Potential Indicators of Espionage

    Potential Behavioral Indicators of Espionage (From AR 381-12)

    Click the header of each section for an easy to download slide (where available)

    Foreign Influence or Connections

    • Frequent or regular contact with foreign persons from countries which represent an intelligence or terrorist threat to the United States.
    • Unauthorized visits to a foreign embassy, consulate, trade, or press office, either in CONUS or OCONUS.
    • Unreported contact with foreign government officials outside the scope of one’s official duties.
    • Business connections, property ownership, or financial interests internal to a foreign country.
    • Sending large amounts of money to persons or financial institutions in foreign countries.
    • Receiving financial assistance from a foreign government, person, or organization.

    Disregard for Security Practices

    • Discussing classified information in unauthorized locations.
    • Improperly removing security classification markings from documents and computer media.
    • Requesting witness signatures on classified document destruction forms when the witness did not actually observe the destruction.
    • Bringing unauthorized cameras, recording or transmission devices, laptops, modems, electronic storage media, cell phones, or software into areas where classified data is stored, discussed, or processed.
    • Repeated involvement in security violations.
    • Removing, downloading, or printing classified data from DOD computer systems without approval to do so.

    Unusual Work Behavior

    • Attempts to expand access to classified information by repeatedly volunteering for assignments or duties beyond the normal scope of responsibilities.
    • Attempts to obtain information for which the person has no authorized access or need to know.
    • Using copy, facsimile machines, document scanners, or other automated or digital equipment to reproduce or transmit classified material which appears to exceed job requirements.
    • Repeatedly performing non required work outside of normal duty hours, especially if unaccompanied.
    • “Homesteading” (requesting tour of duty extensions in one assignment or location), when the assignment offers significant access to classified information.
    • Manipulating, exploiting, or hacking government computer systems or local networks to gain unauthorized access.

    Financial Matters

    • Unexplained or undue affluence without a logical income source.
    • Free spending or lavish display of wealth which appears beyond normal income.
    • A bad financial situation that suddenly reverses, opening several bank accounts containing substantial sums of money, or the repayment of large debts or loans.
    • Sudden purchases of high value items where no logical income source exists.
    • Attempts to explain wealth as an inheritance, gambling luck, or a successful business venture, without facts supporting the explanation.

     Foreign Travel

    • Frequent or unexplained trips of short duration to foreign countries.
    • Travel that appears unusual or inconsistent with a person’s interests or financial means.

     Undue Interest

    • Persistent questioning about the duties of coworkers and their access to classified information, technology, or information systems.
    • An attempt to befriend or recruit someone for the purpose of obtaining classified or unclassified information.

     Soliciting Others

    • Offers of extra income from an outside venture to those with sensitive jobs or access.
    • Attempts to entice coworkers into criminal situations which could lead to blackmail or extortion.
    • Requests to obtain classified information to which the requestor is not authorized access.


Contact Information

National Capital Region Field Office
902d Military Intelligence Group
9955 Middleton Road, Building 235
Fort Belvoir, Virginia 22060

Main Office Telephone:

Report a Counterintelligence Incident:

Fort Belvoir Military Police Emergency Number: