Foreign Contacts Made Through Social Media:
When Online Becomes Reportable
Assess online foreign contacts on the SF-86, separate ongoing reporting from public-post review, and document gaming, chat, and networking relationships.
Updated October 25, 2026
Security Clearance
For SF-86 foreign contacts, social media is a method of contact, not an exemption from disclosure. The questionnaire expressly includes electronic communication. Whether an online relationship belongs on the form depends on the foreign-contact question’s scope and relationship criteria; ongoing reporting duties and investigator review of public posts are separate questions.
Key takeaways
- Evaluate the relationship, including personal ties and obligations, rather than the platform.
- Section 19 expressly includes electronic contact.
- Completing the questionnaire and meeting ongoing reporting duties require separate attention.
- Give the security office known facts and identify missing information without guessing.
How do SF-86 foreign contacts rules apply to social media?
Apply the actual foreign-contact question to the relationship, including its time period and the people it covers. A private message, gaming friendship, or professional connection can be relevant even if you have never met face to face. A public interaction alone does not establish a close or continuing relationship.
The SF-86 published by OPM, revised November 2016, asks in Section 19 about close and/or continuing contact with a foreign national within the last seven years. The question includes relationships involving you, your spouse, a legally recognized civil union or domestic partner, or a cohabitant when the specified bonds of affection, influence, common interests, and/or obligation exist, so a review confined to your own direct messages may miss part of its scope. Read the whole question.
The form expressly lists electronic contact, including email, texting, and chat rooms. You may start talking in a public game, move into a private group, and eventually exchange messages through a professional platform while maintaining the same friendship and the same personal obligations throughout. Keep that history together when describing the contact.
When reviewing close and continuing contact on the SF-86, keep the form open beside your notes. “We only talk online” describes the medium. It does not answer the question about the relationship.
How is public social-media review different from reporting a relationship?
Public-information review concerns what authorized investigators and adjudicators may collect and use. Reporting concerns information you must supply under the form or applicable security instructions. A relationship can be reportable even when the conversations are private, and a public post can be relevant without creating a reportable foreign relationship.
SEAD 5, effective May 2016, addresses collection, use, and retention of publicly available social-media information in personnel-security investigations and adjudications. Under its collection rules, covered individuals are not to be required to provide passwords, log into private accounts, or expose nonpublic social-media information.
Those limits do not convert a private friendship into something you can omit from a required questionnaire. The directive also preserves other legally permissible investigations or inquiries. Use the discussion of social-media disclosure and public-information review to distinguish the collection policy from your own obligations.
A useful way to check your reasoning is to ask separate questions: What does this form request? What must I report through my current security program? What public material might an investigator review? Privacy settings alone do not answer the first questions.
When does a username become a known foreign contact?
A username does not prove citizenship. Record what you actually know about the person and how you learned it. If an ongoing relationship raises a reporting question but identity details are incomplete, describe that uncertainty to the security office rather than inventing citizenship or waiting for a perfect record.
The questionnaire defines a foreign national as someone who is not a U.S. citizen or U.S. national. Living overseas, writing in another language, or displaying a flag does not by itself establish that definition. A person abroad may be a U.S. citizen; a person nearby may be a foreign national.
For example, a gaming partner might tell you their name and citizenship after you have played together for some time. Keep the distinction between their statement and independently verified information clear. You are completing a disclosure, not certifying that you conducted an identity investigation.
The form provides for an unknown name and asks for an explanation. That option supports an accurate account of missing information; it does not excuse omitting a relationship merely because a field is difficult to complete. Ask the sponsoring office how to enter the known details in its system.
Do direct messages and group chats need to be reported?
The message format does not decide the answer. Consider whether exchanges establish a relevant personal relationship, obligation, or exchange of personal information under the applicable instructions. Repeated contact is a reason to examine the facts, while limited or casual public contact has a specific exception in the ongoing-reporting directive.
SEAD 3, effective June 2017, establishes reporting duties for its covered individuals with classified access or sensitive positions. Paragraph F.2.b addresses continuing associations with known foreign nationals involving affection, personal obligation, or intimate contact, and contacts involving the exchange of personal information. It expressly includes relationships maintained through the Internet.
The same passage says limited or casual public contact need not be reported absent another requirement in the directive. Read that qualification together with the reporting language. “Every foreign follower must be listed” and “online-only friends never count” both replace the relationship test with an unsupported absolute.
