Excellence Puts Scottish Universities in MI5’s Spy Sights

Scottish universities have been told to review China research links after MI5 named a Beijing institute as an intelligence front. On 30 September 2026, the Security Service issued a Security Service Espionage Alert on the China General Technology Research Institute, also translated as the China Academy of General Technology.

Tertiary education minister Alyn Smith has now written to campuses to take that warning seriously, while still arguing that academic ties with China matter to Scotland’s research sector. He said the institutions are a target because they are so excellent.

The First Alert MI5 Issued on Its Own

The one-page alert published on 30 September is the first of its kind MI5 has issued independently. It says CGTRI has very strong ties to the Chinese Ministry of State Security, Beijing’s civilian intelligence service, and that those ties had been obfuscated.

MI5 has identified that the primary purpose of CGTRI is to fund academic research that directly improves MSS technical capability for espionage.

Security Service Espionage Alert, 30 September 2026

MI5 says more than 100 UK-linked academics have contributed to projects funded by the ministry via CGTRI, and that some may not have known the institute was paying. The named fields are artificial intelligence, cybersecurity, covert communications systems and steganography, the practice of hiding a message inside an ordinary file or object.

Security minister Dan Jarvis wrote to vice-chancellors across Britain asking them to help staff end arrangements with the institute. He said the alert exposes attempts by Chinese intelligence to covertly benefit from the expertise and research of UK academics, undermining national security and that of allies.

A spokesman for the Chinese Embassy in London called the accusation imaginary and purely fabricated. Isaac Stone Fish, founder of the advisory firm Strategy Risks, called the alert perhaps the most aggressive public announcement from the UK towards China in decades. Administrators at several British universities have since circulated internal emails asking staff to check collaborations. MI5 has not published the names of the more than 100 academics, or the universities they sit in, which leaves compliance teams searching for a list they have not been given.

Excellence Makes Scottish Labs a Target

Every Scottish university head was called to a security-service meeting late in September. Smith then wrote to university leaders and further education institutions after what he called a ramped up awareness of vulnerabilities on campus, including cyber disruption and interference in research networks.

If you’re not doing great science, you’re not being spied on, and we are doing great science.

Alyn Smith, tertiary education minister, speaking after the MI5 briefing

He said the risk is not solely about China but a wider spy threat because “our universities are so excellent”. In the same remarks he described himself as fiercely protective of Scotland’s universities and scientists, and said they are globally significant, so of course they are a target.

That is the bind the letter does not resolve. The qualities that win grants, Chinese postgraduate fees and joint labs are the same qualities a foreign intelligence service would want to harvest. University figures for 2024 already put China as the second most common student domicile at Scottish universities, ahead of Edinburgh and every council area except Glasgow. A Scotland-China education map lists 18 Scottish institutions against 153 Chinese partners.

Former SNP MP Stewart McDonald, who has long argued the point in defence debates, said Beijing understands that large levers of policy and money sit in Edinburgh, Belfast and Cardiff rather than London. “There’s a lot of cracks for the Chinese to get into,” he said, across energy, education and critical technologies.

Ten Universities Took at Least £39.7 Million

None of that money, on the public record, is a confirmed CGTRI contract. It is the ordinary China traffic that makes a hidden funder hard to see. Investigative work by The Ferret, drawing on disclosures for 2020/21 to 2024/25, found ten Scottish universities collectively received at least £39.7 million from Chinese organisations. Of that, £5.5 million came from bodies the investigation linked to the military, human rights abuse or spying, or went to Confucius Institutes.

Edinburgh received more than £11 million in research funding from unnamed Chinese organisations and said a complete list was not feasible. Dundee refused the request. Other universities withheld some figures as commercially sensitive, so the true total could be higher.

NAMED CHINA SUMS ON SCOTTISH CAMPUSES

Wuxi Paike was sanctioned by the US government in December 2020 over military links. Huawei kit is being stripped from UK infrastructure by the end of 2027. Tencent has denied claims it spies for the Chinese state. Universities contacted about the Ferret figures pointed to due diligence, export-control rules and Trusted Research checklists. A public science grant already drew a harder line: International Science Partnerships Fund support allocated by the Scottish Funding Council for 2025-26 shall not be used to benefit China.

Mathieson Had Never Seen a Briefing Like It

Sir Peter Mathieson, principal of the University of Edinburgh and the national-security lead for Universities UK and the Russell Group, attended the briefing in both roles. He said it was very unusual, and the first such session in his five years in the security post.

“I haven’t been shown the evidence on which the warning was based, and I don’t expect to be shown because MI5 doesn’t usually show its evidence,” he said. “But it is a very unusual step, so they were clearly very concerned about this particular institute and very confident that the information they had about it was correct.”

