Russian security services are increasingly recruiting Ukrainians to carry out sabotage, terrorist attacks, and killings, with police reporting a sharp rise in attacks linked to such recruitment since 2024, according to independent Ukrainian outlet Babel.

Since the start of 2026, Ukraine’s National Police and Security Service have registered 31 terrorist attacks, 80% of which have been solved, while another 14 were prevented during preparation.

Authorities have also registered 11 cases of military personnel being poisoned that are being investigated for links to Russian recruitment.

From simple tasks to terrorism

Andrii Niebytov, deputy head of the National Police and chief of criminal police, said Russian recruitment became systematic in early 2024, Babel reported.

Russian handlers typically approach people through Telegram channels and chats where users seek work, easy money, or drugs. The first assignment may appear harmless: photographing a location, passing information, moving a package, or delivering an item.

The tasks can then escalate into property damage, arson, terrorist attacks, and killings. Police say handlers can gradually involve recruits in more serious crimes before using threats or blackmail to keep them under control.

The increase is reflected in police figures. Russian operatives used Ukrainian recruits to carry out nine terrorist attacks in 2024, according to data cited by Babel. The figure rose to 61 in 2025, including 27 attacks that police stopped during preparation. Authorities solved 52 terrorist cases that year.

Military personnel targeted through poisoning

One increasingly dangerous part of the recruitment campaign involves attempts to target Ukrainian service members.

Police have registered 11 poisoning cases since the beginning of 2026 in which investigators are examining or have established links to Russian recruitment, Babel reported.

In some cases, Russian handlers have used young women to establish contact with soldiers, arrange meetings, or deliver poisoned items.

In late July, police detained a 20-year-old woman in Poltava who is suspected of poisoning two soldiers with drugs allegedly provided to her by mail.

In Rivne, investigators are examining the death of a soldier allegedly poisoned by a minor girl with a drug mixed with alcohol. The Russian handler reportedly installed tracking software on the girl’s phone and remotely monitored her actions.

A toolkit built around vulnerability

Russian operatives use different entry points depending on the target. Some recruits are drawn in by promises of easy money or drugs, while others are manipulated through personal relationships or threatened with supposed criminal prosecution.

One scheme involves fraudulent call centers operating in Russian-occupied Ukrainian territories. Callers impersonate Security Service of Ukraine officials and accuse targets of offenses such as buying Russian-made goods or financing Russia.

Police are investigating 449 fraud cases involving this scheme. But according to Babel, the same tactic is now also being used for recruitment.

After intimidating targets, callers send fake summonses, notices of suspicion, or other documents through messaging apps. They then offer to help the person avoid prosecution in exchange for carrying out criminal assignments.

Explore further

Ukraine arrests two alleged Russian agents in Kyiv accused of activating Starlink terminals to support Russian missile and drone strikes

Children used as disposable operatives

Russian handlers have also targeted minors, who can be easier to manipulate and may be used as intermediaries or perpetrators.

The National Police said 260 children have independently contacted authorities after being approached by Russian recruiters, according to Babel. Their reports helped prevent terrorist attacks in which minors were allegedly intended to be used as perpetrators.

Police say Russian intelligence services are constantly changing their methods, while the basic pattern remains consistent: identify a vulnerability, offer or impose an initial task, and gradually draw the recruit into more serious criminal activity.

Ukrainian authorities are urging people approached with suspicious offers or assignments to stop contact and report the recruitment attempt immediately.

A former deputy mayor for Kharkiv is facing multiple charges related to creating and leading a scheme that allegedly embezzled 5.4 million hryvnias ($130,000) of budget funds allocated for fortifications, law enforcement agencies announced on June 28.

Ukraine's military as well as public officials has seen several corruption scandals since the start of Russia's full-scale war, related to illicit enrichment, money laundering, bribery, and misconduct of the command.

A total of four people, including two company heads and two entrepreneurs, were arrested alongside the former official, the National Police said.

The scheme allegedly involved a shell company procuring purchased materials for fortifications at prices over 30% above market value.

While authorities did not name the former official, Ukrainska Pravda reported, citing law enforcement sources, that the suspect in question is Andrii Rudenko, Kharkiv's Deputy Mayor for Housing and Communal Services between 2015 and 2024.

Authorities did not publicly release the identities of the remaining suspects.

The five suspects are currently facing charges under 17 articles of Ukraine's Criminal Code, with motions filed to impose pre-trial detention without bail.

It was not immediately clear as to the maximum sentence the suspects may receive if found guilty, however, Ukraine's Prosecutor General Ruslan Kravchenko said that he will seek for "stolen budget funds must be fully returned to the state."

Law enforcement agents have previously arrested Kharkiv officials with corruption related charges.

In April, authorities charged a total of eight individuals, including local officials and entrepreneurs, accused of colluding with contractors to supply firewood to the military at prices significantly above market value. Several officials and entrepreneurs of housing and utilities departments in several regions, including Kharkiv, were allegedly implicated.

Ukrainian drone strike on Crimea air base destroys 3 Russian helicopters, SBU claims

The attack destroyed Mi-8, Mi-26 and Mi-28 attack helicopters, and a Pantsyr-S1 self-propelled anti-aircraft missile and gun system, the Security Service of Ukraine told the Kyiv Independent.

The Kyiv IndependentKateryna Denisova