DGSI warns of espionage risks from gifts

The French Directorate General for Internal Security (DGSI) has issued a warning to French companies about the risks of espionage and foreign interference linked to gifts from international partners. These gifts, which can include symbolic objects, digital media, lavish invitations, or free innovative equipment, may serve as vectors for compromising information, creating compromising situations, or establishing commercial dependence.

Anomalous gifts found in industrial setting

In one case, a French industrial establishment received symbolic gifts after a visit by a foreign delegation. The objects, which had an abnormal weight, were found to have a "serious anomaly," though the presence of espionage devices was not confirmed. However, the risk of hidden audio or video sensors in decorative objects was proven.

Malware found on USB drives from foreign company

At an international fair, representatives of a French company received USB drives from a foreign company. Upon analysis, two out of five drives were found to contain malware, which posed a threat to the company's computer systems. The company terminated all contact with the foreign counterpart, emphasizing the need for caution with digital media received in professional settings.

Lavish invitations aimed at obtaining confidential info

Another incident involved a foreign representative inviting French employees and managers to dinners and a night at a disco, with a bill of several tens of thousands of euros. The DGSI investigation revealed the intention to obtain confidential information and to compromise invitees with compromising photographs, although no blackmail was detected.

Excessive equipment linked to commercial dependence

A French company received more than double the equipment ordered from a foreign supplier, including expensive innovative equipment. The commercial manager was invited to visit the supplier's headquarters abroad, with all expenses covered. The DGSI warned of the risks of commercial dependence and information capture, leading the company to return the equipment and refuse the visits.

DGSI recommends systematic evaluation of gifts

To counter these threats, the DGSI recommends the establishment of systematic evaluation procedures for gifts. This includes analyzing the profile of the giver, especially if they have state links or significant financial resources. Any invitation to an event must be examined with the security manager to assess the risks.

Security measures for objects and digital media

Received objects must be analyzed quickly to detect any capture devices or malware. Gifts should not be placed in sensitive areas such as meeting rooms or executive offices. Digital media should be analyzed by an IT department before use. If in doubt, it is recommended to dispose of the object. The DGSI can also perform technical analyses if necessary.

DGSI recommends staff awareness and internal policies

The DGSI also recommends regular sensitization of staff to the risks associated with professional gifts. Awareness campaigns based on concrete examples can alert employees to the fact that all employees can be targeted. Managers, buyers, and staff with access to sensitive data or in contact with foreign partners should be particularly vigilant.

Establishing an internal gift charter

The establishment of an internal gift charter, similar to an IT charter, is recommended. It would require the declaration of any free offer from a foreign actor and the inventory of received gifts. This would allow the detection of suspicious patterns and a rapid response to potential threats.

Context of rising economic and technological rivalries

This DGSI interference flash comes in a context of increased economic and technological rivalries. French companies, especially in strategic sectors such as defense or energy, are targets for foreign actors seeking to obtain sensitive information or weaken their competitive position. Interference techniques are evolving, combining physical and digital approaches.

Gifts as effective attack vectors

Gifts are an effective attack vector because they exploit politeness, making refusal delicate. A gift of great value can create an implicit sense of obligation, facilitating requests for information or favors. The DGSI reminds that any suspicious event related to foreign gifts can be reported to its dedicated email address: securite-economique@interieur.gouv.fr.

Balancing vigilance with international business relations

The DGSI recommendations do not aim to hinder international business relations, essential to the French economy. They rather encourage a proportionate vigilance. Offering gifts is common, provided their value remains modest and respects laws against corruption and money laundering. The goal is to develop a security culture to identify risky situations without falling into excessive suspicion.

Expanding vigilance across the French economic fabric

Companies must balance commercial openness and the protection of their intangible assets. The establishment of clear procedures and staff training are the best defenses against interference. The DGSI flash of September 2026 aims to spread an economic security culture, raising awareness among a wide range of actors, beyond large strategic companies. SMEs and ETIs, often less well equipped, are also targets or entry points to larger clients, requiring extended vigilance across the entire French economic fabric.