Think Before You Link (TBYL)

Last Updated 30 September 2021
TBYL blue cover photo
Downloadable assets

NPSA has now launched an innovative new app allowing users of social media and professional networking sites, such as LinkedIn and Facebook, to better identify the hallmarks of fake profiles used by foreign spies and other malicious actors. The app has been developed with behavioural scientists to include features such as a profile reviewer, which will help individuals identify potentially fake profiles and report anything they deem suspicious. Search NPSA on the Google Play Store or  Apple App Store to download the app or click HERE for more information.

 

How to download the Think Before You Link app

Campaign detail

Criminals and hostile actors may act anonymously or dishonestly online in an attempt to connect with people who have access to valuable and sensitive information. They often do this by posing as recruiters or talent agents who will approach individuals with enticing opportunities, when their real intent is to gather as much information as possible from the target. The consequences of engaging with these profiles can damage individual careers, as well as the interests of your organisation, and the interests of UK national security and prosperity. This guidance provides practical advice on how to identify them, how to respond, and how to minimise the risk of being targeted in the first instance.

The Threat

What? Hostile actors using online platforms to approach individuals

Why? Recruitment of UK nationals to provide them with sensitive information

How? Approaching individuals online offering 'unique' business opportunities

Who? Those who:

  • Identify as an employee or member of HMG or Civil Service
  • Identify as working in the private sector or academia with access to classified or commercially sensitive technology or research

The campaign materials consist of the following:

  • Guidance for staff
  • Guidance for organisations
  • Guidance flyer
  • Poster sets
  • Videos

Downloads are available in single, IDML, INDD print formats, as well as digital web-compatible files. If you have any media enquiries or feedback regarding the TBYL campaign please use our enquiries form. If you think you may have been approached by a hostile state actor – please report via our enquiries form.

Please note: some of the files can only be accessed through Adobe in-design. If you do not have in-design, then you will not be able to download these files.

Think Before You Link - LINKED video

Think Before You Link - LINKED

View Video Transcript

Hi there Maurice, after seeing your work at the Defence industries... 

Hi there Sade, after seeing your work at the Technology’s Institute... 

Hi there Joe, after seeing your work at the Ministry of... 

Hi there Toni, after seeing your work at the Department for Science, Innovation and business, we’d be grateful if you’d agree to be our keynote speaker at our prestigious conference. 

We can offer you an attractive fee and all expenses will be paid. Just accept my request to connect and I’ll tell you more. Connecting with profiles you don’t know can have unforeseen and damaging consequences.
With one click you could become linked to malicious profiles and networks run by hostile states or organised criminals. You could inadvertently associate your organisation... 

...your manager...
...and your colleagues too.
And, depending on your role, you may even harm national security. 

So if you think you have linked with a suspicious profile,
please report it to your security manager,
then take the time to review and remove the profile.
So that you, your colleagues, and your friends are no longer at risk. This can happen to anyone. 

The threat is real
So please think before you link. 

Avoid being compromised by following the 4 R ’s ...

Recognise the profile as a possible fake. Realise the potential threat.
Report to your security manager. Remove them from your network. 

THINK BEFORE YOU LINK 

Think Before You Link - GLITCH video

Think before you link - Glitch

View Video Transcript

Hi, I’m really impressed with your profile

I represent an international recruitment company and have an opportunity with an overseas client that I think you’d be interested in

They’re looking for an expert in your field to give a talk at an upcoming conference

We’ll pay for your travel, and the hotel, plus an appearance fee for the right person

Let’s connect and discuss further 

I’ll send you my user details, so that we can talk more privately

Could you send me your CV and details about your current role and contacts

And once we connect, perhaps you can let a few secrets slip out about what you do and who you know

We’ll try to make it feel harmless, but you’ll be giving us valuable information that we’ll put to all sorts of use

We’ll arrange a meeting, somewhere unfamiliar, perhaps in another country

We’ll send you all the details about when and where to go and we’ll look after you, even arrange for someone to pick you up

Then at the meeting, we can bribe you to reveal more or put you in a situation where we can blackmail you 

And of course, by connecting, we’ll be able to see everyone you’re linked to, your colleagues, everyone who trusts you, details about your hobbies, education and your family

So, are you ready to connect?