Europe Youth Dialogue.
Beyond individual recruitment, the report highlights the use of financial incentives to manipulate the media landscape. The Chinese embassy has allegedly paid for sponsored articles in Baltic media outlets, often utilizing Estonian PR firms as intermediaries. These articles are intended to falsely portray China as a democracy or to amplify territorial claims regarding Taiwan.
Russia’s ‘Disposable’ Proxies and Clerical Cover
While China leverages professional prestige and luxury, Russia’s approach has become increasingly clandestine and, in some cases, predatory. Kapo warns that visits to Russia by political figures pose a significant security risk, as they inevitably attract the attention of Russian intelligence services, regardless of whether the visitor has access to classified information.
A particularly concerning development is the use of the Russian Orthodox Church as a front for espionage. The report states that the Kremlin “abuses the argument of religious freedom” to undermine security in democratic societies, using clerical robes to mask intelligence activities.
In 2025, Estonia revoked the residence permits of Russian nuns from the Resurrection of Christ Cathedral in Narva. The move followed findings that these individuals had worked with the Exaltation of the Cross Jerusalem Stavropegial Convent near Moscow, which was involved in collecting fuel, camouflage nets, and weapons for the war effort in occupied Ukrainian territories.
The report also detailed the case of Dmitri Burov, known as ‘Brother Daniil,’ a monk who was interrogated in February 2026 after he was caught filming an Estonian military barracks in Võru. Burov subsequently left for Russia and has not returned.
Perhaps most disturbing is the recruitment of children. Kapo noted that in 2025, Russian intelligence began recruiting minors for sabotage operations, utilizing social media to convince them to damage memorials or other property. These individuals are referred to by Russian services as ‘one-offs’—disposable assets who are discarded once their utility is exhausted.
Comparative Intelligence Tactics in the EU
| Tactic | Chinese Approach | Russian Approach |
|---|---|---|
| Primary Hook | Lavish trips, job offers, prestige | Religious affinity, social media appeals |
| Target Profile | Experts, journalists, policymakers | Clergy, minors, political visitors |
| Digital Tool | LinkedIn job advertisements | Social media calls for sabotage |
| End Goal | Narrative shift, strategic assets | Sabotage, military reconnaissance |
The Strategic Implications for Europe
The convergence of these two distinct yet mirroring strategies suggests a coordinated effort to destabilize EU security from within. By targeting those who shape public opinion—influencers and journalists—China seeks to create a permissive environment for its political goals. Meanwhile, Russia’s use of “disposable” assets and religious cover allows it to conduct reconnaissance and sabotage with a degree of plausible deniability.
Security officials emphasize that the danger is not limited to those with high-level security clearances. The interest of these services extends to “non-classified information,” such as the photography of military convoys or the observation of troop movements, which can be aggregated into a larger intelligence picture.
For those operating in the Baltic region or the wider EU, the takeaway is a necessitate for heightened vigilance. The transition from a “professional opportunity” on LinkedIn to an “all-expenses-paid trip” can be the first step in a recruitment pipeline designed to compromise professional integrity and national security.
The Estonian government continues to monitor these activities, with further updates expected as the Estonian Internal Security Service processes additional data from its 2025-2026 review cycle. The next phase of security briefings is expected to focus on the resilience of Baltic media against foreign-funded “sponsored content.”
We invite readers to share their thoughts on the balance between diplomatic engagement and security vigilance in the comments below.
