Defense
Documenting Transnational Repression: Preserving Evidence Without Expanding Risk
A safety-first method for victims, community groups, and media documenting threats, harassment, coerced return, and family pressure.
Contents
Four Steps For Safe Documentation
Protect people first, then organize evidence.
Evidence Types
Different evidence needs different protection.
| Evidence | Record | Protect |
|---|---|---|
| Threat call | Time, number, summary | Avoid exposing unrelated owner |
| Group harassment | Screenshots and links | Mask unrelated members |
| Family questioning | Timeline and account | Protect family location |
| Platform report | Notice and account status | Keep appeal record |
A US resident refused to return to China, and the harassment continued for five years
A 2025 US Justice Department sentencing record describes Quanzhong An joining an operation to force a US resident back to China. Beginning in 2017, An went to the home of the target's adult son to locate him. The next year, he sent his daughter and two Chinese government officials to the son's home. He continued meeting the son and carrying threats from the Chinese government. According to the Justice Department, An warned that PRC officials would keep bothering the son and make his daily life uncomfortable if he failed to persuade his father to return. [1]
The harassment continued until An's arrest in 2022. He pleaded guilty in 2024 and received a 20-month prison sentence in 2025, along with restitution, a fine, and other financial penalties. The conduct addressed by the court occurred in the United States. The case record connected dates, visitors, threatening language, duration, and the identity of the defendant.
That is why documentation matters in a transnational repression case. One unfamiliar visit can be dismissed as a misunderstanding. One vague message can be framed as a personal dispute. A continuous timeline can show who approached the target, what they demanded, how they invoked the Chinese government, which relatives experienced pressure, and whether threats escalated after speech abroad or a refusal to cooperate.
The CCP uses ambiguity and fear to suppress criticism overseas. Victims need material they can provide to police, counsel, a school, an employer, or a reporter without exposing relatives in China or an address abroad. Documentation should first reduce danger and preserve facts.
Preserve the original state after the first threat
Write down the date, time zone, platform, account, number, and exact language as soon as possible. If an acquaintance relayed the threat, record that person's name, the time of contact, the language used, and what they are willing to confirm. When witnesses were present, ask them to write separate accounts before group discussion changes their memories into one shared version.
A screenshot should include the account name, time, and surrounding context. Preserve the complete chat export, voicemail, original email, call log, event registration, or door camera footage instead of keeping one cropped sentence. Web material may disappear. Save the URL, page title, capture time, and a local copy.
Keep originals unchanged and work from copies. Drawing on an original image or repeatedly exporting it can remove metadata and weaken verification. Use simple file names such as "2026-08-15-call-01." Maintain an index stating where each file came from, who obtained it, when it was copied, and whether it was shared.
Call-recording law varies by jurisdiction. Before recording a call or in-person conversation, consult a local lawyer or trusted law enforcement contact about the applicable rule. Evidence collection should not create a new legal risk for the victim.
A timeline should separate direct knowledge, reports, and inference
Each entry should answer four questions: what happened, who supplied the information, where the supporting material is stored, and what the target did next. Put directly observed facts in their own field. Mark information from a relative or friend as reported testimony. Keep analysis about the responsible institution outside the fact field.
Suppose a family member in China receives a police call two days after an overseas event. Those are two separately verifiable events. The timing supports a possible relationship. Timing alone does not identify the person who reported the event or establish which agency issued an order. Maintaining this distinction makes the file more credible and protects uninvolved people from a false accusation.
Give each incident a number and record any connection with earlier events:
- An overseas speech, protest, article, or organizing activity.
- An unfamiliar account following, messaging, probing, or requesting personal information.
- Police questioning, a warning call, workplace pressure, or a document restriction affecting relatives in China.
- A message demanding deletion, an end to activity, a meeting, or a return to China.
- Platform reports, a comment attack, a complaint to a school, employer pressure, or physical surveillance.
This sequence is a recording tool. It does not assume that every case contains every stage. Conclusions should end where the facts end.
Separate the complete evidence store from material intended for release
A complete file may contain an address, document number, phone number, family name, immigration status, medical information, and nonpublic travel. Once collected in one place, this material becomes a valuable target. Store it in a password-protected location with multifactor authentication, separate from daily social accounts. Limit access to named people and retain a log of downloads and transfers.
Use a redacted copy for public release. Mask home addresses, identification numbers, information about minors, the location of relatives in China, and unrelated group members. Make a new copy for redaction while preserving the original. A reporter may inspect complete material under confidentiality without receiving a file that can circulate further.
Keep backups in at least two locations, with one independent of the threatened person's phone. A stolen account, seized device, or damaged handset should not destroy the entire record. Put expiration dates and named recipients on shared links, then revoke access after use.
