What Is a Honeytrap? The Evolution of Espionage from Human Intelligence to Digital Manipulation

Espionage is not always conducted through secret meetings, stolen documents or sophisticated surveillance systems. Sometimes, it begins with a simple conversation, a carefully crafted identity or a relationship built on trust. Throughout history, intelligence agencies have exploited human emotions, romantic attachments and sexual relationships to recruit sources, extract sensitive information and compromise individuals. As technology has transformed communication, these operations have moved beyond physical encounters into the digital world, where social media and messaging platforms offer new ways to identify, approach and manipulate potential targets. What was once a face-to-face intelligence operation can now begin with a single message from an unfamiliar account.
Understanding the Honeytrap: Psychology, Methods and Intelligence Objectives
Espionage involves the clandestine collection of sensitive information to gain strategic, economic or military advantages over adversaries. Among the many techniques intelligence agencies employ, honeytrapping stands out for its ability to exploit human relationships and psychological vulnerabilities.
Sex and espionage—two of the world’s oldest professions—have long intersected in the shadowy world of intelligence. Across history, intelligence agencies have exploited romantic relationships, sexual encounters and emotional attachments to manipulate individuals with access to sensitive information.
A honeytrap is an intelligence operation in which an operative uses romantic, sexual or emotional relationships to manipulate a target into disclosing sensitive information, providing access or becoming vulnerable to blackmail. Intelligence services may use these relationships to recruit individuals, extract classified information or obtain compromising material, commonly known as kompromat.
Traditionally, honeytrapping required intelligence operatives to establish physical contact and cultivate relationships with selected targets. Digital communication has expanded these opportunities. Social media, professional networking platforms and messaging applications now allow hostile actors to approach potential targets remotely, construct convincing identities and maintain relationships across geographical boundaries. Modern honeytrapping can also intersect with cyber-espionage. An operative may use a fabricated online identity to establish trust before introducing malicious links, attachments or other methods of compromising a target’s device or credentials. In such operations, psychological manipulation can become the entry point for a broader intelligence-gathering effort.
Open-Source Intelligence (OSINT) further supports this process. Intelligence actors can examine publicly available information to understand a target’s professional background, interests, social connections and online activities. They can use these details to make their approaches appear credible and relevant. The implications extend beyond military establishments to government institutions, defence contractors and strategically important technology companies. The reported allegations surrounding NVIDIA CEO Jensen Huang illustrate the growing attention surrounding potential intelligence targeting of senior corporate figures in strategically sensitive industries.
Although technology has transformed how intelligence actors approach their targets, the underlying principle remains familiar: exploit human relationships and vulnerabilities to obtain information, influence behaviour or compromise an individual.
Historical Evolution: From Physical Seduction to Digital Manipulation
Honeytrapping predates the digital age by decades. Intelligence agencies have historically exploited romantic relationships, sexual encounters and emotional attachments to manipulate individuals with access to sensitive information. These operations allowed intelligence services to obtain classified material, recruit potential sources or create compromising evidence for blackmail.
During the Second World War, Allied governments recognised how personal relationships and careless conversations could expose military secrets. Their security campaigns warned servicemen against discussing sensitive information with strangers and encouraged them to maintain operational secrecy. Although these campaigns did not constitute formal honeytrap operations, they demonstrated the importance of protecting information from social and personal manipulation.
During the Cold War, intelligence agencies, particularly the Soviet KGB, developed more systematic methods of exploiting personal relationships. Western accounts of Soviet intelligence frequently associate female operatives with the term Swallows (Russian: Lastochki) and male operatives with Ravens (Russian: Vorony).
- Swallows (Lastochki). These were female operatives—often recruited from acting, modeling, or student circles—who targeted male diplomats, military officers, and journalists. The term simply referred to the bird, though it later gained double-entendre associations in Western pop culture.
- Ravens (Vorony). These were male counterparts used to seduce either female targets or homosexual men. Because homosexuality was criminalized and heavily stigmatized in Western nations during the Cold War, KGB officers frequently used Ravens to gather blackmail material against gay diplomats and clerks.