Your agency’s implementing instructions can add requirements and explain the reporting route. The discussion of SEAD 3 foreign-contact reporting helps distinguish ongoing duties from the questionnaire. Ask your security office which instructions govern you, including if you are entering a cleared contractor’s process.
| Online situation | Facts to examine | Practical next step |
|---|---|---|
| A public comment on a technical post | Limited public interaction or an ongoing relationship? | Check the casual-public-contact exception and any other applicable requirement. |
| Recurring private conversations | Known identity, personal information, affection, or obligations | Describe the relationship to the security office using the applicable instructions. |
| Professional networking | Work-only exchange or a personal relationship developing alongside it? | Check official-duty rules and explain any personal dimension. |
| Gaming friendship | Knowledge of identity, shared personal details, and ongoing ties | Assess the person and relationship rather than the game account. |
| Requests for protected work information | What was requested, by whom, and how | Contact security promptly without continuing the exchange to investigate. |
Is professional networking treated differently from personal obligation?
A professional label does not settle reportability. Determine whether the interaction is part of official duties and whether a separate personal relationship has developed. The questionnaire includes professional or business relationships among its response categories, while ongoing reporting instructions address official-duty contacts separately.
Consider a public discussion about an announced conference. That exchange differs from a recurring private relationship in which someone discusses family problems, seeks financial help, or creates a sense of personal obligation. These examples identify facts to review; they are not automatic findings about eligibility.
Under SEAD 3, agency heads or designees determine requirements for foreign contacts made as part of official duties. If you are unsure whether your networking qualifies, describe the purpose and circumstances to your security office. A shared occupation does not by itself make a personal conversation an official activity.
What about gaming friendships and shared personal information?
Review the person behind the screen name and the relationship you maintain. A shared game can remain a casual public activity, or it can become a setting for ongoing friendship, emotional support, private disclosures, or obligations. The platform does not establish which situation you have.
Ask yourself what you exchange beyond gameplay: real names, family circumstances, private concerns, money, or plans to meet. Explain those facts accurately if the relationship needs review. Avoid treating the number of messages as a substitute for their nature.
A large group chat also may contain a much closer relationship with a particular member. Describe that relationship separately when seeking guidance. Conversely, membership in the same public community does not mean you know every participant personally.
What should you record when identity details are incomplete?
Keep the known identifiers, contact methods, approximate contact dates, frequency, and nature of the relationship. Identify what is unknown and why. Use the form’s response options and the security office’s instructions instead of manufacturing a full name, address, or citizenship from a profile.
SEAD 3’s Appendix A calls for applicable reporting information as available, including identity, citizenship, occupation, relationship, duration, frequency, and current status. The questionnaire has its own fields. Keeping a private factual note can help you answer either request without confusing them.
Use what you know. For example, if a person told you their citizenship in conversation but you know only their account name and have never learned their address, record each of those facts and explain the limits when asking the security office how to complete the disclosure. Ask how to transmit supporting information if requested. Avoid asking the other person for sensitive documents merely to make your own record look complete.
How should you handle suspicious outreach?
If someone seeks protected information, pressures you, or attempts exploitation, contact your security office promptly. Preserve the relevant details and follow its instructions. You do not need to prolong the exchange to test the person’s intent or obtain more identifying information.
SEAD 3 addresses unofficial contact with known or suspected foreign intelligence entities. Its reporting provisions also cover attempted elicitation, exploitation, blackmail, coercion, or enticement to obtain classified information or other information prohibited by law from disclosure. An attempt can matter even when you did not disclose the requested information.
Save the relevant message. Record the account, date, method of contact, request, and current status, including whether the person asked for information, offered compensation, applied pressure, or proposed moving the conversation into a different channel. Describe what happened without trying to establish an intelligence affiliation yourself. Let the responsible security or counterintelligence office decide how to handle the report.
Frequently Asked Questions
Must I list every overseas follower?
A follower list alone does not answer the foreign-contact question. Citizenship, the nature of the relationship, the form’s scope, and your reporting instructions matter. Limited public interaction and an ongoing personal relationship require different analysis.
Does private messaging make a relationship exempt?
No. Privacy controls concern access to content; they do not remove the questionnaire’s electronic-contact language or applicable reporting duties. Describe the relationship using the instructions you receive.
Should I wait until the next questionnaire to report a new relationship?
If ongoing reporting duties apply to you, use that reporting process when required. The questionnaire’s lookback period does not replace those duties. Ask your security office which procedure applies.
What should I do with an uncertain online contact now?
Write down the known identity, contact pattern, and personal ties, marking uncertainty plainly. Take that factual description to your sponsoring security office and ask how it should be handled under your instructions.