In August 2026 an unsolicited executive approach reached me through a LinkedIn intermediary, a recruiter persona claiming affiliation with a well-known retained executive search firm, followed by a direct email from a purported HR Director. The role: Senior Vice President, Federal, Defense & Strategic Government Business Development. The mandate: lead US federal and defense growth strategy, capture, procurement vehicles, and the "mission-focused commercialization" of robotics, autonomous systems and AI for DoD, Federal Civilian agencies, and the Intelligence Community. Attached was a polished 14-page "confidential" business plan for Fuchuang Technology LLC, a purported Houston advanced-robotics company, planning up to $1.5 billion in investment, in "proposed industry collaboration" with two named public companies: a Hong Kong-listed Chinese conglomerate and a Tokyo-listed Japanese precision-reducer manufacturer.
The plan was good. Industry-literate: right about the Japanese manufacturer's dominance in RV reducers, credible on a workcell and robotics-as-a-service model, realistic about a Texas and Gulf Coast launch expanding to the Midwest, then the Southeast. Carefully lawyered: every partner claim was "proposed," "potential," "subject to definitive agreements." Real addresses. Governance, ESG and compliance sections written to read like institutional paper.
Forty-eight hours later it was with the FBI.
What broke it
Five checks, in the order anyone could run them.
No corporate footprint. There is no "Fuchuang Technology LLC" in any public corporate index I searched: nothing on OpenCorporates, nothing on Bizapedia, zero hits in SEC EDGAR full-text search. No website, no LinkedIn company page, no press coverage, no job postings. A venture claiming up to $1.5 billion in planned investment sheds paper everywhere.
The addresses are theater. The claimed global headquarters at 800 Town & Country Blvd, Suite 500, Houston (CityCentre) is a Regus/Spaces coworking and virtual-office facility that markets "a prestigious professional address with mail handling." The claimed manufacturing and validation facility at 1310 Rankin Road, Houston, is a for-lease industrial campus with no record of the company as a tenant; the office building at the same address went to Partners Real Estate for leasing in April 2025.
The partners never heard of it. No press release, investor-relations disclosure, annual-report mention or news item from either company references the venture. A commitment near $1.5 billion involving two exchange-listed companies would be price-sensitive information neither exchange would let go undisclosed once binding. Nothing was disclosed, and nothing was announced. Neither company has any disclosed connection to this venture. They are victims of name-borrowing, and both have been notified. That is why neither is named here.
The scale is impossible. The Japanese manufacturer's entire corporate venture arm, launched in 2018, runs EUR 75 million — roughly one-twentieth of the claimed investment — and it makes minority venture bets, not billion-dollar platform commitments. The conglomerate has spent 2024 through 2026 in an explicit deleveraging program targeting divestment of over RMB 80 billion in heavy and non-core assets (Citi coverage note, July 2025). A greenfield $1.5 billion US commitment runs against its own demonstrated capital behavior. The plan projected $1.0 to $1.5 billion in annualized revenue in months 49 through 60, from a standing start. ATS Corporation, a North American automation integrator founded in 1978, took decades plus major acquisitions to reach comparable revenue.
The names didn't match, and the domain was three weeks old. The plan named "Fuchuang Technology LLC." The recruiter signed as HR Director of "Fujian Fosun Technology LLC" — a different entity, absent from the plan, grafting a listed conglomerate's brand into a company name the plan itself had avoided. That conglomerate is based in Shanghai and Hong Kong; Fujian is an unrelated province. No record of the signing entity turned up either. Then the kill shot: fuchuangtechnology.com, the sender's email domain, was registered on 3 August 2026, three weeks before the outreach, through Internet.bs, a Bahamas-based privacy-friendly registrar, on a minimum one-year term, with generic TopDNS nameservers, on a rented AWS IP. That is a free RDAP lookup against the .com registry. It takes thirty seconds.