- Primary Objectives. Rather than relying exclusively on conversations to extract secrets, intelligence operatives often sought to obtain kompromat (compromising material). They could use photographs, recordings or other evidence of intimate encounters to pressure targets into cooperating. Some operations also relied on long-term emotional relationships to establish trust and recruit willing intelligence sources.
Two historical cases illustrate these methods:
John Vassall (1954–1962): The KGB exploited Vassall’s homosexuality, which British law criminalised at the time. Soviet operatives arranged a compromising sexual encounter, photographed him and later used the images to blackmail him. Vassall subsequently supplied classified British naval documents to the Soviet Union for several years.
Clayton Lonetree (1985–1986): While serving as a US Marine security guard at the American Embassy in Moscow, Lonetree developed a relationship with Soviet embassy employee Violetta Sanni. She introduced him to a KGB officer known as Uncle Sasha, who gradually recruited him into espionage. Lonetree subsequently disclosed sensitive embassy information and the identities of American intelligence personnel.
These cases demonstrate how intelligence agencies used different approaches to exploit personal relationships. The KGB used compromising photographs to blackmail Vassall, while it used Lonetree’s personal relationship to establish contact with a potential intelligence source. For decades, such operations required physical access, carefully constructed identities and sustained personal interaction. The expansion of the internet and social media has fundamentally changed how intelligence operatives approach potential targets.
Today, fabricated online identities allow intelligence actors to establish contact without meeting their targets physically. They can use social media, professional networking platforms and messaging applications to build relationships, exploit professional interests and obtain information. Social engineering further enables them to manipulate trust and persuade individuals to disclose sensitive details or provide access to digital systems.
This evolution has also brought traditional human intelligence (HUMINT) closer to cyber-espionage. An operation that begins with an online relationship can progress to credential theft, malicious attachments, unauthorised system access or blackmail. In some cases, an operative may use the relationship itself to facilitate a broader cyber-espionage operation. The delivery mechanism has changed, but the fundamental objective remains the same: exploit human trust and vulnerability to gain an intelligence advantage.
Pakistani Intelligence Operations Against Indian Targets
Indian security agencies have repeatedly exposed attempts by Pakistan’s Inter-Services Intelligence (ISI) and Pakistan-based Intelligence Operatives (PIOs) to exploit social media and messaging platforms to target Indian military personnel, defence scientists and individuals associated with sensitive government establishments.
Platforms such as Facebook, Instagram, WhatsApp and Snapchat provide opportunities to establish contact, cultivate relationships and extract information. Investigations have also exposed networks that procure Indian SIM cards and share their activation One-Time Passwords (OTPs) with Pakistani handlers.
The Indian SIM Card and OTP Network
Indian investigations have exposed networks in which local intermediaries supplied Indian SIM cards and WhatsApp activation OTPs to Pakistan-based intelligence operatives. These compromised numbers allowed handlers to operate Indian WhatsApp accounts from across the border and approach Indian defence personnel through fabricated identities.
The National Investigation Agency (NIA) documented one such network in its investigation into a Pakistan-led espionage conspiracy. According to its April 2022 charge sheet, Altaf hussen Ganchibhai activated seven Indian SIM cards and shared their WhatsApp activation OTPs with Pakistani handlers. The SIM cards belonged to Indian fishermen whose phones and SIM cards Pakistani maritime authorities had seized at sea in 2020.
In January 2026, an NIA special court convicted Ganchibhai after he pleaded guilty. The court sentenced him to five-and-a-half years of imprisonment. The NIA established that Pakistani Intelligence Operatives (PIOs) subsequently used the compromised Indian WhatsApp numbers to approach defence personnel under fabricated identities and solicit sensitive information.
Investigators also uncovered similar activities involving intermediaries in Bihar. In a January 2025 judgment concerning Zafar Abbas, the Delhi High Court examined NIA allegations that Abbas shared a WhatsApp activation OTP with a Pakistan-based Lashkar-e-Taiba operative identified as Hyder. Investigators traced the relevant SIM card to Gopalganj, Bihar, where the OTP was received and the WhatsApp account was activated. The court also examined allegations that intermediaries Rambhavan Prasad and Chandan Mahto had procured SIM cards using other individuals’ identity documents.
