How innocent conversations abroad can become the first step towards elicitation, compromise and intelligence recruitment.
Boarding Time
The setting does not look dangerous.
A five-star resort. A recovery spa. Warm weather. People are sitting besides a swimming pool with their phones placed on the table.
Executives have temporarily escaped their boardrooms.
Defence personnel are away from their units. Police officers are on leave. Consultants have switched on their out-of-office messages. Entrepreneurs are celebrating another successful year.
Everyone has supposedly come for the same reason: to switch off.
Then someone starts a conversation.
Where are you from?
What brings you here?
What do you do?
How long are you staying?
Are you travelling alone?
What sort of clients do you work with?
And perhaps, eventually, the conversation moves towards politics, defence, international conflicts, technology, government contracts or the wars dominating the news.
There may be absolutely nothing sinister about it.
In most circumstances, there probably isn’t.
But there is a counterintelligence lesson hidden inside this perfectly ordinary encounter: being on holiday does not make the information inside your head worthless.
For decades, my professional life has involved observing how people obtain information from other people.
Travelling internationally continues to remind me of something remarkably simple. Human beings disclose enormous amounts of information when they believe they are having an informal conversation.
The boardroom creates caution.
The swimming pool often removes it.
And that difference deserves considerably more attention from corporate Australia.
The asset may not be the laptop. It may be the person
Corporate security has become heavily technological.
Organisations invest millions in firewalls, endpoint protection, encryption, access controls, penetration testing and cybersecurity awareness.
All of that is necessary.
But there is an uncomfortable question worth asking.
What happens when the person carrying the information walks outside the security perimeter?
The US National Counterintelligence and Security Centre specifically advises companies to assess additional risks created by international travel.
Its Secure Innovation guidance warns that foreign travel can expose companies and their employees to additional security risks, including threats to intellectual property, technical knowledge and commercially sensitive information.
This matters because intelligence does not necessarily mean a classified government document.
For a corporation, intelligence can include various elements such as a potential acquisition, an unreleased product, a pricing strategy, a litigation position, a tender, a client issue, a vulnerable supplier, a research breakthrough, or an executive succession plan.
One apparently insignificant piece of information may be commercially meaningless in isolation.
Combined with ten other pieces, it can become intelligence.
That is the principle of aggregation.
The traveller, therefore, does not have to carry a document marked “SECRET” to be valuable.
Occasionally, their most valuable asset is knowing who knows what, who reports to whom, who is unhappy, what the organisation is planning, and where its vulnerabilities are.
That has financial value.
The conversation before the request
Professional information gathering does not always resemble interrogation.
Quite the opposite.
One of the most useful human intelligence techniques is elicitation, better known as social engineering: obtaining useful information through conversation without necessarily making the purpose of the questioning obvious.
Imagine a hypothetical situation.
An executive is travelling alone after attending a conference.
At the hotel pool, another guest begins talking.
The conversation starts with sport and weather.
It moves to nationality.
Then occupation.
Then the company.
Eventually:
“You must know some important people.”
Or:
“What do you think will happen with that defence contract?”
Or:
“Everyone says your industry is struggling. Is that actually true?”
Or:
“What’s your opinion about Russia and Ukraine?”
None of those questions proves intelligence activity.
That point cannot be emphasised enough.
Curiosity is not espionage. Attraction is not recruitment. A stranger asking what you do for a living is not evidence of a foreign intelligence operation.
Paranoia is not counterintelligence.
Pattern recognition is.
The professional question is not whether someone asked a question.
It is whether seemingly casual questions progressively begin mapping your access, relationships, beliefs, frustrations, finances, ambitions or vulnerabilities.
MICE: understanding why people cooperate
One of the traditional frameworks used to examine intelligence recruitment is the acronym MICE: Money, Ideology, Compromise or Coercion, and Ego.
The concept appears throughout historical counterintelligence literature. Declassified material discussing recruitment describes these factors as potential vulnerabilities or motivations that can be exploited.
Money is obvious.
An executive under financial pressure may respond differently to an unexpected consulting opportunity than someone financially secure.
But the first payment need not be $100,000.
It could be $500 for an opinion.
Then $2,000 for a report.
Then $5,000 for something more specialised.
The FBI warned in June 2026 that foreign intelligence services use professional networking platforms, job sites and apparently legitimate consulting opportunities to identify potential sources. Initial assignments can involve publicly available information. Once trust and payment relationships are established, requests may gradually become more specific and sensitive.
That progression is important.
Recruitment does not necessarily begin with betrayal.
Occasionally it begins with normalisation.
Ideology provides another route.
Political polarisation creates endless opportunities for conversation.
Ukraine. Russia. China. Taiwan. Israel. Iran. Immigration. Sanctions. Western foreign policy.
A person who identifies with one side may disclose more than intended because they believe they are speaking to someone who understands their perspective.
The information collector does not necessarily need to agree.
They need to listen.
Then there is compromise or coercion.
Alcohol, drugs, gambling, sexual relationships, extramarital affairs, embarrassing photographs, questionable financial activity and other concealed behaviour can potentially create leverage.
But this is where popular culture frequently distorts reality.
The attractive stranger besides the swimming pool is not automatically a “honey trap”.