Universities were told that existing links are not an offence under the National Security Act 2023. “But having issued the warning, they said if you are working with this institute or you’re planning to, we would recommend that you take legal advice about your compliance with the National Security Act,” Mathieson said. “So, it was quite a strongly worded and quite a pointed warning.”

He said Edinburgh had no links with CGTRI. St Andrews said it had not. Glasgow did not respond. A Strathclyde spokesman said: “Like other universities in the UK, we are complying with the guidance issued by the UK Government and are reviewing our links with regard to the China Academy of General Technology Research Institute.” How far Scotland is tied to the institute is still not on the public record.

What Continued CGTRI Work Can Now Cost

The legal change is the knowledge test. MI5 has now put CGTRI’s intelligence ties in the public domain and told staff to learn the 2023 Act, especially offences of assisting a foreign intelligence service under section 3 and obtaining a material benefit from one under section 17.

Section 3 catches a person who engages in conduct likely to materially assist a foreign intelligence service in UK-related activities, and who knows, or having regard to other matters known to them ought reasonably to know, that the conduct is likely to do so. Providing information, goods, services or money can count. After 30 September 2026, “I did not know who CGTRI was” is a weaker answer than it was on 29 September.

WHAT THE ALERT TELLS UNIVERSITIES TO DO

• Review now: Immediately check any ongoing or planned collaboration with CGTRI so the ministry derives no further benefit from UK research.
• Trace the money: Establish the ultimate funding source on any research collaboration with Chinese institutions, to ensure CGTRI is not involved.
• Use official advice: When scoping new work, use the Research Collaboration Advice Team and Trusted Research guidance for universities from the National Protective Security Authority.
• Take legal advice: Any institution or person continuing research ultimately funded by CGTRI after the alert should take independent legal advice on sections 3 and 17.

Mathieson has also said the security picture across universities is patchy, and that not every institution has the same sophistication or the same need. The alert assumes a researcher can see through a Chinese partner’s funding stack. The Ferret disclosures show how often that stack is unnamed, commercially withheld, or sitting one remove from a sanctioned firm.

Smith Still Defends Academic Links With China

Smith’s letter, headed MI5 Espionage Alert, The China General Technology Research Institute, tells vice-chancellors the Scottish Government takes the alert seriously and will work with the UK Government, the Scottish Funding Council and the sector on foreign-interference and research-security risks. It points to confidential reporting routes. It also keeps the China door open.

“Strong global relationships, including our academic and research links with China, make an important contribution to Scotland’s education, skills and research sector,” the letter says. “Protecting those relationships means ensuring that international engagement is underpinned by appropriate due diligence, robust risk management and access to the latest security advice.” National security is reserved to Westminster, the letter notes, while universities remain autonomous; Holyrood’s role is assurance and monitoring through the funding council.

That dual track runs beyond campus. First Minister John Swinney has urged UK ministers to reopen a blocked £1.5 billion Ming Yang wind-turbine plant at Ardersier, stopped on unspecified national security grounds. In March 2026 a Scottish Government official told a China-UK business forum in Edinburgh that China is one of Scotland’s most important trading partners and that ministers want more Chinese firms to invest.

THE ELEVEN DAYS THAT CHANGED THE PAPERWORK

1. Late September 2026: MI5 briefs Scottish university heads on CGTRI, the first such session Mathieson has seen in the role.
2. 30 September 2026: MI5 publishes the independent espionage alert and Jarvis writes to vice-chancellors.
3. Early October 2026: Universities begin internal record searches; several British institutions circulate staff emails.
4. 11 October 2026: Smith’s letter reaches Scottish campuses, taking the alert seriously and restating the value of China research links.

Smith asked institutions for reassurance that they have procedures that keep them alive to the risk. He said Scotland is an open, free, liberal society that still has to be realistic about what global significance attracts. The letter concedes the alert may cause particular concern for institutions that are directly affected, and for those managing existing or prospective international partnerships.

Labs that sell themselves as world class will keep drawing partners from China, because that is what world class labs do. The new test is whether a principal investigator can name the last funder in the chain, and whether a vice-chancellor can show that check was done after MI5 put CGTRI in the public domain. Beijing still says the charge is fabricated. The more than 100 names still have not been published.

Disclaimer: This article is news reporting and analysis of a public security alert and related government correspondence. It is not legal advice and does not tell any academic, university or company whether a particular project is lawful. Anyone who thinks they may have a link to CGTRI or another named body should take independent advice from a solicitor qualified in UK national security and higher-education law before acting. Figures and institutional positions are those given by the named sources and may change as reviews continue.