NBI arrests Chinese national and two Filipinos for illegal surveillance and espionage

DAVAO CITY – The National Bureau of Investigation (NBI) has arrested a Chinese national and two Filipinos for allegedly engaging in illegal surveillance and espionage activities in the Philippines.

In December 2024, the NBI-Special Task Force (STF) and NBI-Cybercrime Division (CCD) received an intelligence report from the Armed Forces of the Philippines (AFP)-Naval Operatives, indicating that a group of Chinese nationals was conducting unauthorized surveillance operations under the guise of developing autonomous vehicle technology. The group allegedly utilized advanced technologies to gather and transmit sensitive information related to national defense unlawfully.

Acting on this intelligence, NBI operatives conducted a validation process, identifying six individuals associated with the operation: Deng Yuanqing (alias Deng), a software engineer, Two unidentified hardware engineers (currently in China), Wang, a female financier (currently in China) while the two Filipino associates: Ronel Jojo Balundo Besa and Jayson Amado Fernandez.

Further investigation revealed that Deng is affiliated with the PLA University of Science and Technology (PLAUST), a research-oriented university in Nanjing, Jiangsu, China, operated by the People’s Liberation Army (PLA). The group’s financier, Wang, was responsible for procuring a white vehicle, outfitting it with ICT (Information and Communication Technology) equipment designed for Intelligence, Surveillance, and Reconnaissance (ISR) operations.

From December 13, 2024, to January 16, 2025, the vehicle was observed traveling across the National Capital Region (NCR) and major areas in Luzon, conducting detailed mapping and terrain reconnaissance of key locations without authorization from the Philippine government. The information gathered included comprehensive imagery of strategic infrastructures, terrain data, and other classified materials related to national security.

These activities violated Commonwealth Act No. 616, also known as “An Act to Punish Espionage and Other Offenses Against National Security.” Based on these findings, NBI operatives launched an enforcement action on January 17, 2025.

The NBI traced the suspect’s vehicle to Palm Tower in Makati City, where agents found Deng operating the ICT equipment inside the vehicle and Besa, the driver. Fernandez , a Filipino companion.

When questioned about his identity and legal authorization, DENG attempted to conceal a storage device and flee, prompting agents to apprehend all three suspects.

A controlled viewing and onsite forensic search of the seized ICT equipment uncovered sensitive data, including Topographic imagery of key Philippine infrastructures, Mapping of potential target locations, and Active surveillance programs enabling remote access and control.

Forensic analysts also discovered a Chinese-character user account linked to the system, with a Device ID (918 452 619) actively controlling the vehicle’s computer system, cameras, and files remotely over the internet. This constitutes unauthorized disclosure of classified national security information, directly violating Section 2(a) of Commonwealth Act No. 616.

The suspects were informed of their constitutional rights and brought to the NBI main office for booking procedures. They were then presented for inquest proceedings before the Office of the State Prosecutor, Department of Justice, facing charges for:

Violations of Section 1 (a) & (b) of Commonwealth Act No. 616 (Espionage and Unauthorized Disclosure of National Security Information) and Violations of R.A. 10175 (Cybercrime Prevention Act of 2012)

The NBI continues its intensified efforts to protect national security and monitor foreign surveillance activities threatening the country’s sovereignty.