Wanying Zhang Surveillance Operation and PRC Tradecraft (2025- 2026)

Wanying Zhang

Wanying Zhang, also known as “Heather,” is alleged to have operated as an unregistered agent of the People's Republic of China (PRC), conducting intelligence collection inside the United States under the direction of PRC intelligence personnel. Zhang is a Southern California real-estate agent and describes her principal operational associate as Individual 1, who is working in construction in Los Angeles.[1]

The collection operation centered on the physical surveillance of Lai Ting-yu, the son of Taiwanese President Lai Ching-te. Zhang and Individual 1 traveled from Southern California through Las Vegas to Seattle, rented a vehicle, conducted surveillance outside the target's residence, collected photographs, video, and vehicle-license-plate information, and transmitted the resulting intelligence to a PRC handler. The objective was to acquire information that could provide the PRC with potential coercive leverage against Taiwanese political figures and their families.

Zhang's relationship with PRC intelligence personnel is a result of her academic network at the University of International Relations (UIR) in Beijing, which has an important institutional connection to the PRC Ministry of State Security (MSS). Two PRC officials are identified: PRC Official 1, characterized as an academic spotter and conduit, and PRC Official 2, characterized as the active case officer who provided operational direction.

The operation displayed several indicators of deliberate operational security measures, including tasking in China, compartmentation of responsibilities, short-duration vehicle rental, indirect travel routing, voice communications, ambiguous terminology, and an attempt to move operational imagery through Apple AirDrop rather than conventional messaging channels. However, there were also significant operational shortcomings. Individual 1 transmitted surveillance material over WeChat despite instructions to use AirDrop and subsequently deleted operational photographs, including material in the device's “Recently Deleted” folder.

1. PRC Intelligence Network and Recruitment

Zhang's UIR background is central to understanding the operation. Zhang graduated from UIR in 2014 and maintained contact with a former classmate, designated PRC Official 1, after graduation. In a September 2022 exchange, Zhang asked which “bureau in the ministry” Official 1 worked for. Her use of the Chinese term bu (“ministry/bureau”) and Official 1's failure to reject the premise as evidence that Zhang understood his government affiliation. The network subsequently expanded through Official 1's introduction of Zhang to PRC Official 2, a more senior UIR alumnus. Official 2 assumed the operational role, providing tasking, arranging meetings in China, discussing U.S. targets, and receiving information collected in the United States. The report characterizes this as a classic division between an initial spotter/conduit and an operational case officer/handler.

The operational relationship developed through meetings in China. In June 2025, Official 2 contacted Zhang concerning a “U.S. house.” A subsequent private meeting occurred in Changsha. In July, Zhang indicated that she would go to Seattle and “take care of this thing.” In August, she met Official 2 again in Hangzhou before notifying him that she expected to travel to Seattle. Official 2 responded by thanking her for her “hard work.”

This sequence is important because the operational tasking and handler contact deliberately occurred outside the United States. Beijing, Changsha, and Hangzhou are identified as locations where preliminary tasking, operational briefings, and final deployment arrangements occurred. The report assesses that conducting these meetings in China reduced the exposure of the PRC handler network to U.S. surveillance and intelligence collection

2. Seattle Surveillance Operation

The operational phase began with Zhang and Individual 1 traveling from Southern California to Las Vegas on August 29, 2025. On September 1, they flew from Las Vegas to Seattle aboard Alaska Airlines Flight 629. Zhang used her credit card for the flight, with the payment information associated with her former Larksong, Irvine address.

Upon arrival at Seattle-Tacoma International Airport, Individual 1 rented a black 2025 Nissan Rogue from Hertz at 2:08 p.m. The rental was conducted under Individual 1's name and used his telephone number and credit card. The Hertz documentation reportedly listed an address on Walnut Avenue in Arcadia, California.

At approximately 4:50 p.m., residential security footage captured the Nissan Rogue near the victim's residence. At approximately 6:00 p.m., the target and family arrived home. Zhang and Individual 1 then allegedly conducted surveillance from inside the vehicle.

Individual 1 drove and operated the recording devices while Zhang adopted a low-visibility posture by reclining her passenger seat. This division of responsibilities allowed one individual to concentrate on vehicle operation and image collection while the other maintained communications with the PRC handler. During the surveillance operation, Zhang communicated with PRC Official 2, providing observations about the target, transmitting two vehicle license-plate numbers, and sending a 16-second video of the residence. Washington State DMV records subsequently matched the license plates to vehicles registered to the victim.

The team departed rapidly. The Nissan Rogue was returned to Hertz at approximately 8:42 p.m., less than seven hours after rental. Zhang then checked into the Seattle Airport Marriott, paying approximately $265.25 with her credit card. The pair returned to Los Angeles on September 2. The short operational window and immediate return to California may have been deliberate efforts to minimize the physical footprint of the operation.