Punjab and Haryana also emerged in investigations into networks supplying Indian SIM cards to Pakistani handlers. Handlers obatain Indian SIM cards and activation OTPs through local intermediaries, sometimes offering visa assistance or financial incentives in exchange.
In a separate investigation, Delhi Police arrested brothers Haseen and Kasim from Rajasthan’s Deeg in May 2025. Police alleged that they supplied Indian SIM cards and WhatsApp activation OTPs to Pakistani intelligence operatives. One of the supplied numbers allegedly supported an attempt to honeytrap a senior DRDO official.
These investigations reveal an important logistical dimension of digital espionage: Pakistan-based handlers do not necessarily need to obtain Indian mobile connections themselves. Local intermediaries can provide SIM cards, activation credentials and other logistical support, allowing handlers to operate Indian digital identities remotely.
The compromised accounts can then facilitate contact with Indian military personnel, entry into WhatsApp groups and attempts to obtain sensitive defence-related information.
How the Digital Honeytrap Develops
Investigative reports and Indian security agencies’ accounts reveal several recurring stages in these operations:

Not every operation follows this sequence. Some handlers pursue information or access without sexual blackmail, while others use financial inducements or professional deception.
Recent Espionage and Honeytrapping Cases (2026)
1. Jensen Huang: Corporate Leadership and Alleged Chinese Intelligence Targeting (November 2026)
The controversy surrounding Jensen Huang, CEO of NVIDIA, has brought corporate espionage and alleged intelligence targeting into the discussion.
According to reports published in November 2026, US authorities examined whether Alice Huang, a former executive associated with Singapore-based Megaspeed International, had links to Chinese intelligence. Reports alleged that she maintained a personal relationship with Jensen Huang and may have used that relationship as part of an intelligence operation.
Megaspeed had also attracted scrutiny over allegations that it helped China obtain advanced AI chips restricted under US export controls. This brought the company’s activities into the broader debate surrounding technology transfers and strategic competition between Washington and Beijing.
Following the reports, NVIDIA’s independent directors initiated an investigation into whether foreign intelligence actors had targeted its chief executive. The company stated that it had no reason to believe anyone had compromised its national-security interests or confidential corporate information. Huang resigned on 12 November 2026 following reports of three extramarital relationships. One involved Alice Huang, a Chinese businesswoman whom US intelligence reportedly suspected of having links to Chinese intelligence. The other two reportedly involved NVIDIA employees, including a senior executive. The allegations prompted an independent investigation by NVIDIA’s board and scrutiny from US authorities.
2. Indian Air Force Wing Commander: Sexual Kompromat and Classified Information (2026)
A major Indian espionage investigation in 2026 involved an Indian Air Force Wing Commander accused of sharing classified operational information with a suspected Pakistani Intelligence Operative (PIO).
According to the Delhi Police chargesheet reported on 13 November, the officer communicated with a woman through WhatsApp between 12 January and 1 April 2026. The woman allegedly presented herself as someone experiencing personal difficulties, including depression and marital separation. Their conversations gradually became personal and eventually involved sexually explicit exchanges.
Police alleged that the suspected operative exploited the relationship to obtain sensitive military information. According to the chargesheet, the officer exchanged nude photographs with the woman and subsequently shared classified material, including pages from a secret war plan.
Investigators alleged that he disclosed:
- Information about fighter aircraft deployments and movements.
- Details concerning a specialised drone unit and its organisational structure.
- Drone trials, endurance and targeting capabilities.
- Military deployment locations and sensitive installation coordinates.
- Information about military exercises and operational preparations.
The investigation also uncovered an alleged cyber-espionage component. Police claimed that the operative sent malicious applications and persuaded the Wing Commander to install spyware on the devices of five subordinates. Investigators suspected that these applications could provide access to sensitive information and communications.
The chargesheet recorded 3,008 text messages, 65 images, 42 voice calls, four video calls and six URLs exchanged between the officer and the suspected operative.
