MI5 Espionage Alert: Why Organisations Need to Know Who Is Really Behind a Business or Research Relationship

MI5 has issued an espionage alert warning UK universities and researchers about the China General Technology Research Institute (CGTRI), highlighting the importance of understanding who ultimately sits behind a commercial, academic or professional relationship.

The Security Service issued the alert on 30 September 2026, stating that the primary purpose of CGTRI is to fund research that directly improves the technical espionage capabilities of China’s Ministry of State Security.

According to MI5, more than 100 UK-linked academics have contributed to research projects funded by the Ministry of State Security through CGTRI.

Significantly, MI5 also warned that some academics may not have been aware that CGTRI was ultimately funding the Chinese research projects to which they were contributing.

The alert has an obvious relevance to universities and the research sector, but the underlying issue applies much more widely.

For businesses, investors and professional advisers, it is another reminder that the organisation presented at the front of a relationship may not always tell the full story.

Why the Ultimate Counterparty Matters

Companies routinely carry out checks before entering major relationships.

A business may confirm that a company exists, establish its registered directors and review publicly available financial information.

Those checks remain important.

However, they do not necessarily reveal who ultimately controls, funds or influences an organisation, particularly where relationships cross borders or involve complicated corporate, institutional or funding structures.

The MI5 alert illustrates why organisations sometimes need to look beyond the immediate counterparty.

Questions may include:

• Who ultimately owns or controls the organisation?
• Where does its funding originate?
• Are there material relationships with state bodies, politically exposed persons or other higher-risk entities?
• Does the organisation operate through intermediaries or affiliated entities?
• Are there discrepancies between the relationship being presented and the wider corporate or institutional network?
• Could the relationship create regulatory, reputational or national-security concerns?

The objective is not to treat every international relationship as suspicious.

It is to ensure important decisions are based on a sufficiently complete picture.

Due Diligence Should Extend Beyond the Name on the Contract

Standard corporate checks can establish useful baseline information.

For higher-value or higher-risk relationships, however, organisations may need to understand the wider network surrounding the proposed counterparty.

This can include examining ownership structures, connected entities, key individuals, litigation, sanctions exposure, adverse information and relevant overseas relationships.

Conflict International's Due Diligence Services are designed to help businesses, investors, law firms and professional advisers examine the people, companies and relationships behind important commercial decisions.

The appropriate level of research depends on the nature of the relationship and the potential exposure involved.

A routine supplier arrangement may justify relatively focused checks.

A significant international investment, strategic partnership, acquisition or relationship involving sensitive technology may warrant substantially deeper review.

Hidden Relationships Can Create More Than Financial Risk

Counterparty risk is often considered primarily in financial terms.

Can the organisation meet its obligations?

Is the investment genuine?

Does the company have the financial standing it claims?

But undisclosed relationships can create other forms of exposure.

An organisation may face:

• Reputational risk.
• Regulatory concerns.
• Sanctions exposure.
• Intellectual-property risks.
• Cyber security concerns.
• Conflicts of interest.
• Exposure of sensitive commercial information.
• National-security implications.

For organisations operating internationally or handling commercially sensitive information, these issues may form part of a broader risk management assessment.

Understanding those risks before entering a relationship can be considerably easier than responding after sensitive information, capital or intellectual property has already been exposed.

Research and Technology Partnerships Require Particular Care

The MI5 warning is particularly significant because research collaborations can involve access to knowledge, technology and specialist expertise with value far beyond the immediate project.

Artificial intelligence and cyber security were among the areas of research specifically identified in the alert.

A collaboration may appear academically or commercially legitimate while still raising questions about who ultimately benefits from the work.

Universities and technology businesses therefore need to consider not only the organisation with which they are directly dealing, but also the wider funding structure and intended use of the research.

MI5 has specifically advised academic institutions to review ongoing or planned collaboration involving CGTRI and has encouraged researchers to establish the ultimate source of funding when working with Chinese institutions.

The Wider Lesson for UK Businesses

Most organisations will never encounter circumstances directly comparable to those described in the MI5 alert.

But the broader due-diligence principle is highly relevant.

A company name, registration record or professional introduction tells you who appears to be involved.

It does not necessarily tell you who ultimately controls the relationship, who provides the funding or who stands to benefit.

That distinction can become particularly important where a proposed relationship involves:

• Sensitive technology or intellectual property.
• Significant investment.
• International counterparties.
• Complex ownership structures.
• High-risk jurisdictions.
• Access to confidential information.
• Strategic suppliers or partners.
• Government or state-linked entities.

The greater the potential consequence of getting the decision wrong, the stronger the case for proportionate independent verification.

Independent Corporate Intelligence and Due Diligence

Conflict International supports organisations carrying out due diligence and corporate intelligence enquiries in the UK and internationally.

Our work can help establish corporate ownership and relationships, examine key individuals and connected entities, identify relevant adverse information and provide a clearer understanding of the risks surrounding a proposed relationship.

Due diligence cannot eliminate every commercial or security risk.

It can, however, reduce the likelihood of an organisation making an important decision based solely on information supplied by the other party.

If your organisation is considering a significant investment, partnership, supplier relationship or other cross-border arrangement, contact Conflict International in confidence to discuss an appropriate level of due diligence.