The role was the tell
A company capitalized and ecosystem-supported by a Chinese conglomerate cannot run classified DoD and Intelligence Community capture. Foreign Ownership, Control or Influence rules under the NISPOM exist for exactly this structure: foreign capital and foreign ecosystem control over a company seeking classified work would make it ineligible for a facility clearance. The February 21, 2025 "America First Investment Policy" memorandum directs restriction of PRC-affiliated investment in US technology and other strategic sectors, and names artificial intelligence as the sensitive technology to keep out of adversary reach. Texas SB 17, signed June 20, 2025 and effective September 1, 2025, bars China-linked entities from acquiring or leasing most Texas real property; the Attorney General's implementing rules, proposed in March 2026, will settle how it applies in practice, but the statute alone cuts against the plan's own real-estate premise of a Houston headquarters and a Houston manufacturing site. Any competent counsel would have flagged all three barriers in a week.
Either the promoters did not know basic government-contracting law, or the DoD and IC framing was never meant to survive contact with reality. Read as a job description, the role is impossible. Read as a filter, it is precise. It selects for exactly one kind of applicant: someone who holds agency relationships, knows the contract vehicles, has run capture inside DoD and the Intelligence Community, and will put all of it on two pages and hit send.
A named, documented pattern
On 3 June 2026 the Five Eyes counterintelligence agencies — the FBI, MI5, ASIO, CSIS and NZSIS — issued a joint bulletin titled "Safeguarding Our Secrets." It warns that China's military intelligence services pose as recruiters and consultants representing fake "cover companies" outside China, advertising on LinkedIn, Indeed and Upwork, to reach people with access to classified or privileged information. The finding that matters here: applicants' resumes are ranked by likelihood of access to sensitive information. Selected applicants are invited to virtual interviews where the recruiter conceals their identity and probes for government contacts, then asked to produce a trial report on a topic such as China's bilateral relations or Indo-Pacific defense. The bulletin names academics, journalists and think-tank staff with peripheral access, because insights and contact networks form "pieces of the jigsaw."
This conduct is already prosecuted. In 2018 Jun Wei "Dickson" Yeo stood up a fake consulting company using the same name as a prominent US public-and-government-relations firm and posted job ads under it. He received more than 400 resumes. Ninety percent came from US military or government personnel with security clearances. He passed the ones he judged interesting to his Chinese intelligence handlers, and he paid other targets to write reports he told them were for Asian clients. He pleaded guilty in July 2020 to acting as an illegal agent of Chinese intelligence and was sentenced to 14 months.
I have not established who ran the approach I received, and I am not going to claim I have. That question is with the FBI. Pattern-match is what I have, and pattern-match is all I am claiming. What I can say is this: the template is documented by five governments, and my approach arrived twelve weeks after their bulletin and matches its template. A cover company outside China. A recruiter persona on LinkedIn. A senior role built around access to federal programs, and a resume as the price of entry.
Why now
Two curves crossed.
Labor first. Employers announced 1,206,374 job cuts in 2025, up 58% from the 761,358 announced in 2024. Government led every industry with 308,167 of them, primarily federal, up 703% from 38,375 the year before. Technology led the private sector with 154,445, up 15%. Those are Challenger, Gray & Christmas year-end numbers. Separately, GAO reported on May 29, 2026 that DoD cut its civilian workforce by about 10% during 2025, more than 78,000 employees. Careers averaging decades of programs, budgets and relationships, pushed onto the open market in a single year.
Then AI. The 14-page plan I received would have taken a fraud ring real effort five years ago. An institutional-grade document is now an afternoon. So are photorealistic profile photos, coherent invented work histories, and synthetic video introductions.
The intersection is the point. The population with the most valuable knowledge in the country is, right now, the population most likely to answer an unsolicited recruiter. A cleared professional whose program was cut does what everyone does: updates the profile, turns on open-to-work, and reads the next InMail with more patience than the last one. Meanwhile, the company sending that InMail only has to survive until the resume arrives, and the cost of fabricating a convincing one fell to near zero while the value of what the target knows stayed fixed. That asymmetry is the business model. The payload is program names, agency relationships, contract vehicles, clearance level, and a contact list. No fee required.
A resume written for a federal BD role is a targeting document. It names the programs, the agencies, the vehicles and the people.
The door swings both ways
I have watched this from the hiring side. At a previous company, an engineer we hired on credentials that turned out to be stolen had access to the platform and the production database before anyone caught it. Every document in the file had checked out.