Women should not be treated as intelligence operatives merely because they approach a man travelling alone, any more than men approaching female executives should automatically be considered hostile actors.
Romantic and sexual compromise is historically documented intelligence tradecraft, but even CIA literature examining agent recruitment points out a limitation: coercion can produce resentful and unreliable sources.
Reality is therefore considerably more complicated than James Bond.
Finally comes ego.
And in my experience studying human behaviour, ego deserves special attention.
“You clearly understand this better than most people.”
“Someone with your experience must know what is really happening.”
“I would love your professional opinion.”
Flattery costs nothing.
Yet for the right personality, recognition can become a remarkably effective currency.
The traveller's psychological blind spot
Travel changes behaviour.
People who would never discuss a confidential project inside an office may casually describe it over dinner thousands of kilometres away.
The environment feels disconnected from normal life.
That creates what might be called a psychological distance from consequence.
The resort feels temporary.
The relationship feels temporary.
The conversation feels temporary.
But digital connectivity means the relationship does not have to end when the flight departs.
A conversation besides a pool can become an Instagram connection.
The Instagram connection becomes LinkedIn.
LinkedIn becomes WhatsApp.
Months later, an apparently unrelated consulting opportunity appears.
The NCSC (UK’s National Cyber Security Centre) has warned that hostile actors use professional networking and social media platforms while posing as recruiters, employers or people offering attractive career opportunities.
Its material also notes that private-sector professionals and researchers can be targeted for proprietary information, trade secrets and advanced technology—not merely government officials.
The FBI’s 2026 warning goes further: individuals may initially have no idea that they are dealing with someone acting for a foreign intelligence service.
This warning highlights the importance for businesses to view counterintelligence as an ongoing process rather than a one-time event.
The financial exposure corporation’s underestimate
Consider a hypothetical Australian technology executive.
She takes a holiday following negotiations over a major international partnership.
During the trip she meets another traveller.
Nothing classified is discussed.
But across several conversations she reveals that negotiations have stalled, one board member strongly opposes the deal, the company desperately needs new capital and a competitor is preparing another offer.
No document has been stolen.
No computer has been hacked.
No confidentiality agreement has deliberately been breached.
Yet commercially valuable intelligence may already have been created.
The financial consequences could be substantial.
Information can influence negotiations, acquisitions, litigation, investment decisions, competitive bidding and market positioning.
This is why counterintelligence cannot remain exclusively a government concept.
For corporations, the question is not simply:
“Do we possess secrets?”
The better question is:
“What could somebody profit from knowing about us before everyone else knows it?”
That changes the discussion dramatically.
But we should resist creating paranoia
There is an important counterargument.
Organisations risk producing employees who are suspicious of everyone if they label every unusual conversation as “social engineering.”
That is neither healthy nor operationally useful.
Business depends upon relationships.
Travel depends upon human interaction.
Some of the greatest opportunities in life emerge from conversations between strangers.
Furthermore, MICE itself should not be treated as a perfect psychological formula. CIA scholarship examining agent recruitment has criticised the simplistic reliance on MICE, as human motivation is considerably more complicated and can change over time.
People often fit into more than one category.
Someone might initially cooperate for money, continue because of recognition and later rationalise their behaviour ideologically.
Others may simply make one poor decision and then make another to conceal the first.
That is precisely why awareness is preferable to paranoia.
The objective is not to stop conversations.
It is to recognise boundaries.
Corporate security needs to travel with the employee
Before international travel, organisations routinely discuss passports, visas, insurance and cybersecurity.
Perhaps another conversation belongs on that list.
What information does this employee carry in their head?
What projects should not be discussed?
What devices are genuinely necessary?
What professional information is already publicly available about them?
Could their social media identify their employer, location, colleagues, clients or travel schedule?
What should they do if someone becomes unusually interested in their professional access?
And who should they contact when they return if an encounter felt inappropriate?
NCSC enterprise-risk guidance includes foreign-travel reporting, briefing and debriefing among counterintelligence risk-mitigation measures.
That is not paranoia.
It is governance.
Companies insure laptops worth $3,000 while sometimes sending an executive carrying decades of institutional knowledge around the world with virtually no human-intelligence awareness training.
From a financial-risk perspective, that equation deserves reconsideration.
The conversation you remember six months later is the one that truly matters.
The most effective warning I can give is also the simplest.
Enjoy the holiday.
Meet people.
Talk.
Laugh.
Travel.
Experience other cultures.
But remember that your professional value did not remain at the airport when you boarded the aircraft.
If someone shows an unusual interest in your access instead of your occupation, in your relationships rather than your experiences, or in information that is not necessary for a typical social conversation, it is important to recognise this change.
If financial opportunities suddenly appear, ask why.
If flattery becomes persistent, recognise it.
If someone encourages secrecy, pay attention.
If a harmless relationship gradually begins generating requests for privileged information, stop and reassess.
The dangerous conversation may not seem threatening at the time it occurs.
It may only become significant months later, when another message arrives.
Another favour is requested.
Another payment is offered.
Another boundary moves.
By then, what began as a conversation between two strangers may have become something entirely different.
Your holiday may have started when you checked into the resort.
That does not mean everyone else’s operation stopped.