Family pressure requires separate protection
Freedom House research on Chinese transnational repression records police and local officials using relatives in China to carry pressure to people abroad. Authorities may force a family member to call and discourage advocacy. Relatives can also face threats affecting work, travel, or physical liberty. [3][6]
The relative should decide which information may be preserved, who can receive it, and when it can become public. An overseas activist trying to prove the threat can accidentally publish a relative's name, employer, or city, helping the coercing agency locate and isolate them. If relatives ask to stop contact or delay publication, safety takes priority.
When a call shows signs of coercion, record the date, changes in wording, people audible in the background, and any request made. Do not push relatives to answer questions that they cannot address safely. Preserve the timing between overseas speech and family pressure for a lawyer or law enforcement agency to assess.
Online attacks and community exclusion require evidence of coordination
Transnational repression may involve threats and surveillance. It can also use platform reporting, stigmatizing labels, disruption of events, and pressure through community relationships. CECC reports discuss several forms of pressure created by CCP transnational repression and malign influence abroad. Freedom House research on Beijing's global media influence documents how pressure on relatives in China drives self-censorship by reporters overseas. [4][5]
When documenting an online attack, move beyond a count of insults. Preserve the first posting time, repeated wording, account creation dates, shared images or links, report notices, and the platform response. If somebody publishes an address, phone number, or family information, request emergency removal and preserve the notice before deciding how much of the post to disclose.
A community organization should name one security contact to receive material, sparing a victim from repeated retelling. An event organizer can retain unusual registrations, photographs of surveillance, seating information, and a security report. It should not drop an unverified face into a public chat and crowdsource an identification. A false match harms an innocent person and weakens the real case.
The level of danger determines where to report
Call local emergency services and leave predictable routes when there is stalking, entry into a home, a threat of violence, kidnapping risk, or a suspected weapon. Continuing phone and online harassment can be reported to platform security teams, schools, employers, lawyers, and local police. A person facing immigration concerns or possible coerced return should seek counsel familiar with asylum, extradition, and national security matters early.
The FBI classifies stalking, threats, coercion, and pressure against family members by a foreign government as forms of transnational repression. It advises people in the United States to preserve screenshots, emails, text messages, and identifiers that could help an investigation. US-based victims can use the FBI's public reporting channels. [2] People elsewhere should use the formal channels of local police and security agencies rather than treating a US contact as a universal route.
The first report can use a one-page summary: the identity of the target, the main incidents, any current physical danger, what the suspected coercer demands, and where the evidence is stored. Attach a separately numbered timeline and exhibits. This lets the recipient triage the threat without scattering sensitive files through ordinary email.
If an agency treats the matter as an ordinary community dispute, explain the relationship among foreign government contact, threats to relatives, demands for return, and political activity. Request a report number. Use that number for each later submission so the record remains connected.
Reporting should leave the victim in control of disclosure
Journalists can verify timelines, accounts, court records, and statements from several witnesses. They should not reveal a relative's location or unpublished threat details merely to make a story more dramatic. Before publication, confirm whether the victim consents to each use of a name, photograph, city, workplace, family detail, and screenshot.
Anonymity alone may provide little protection. A profession, school, event date, and family relationship can identify somebody when combined. Perform a reverse identification check before publication. Assume the coercing party already holds old personal records, then remove details that complete the match.
Media also need to distinguish an indictment allegation, a court finding, and a research report. The Quanzhong An case includes a guilty plea and sentence, so reporting can state the result. An incident still under investigation or supported by one victim's account needs an accurate evidence label. Sharp criticism grows from clear facts. Exaggerating an unproved detail weakens it.
Documentation does not replace a safety plan
A complete file cannot stop the next approach on its own. A victim may also need to vary routines, inspect account recovery settings, notify a trusted contact, establish an emergency signal with event organizers, and decide what happens if a relative loses contact or an unfamiliar person comes to the door. Lawyers, digital security specialists, and law enforcement should assess high-risk cases together.
The CCP treats relatives, community ties, and identity records as leverage against critics abroad. Documentation can reverse part of that advantage. It gives each threat a date, preserves connections among people and accounts, and places every escalation in one evidentiary sequence while reducing the number of people and addresses exposed in public.
Transnational repression tries to push victims toward silence or uncontrolled disclosure. Safe documentation takes a different course. It protects people and makes it harder for the CCP's cross-border intimidation to pass as a private disagreement.
Sources
- Operation Fox Hunt Repatriation Campaign Leader Sentenced[1]
- FBI overview of transnational repression[2]
- Freedom House annual tracking of transnational repression[3]
- CECC 2025 report on PRC transnational repression and malign influence[4]
- Freedom House report on Beijing's global media influence[5]
Sources
Operation Fox Hunt Repatriation Campaign Leader Sentencedprimary-recordUnchecked
FBI overview of transnational repressionLive
Freedom House annual tracking of transnational repressionLive
CECC 2025 report on PRC transnational repression and malign influenceLive
Freedom House report on Beijing's global media influenceLive
CECC report on PRC transnational repression and malign influenceLive