The pattern has a federal case file too. On June 30, 2025 DOJ announced coordinated action against North Korean remote IT-worker schemes: two indictments, an arrest, searches of 29 known or suspected "laptop farms" across 16 states, and seizure of 29 financial accounts and 21 fraudulent websites. Those workers used stolen or fraudulent identities to get hired at more than 100 US companies, aided by facilitators in the US, China, the UAE and Taiwan. Once inside, they could reach employer systems holding personal data, financial information and trade secrets.
Different adversary, same door. One uses the hiring pipeline to pull information out; another uses it to put a person in. Both work because the pipeline verifies documents rather than humans.
What to actually do
Under an hour, before engaging with any unsolicited opportunity. None of it requires special access.
- Search the entity — the one behind the offer, not the brands it borrows. State Secretary of State and Comptroller records, OpenCorporates, SEC EDGAR full-text search. No registration, stop.
- Check the domain age with a free RDAP or WHOIS lookup. Domain younger than the company's claimed history, stop.
- Map the addresses. A virtual office or an active for-lease listing is theater.
- Demand partner proof at the source. For public-company partnerships, find the exchange disclosure and call the named partner's investor relations line. A hyperlink to a partner's public website proves nothing.
- Sanity-check the scale against the named partners' actual disclosed capacity, in their own filings. A EUR 75 million venture arm does not anchor a $1.5 billion platform.
- Test the recruiter. Verify search-firm affiliation through the firm's own published channels, reverse-image-search the profile photo, and watch whether the process follows retained-search norms. Real retained recruiters run the process through their own firm; they do not hand you off to a company email at a three-week-old domain.
- Never pay, and never send PII. Preserve the email with full headers before you do anything else. Headers are evidence; the body is just the pitch.
Where it stands
This one is reported: IC3, tips.fbi.gov, and the FBI Dallas field office. Everything in this piece came from public sources and under an hour of checking. If you hold a clearance and an approach like this reaches you, your FSO gets told too, and that is not optional. The plan I received was good enough to pass a casual read from someone who has done this work for 25 years. Document quality stopped being a signal. Verification discipline is the only filter left. Run the checks before you answer.
Source index
The two public companies whose names the plan borrowed are described here by listing venue and industry rather than by name. Neither has any disclosed connection to the venture, and both were notified.
- Five Eyes joint bulletin, "Safeguarding Our Secrets," issued by ASIO, CSIS, the FBI, MI5 and NZSIS, 3 June 2026.
- US Department of Justice: guilty plea (July 2020) and sentencing (October 2020) of Jun Wei "Dickson" Yeo for acting in the United States as an illegal agent of Chinese intelligence.
- US Department of Justice, Office of Public Affairs: coordinated action against North Korean remote IT-worker schemes, June 30, 2025 — indictments, laptop-farm searches across 16 states, account and website seizures.
- Challenger, Gray & Christmas: 2025 year-end job-cut report (total, Government sector, Technology sector, with 2024 comparisons).
- US Government Accountability Office, GAO-26-108100, "Civilian Workforce: DOD Should Assess Lessons Learned to Better Understand Reduction Impacts," published May 29, 2026.
- RDAP lookup against the Verisign .com registry: fuchuangtechnology.com registration record, created 3 August 2026, registrar Internet.bs, TopDNS nameservers, AWS-hosted IP.
- OpenCorporates, Bizapedia and SEC EDGAR full-text search: no results for either entity name, August 2026.
- Commercial real-estate listings: Spaces CityCentre One at 800 Town & Country Blvd; Partners Real Estate leasing assignment for the office building at 1310 Rankin Road, April 2025.
- Citi coverage note, July 2025, on the conglomerate's divestment target and deleveraging program.
- The Japanese manufacturer's own corporate venture materials: fund size and 2018 launch.
- Executive memorandum, "America First Investment Policy," February 21, 2025.
- Texas SB 17, signed June 20, 2025, effective September 1, 2025.
- Foreign Ownership, Control or Influence provisions under the NISPOM.
No registration for either entity was found in any public index. The paid Texas SOSDirect primary lookup was not run.