3. Exploitation and Evidence Destruction

Following the Seattle operation, Zhang attempted to impose additional communications security procedures. On September 8, she instructed Individual 1 to transfer the Seattle photographs using Apple AirDrop rather than WeChat or text messaging. This is likely an effort to reduce the exposure of operational imagery to cellular and centralized communications systems. Individual 1 nevertheless transmitted a surveillance video through WeChat, creating an apparent tradecraft failure.[2]

On September 11, PRC Official 2 requested additional photographs of the residence and garage. Zhang contacted Individual 1, who reported that he had deleted the photographs, including the files in the device's deleted-items folder. Zhang subsequently provided Official 2 with a verbal

description of the residence, including the presence of two vehicles and a U.S. flag.

4. Counterintelligence Significance

The operation was likely designed to collect actionable physical intelligence on the son of Taiwan’s president. The information collected included the target's residence, vehicles, license plates, exterior characteristics, and other observations concerning the family's physical environment.

The report assesses that this information could support several potential PRC objectives, including:

• coercive leverage against Taiwanese officials;

• physical intimidation;

• transnational repression;

• future human-intelligence targeting; and

• contingency planning during periods of cross-Strait political or military tension.

  
  

Espionage Tradecraft

The Zhang operation displays a mixture of deliberate clandestine tradecraft and a notable execution failure.

Foreign-soil tasking

The most important tradecraft feature was the decision to conduct principal handler meetings and operational briefings in China rather than in the United States. Beijing, Changsha, and Hangzhou/Shanghai were locations associated with tasking, recruitment, briefing, and deployment authorization. This provided physical separation between the PRC handler network and the U.S.-based operation.

Compartmentation and division of labor

The network separated responsibilities between:

• PRC Official 1: spotter/conduit;

• PRC Official 2: Case Officer, active handler;

• Zhang: U.S.-based agent and communications link; and

• Individual 1: driver and imagery collector.

  
  

Communications security

Zhang demonstrated awareness of communications vulnerabilities by directing Individual 1 to use AirDrop rather than WeChat or SMS for transferring sensitive imagery.

The network also relied heavily on voice notes, ambiguous terminology, and emojis. Phrases such as “our thing,” “take care of this thing,” and “some assurance” avoided explicitly describing intelligence activity in written communications.[3]

Short-duration vehicle rental

The Nissan Rogue was rented for less than seven hours despite a longer reservation period. This may be an effort to reduce exposure to license-plate readers, minimize the vehicle's time in the target area, and rapidly sever the physical connection between the surveillance team and the vehicle.

Travel routing

The SNA → LAS → SEA → LAX itinerary created a more complicated travel pattern than a direct Southern California–Seattle trip.

Low-visibility surveillance posture

During the actual collection operation, Individual 1 remained responsible for driving and imagery while Zhang reclined her seat to reduce her visibility from outside the vehicle. This demonstrates basic physical-surveillance awareness and a deliberate division of roles.

Anti-forensics and evidence destruction

The operation also demonstrates an attempt to eliminate digital evidence. Individual 1 allegedly deleted operational photographs and then emptied the device's deleted-items cache. This represented an effort to eliminate recoverable evidence following the collection operation.

The principal weakness was inconsistent tradecraft discipline. Individual 1's transmission of surveillance video through WeChat directly contradicted Zhang's AirDrop instruction. Investigators therefore obtained potentially valuable evidence precisely because field execution did not consistently follow the network's intended security procedures.

Overall assessment: The case demonstrates a small PRC-directed intelligence cell employing a combination of foreign-soil tasking, civilian-agent recruitment, compartmentation, physical surveillance, irregular travel, short-duration vehicle rental, communications-security measures, and post-operation evidence destruction. Its principal vulnerabilities were operational sloppiness, inconsistent COMSEC discipline, and the resulting availability of digital, financial, travel, rental-car, DMV, and residential-security evidence to investigators.

Status: Alleged

Notes:

[1] It is possible that Individual 1 is Fatai Miao.  The government’s criminal complaint states that Individual 1 sold a residential property on Walnut Ave on Sept 11^th, 2026 in Arcadia, CA. Only one property sold in that time frame. Wanying Zhang was the listing agent. The sale was at $4 million. There is also independent corporate-record evidence tying Fatai Miao directly to 435 Walnut Ave. Arcadia, CA. California business-record compilation identifies Jin Yuan Investment LLC (a real estate investment firm) as having its principal/mailing address at 435 Walnut Ave. and lists Fatai Miao as its manager and CEO and Xiaoyong Chen as the Manager.  Miao has had eight businesses tied to that street address including one construction company that closed in 2022.    

[2] China’s MSS often uses Wechat to transmit photos so this may reflect a change in operational tradecraft.

3] MSS often instructs assets to use and then delete voice notes.