How the channels connect
Professional approach
Preserve the invitation and identify the purported organisation.
Identity and itinerary
Check the intermediary and proposed travel independently.
Digital or physical access
Compare the approach with account activity and related contact.
Can the invitation, intermediary and destination be verified through an independent channel?
These pathways describe methods and investigative questions. They are not a prediction of escalation or a finding about a particular individual. A shared method does not identify an actor.
Methods covered in this profile
Physical threats & violence
Threats of violence, assault or attempted abduction require an assessment of immediate safety alongside investigation of the incident.
What the investigation needs to establish
Threat messages, witness accounts, incident records and relevant footage can help establish what happened and what requires urgent attention.
Personal threat assessment and coordination of appropriate protective support.
Pressure on relatives
Pressure can be applied to someone abroad through relatives who remain in another country, including demands, questioning or threats to employment and property.
What the investigation needs to establish
Record what was communicated, when, by whom and whether demands referred to the person’s activities abroad. Connections need evidence rather than assumption.
A chronology of the pressure, corroboration where possible and a coordinated assessment of the people affected.
Surveillance & tracking
Concerns may involve observation, unwanted approaches or exposure of movements and private information.
What the investigation needs to establish
Assess specific incidents, available records and alternative explanations. An unfamiliar person or vehicle alone does not establish surveillance.
Investigative assessment, fieldwork and technical examination where appropriate.
Coerced return & travel pressure
A demand to return, an unusual invitation or pressure involving a third country may need to be examined in its full personal and legal context.
What the investigation needs to establish
The invitation, correspondence, identities, itinerary and any associated demands are assessed together.
Investigation of the approach and coordination with relevant legal and protective specialists.
Digital intrusion & exposure
Account access, targeted phishing, device concerns or publication of private information may affect both a person and their contacts.
What the investigation needs to establish
Technical findings must distinguish a suspicious message, a targeting attempt and evidence of compromise.
Digital examination, incident reconstruction and coordination of practical security improvements.
Research basis
This country summary draws on TROM State MO Profiles, pages 15–17, and the TROM Operational Matrix, March 2026. Historical examples and reported patterns require case-specific corroboration; the profile is not a live threat bulletin.
Freedom House’s independent transnational repression research ↗