3. Operation Firewall 2026: Honeytrapping of Naval Personnel in Visakhapatnam
In October 2026, Andhra Pradesh Police and naval intelligence uncovered an alleged espionage network targeting civilians and Indian Navy personnel associated with the Visakhapatnam naval establishment. Investigators identified two suspected Pakistani intelligence personas, reportedly operating under the names Joshita Pall and Anvi Mehta.
According to the investigation, one operative posed as an employee of a shipping company in Mumbai and approached Annam Sai Varaprasad, a contractual driver who transported naval officers. She initially contacted him through social media and gradually asked about his personal life, employment, salary and professional responsibilities. Investigators alleged that she subsequently introduced sexually explicit conversations and promised to visit Visakhapatnam.
After establishing contact, she allegedly pressured Varaprasad to disclose information about the naval officers he transported. She later threatened to report him to his employers and involve him in legal trouble unless he continued cooperating.
Investigators also identified another suspected target, Pradeep Mukherjee, a 31-year-old Navy sailor. A second Pakistani operative allegedly approached him through a fabricated identity, posing as a medical professional. Their conversations reportedly involved sexually explicit exchanges, followed by threats and demands for information. The investigation uncovered an additional SIM-card and OTP component. Police alleged that Mukherjee shared WhatsApp activation OTPs with Pakistani operatives, allowing them to activate additional Indian WhatsApp accounts.
Investigators claimed that handlers subsequently used these accounts to approach multiple individuals across several states, including naval personnel and defence-linked employees. On 1 October 2026, authorities conducted coordinated . The operation involved Andhra Pradesh Counter Intelligence, naval intelligence and police teams from several states. Investigators identified 18 suspects, including 13 naval personnel, and seized electronic devices and documents.
The Emerging Pattern
These investigations reveal several recurring features of contemporary intelligence targeting:
- Fabricated identities: Operatives approach potential targets through false personal and professional profiles.
- OSINT-based profiling: Publicly available information helps identify individuals, their professional affiliations and potential vulnerabilities.
- Relationship cultivation: Handlers develop personal or emotional connections before introducing requests for information.
- Sexual kompromat: Intimate photographs, videos and conversations can provide material for blackmail.
- SIM-card facilitation: Local intermediaries supply Indian mobile numbers and WhatsApp activation OTPs.
- Intelligence elicitation: Handlers gradually shift conversations towards military installations, personnel, equipment and operational activities.
- Cyber-espionage: Malicious applications and spyware can extend an operation beyond personal communication.
The cases also demonstrate that honeytrapping does not always follow a single pattern. Some operations rely on sexual blackmail, others use emotional manipulation or financial incentives, while certain networks combine these approaches with cyber capabilities.
The central objective remains the same: exploit personal trust and human vulnerabilities to obtain information, access or influence that an intelligence service could not easily acquire through conventional collection methods.
Conclusion: The Human Vulnerability Behind Digital Espionage
The evolution of the honeytrap shows how intelligence operations have adapted to technology while continuing to exploit human vulnerability. What once required physical proximity and carefully cultivated relationships can now begin with a single message on social media.
The resignation of former NVIDIA CEO Jensen Huang following reports of three extramarital relationships illustrates the potential intersection of personal relationships, corporate interests and national security. One relationship involved Alice Huang, a Chinese businesswoman suspected by US intelligence of having links to Chinese intelligence.
In India, the reported 2026 IAF Wing Commander case raises another important question. According to the chargesheet, investigators identified 3,008 messages, 42 voice calls and four video calls, all conducted through WhatsApp. Why did the officer never question the absence of conventional cellular calls? If someone regularly communicates through WhatsApp using an Indian number but consistently avoids ordinary phone calls, that discrepancy deserves scrutiny Military personnel must therefore treat unfamiliar online relationships with caution, verify identities through independent channels, protect personal and official information, and report suspicious approaches to their security authorities.
Ultimately, the modern honeytrap is not limited to sexual attraction. It exploits trust, loneliness, ambition and emotional vulnerability. Technology has changed the method, but the objective remains the same: turning a personal relationship into access, influence or leverage.


