A Kyiv court has sentenced an unemployed man to 15 years in prison with confiscation of his property for carrying out arson attacks on behalf of Russian intelligence, Ukraine's Security Service (SBU) said on 13 August. The man was recruited while looking for "easy money" on Telegram channels and carried out two arson attacks in Kyiv before fleeing to Odesa, the SBU reported.

Russian intelligence increasingly recruits Ukrainians through Telegram for arson and sabotage. It targets people seeking quick money and treats them as disposable operatives, paying small sums for a single task and discarding them once they are caught.

The Russian agent carried out two arson attacks

According to the SBU, the man first set fire to a relay cabinet belonging to a railway signaling system. Russia intended the attack to disrupt freight logistics, including supplies to areas near the front.

The agent later burned a volunteer’s SUV used to deliver humanitarian aid and evacuate civilians from areas affected by Russia’s war. He carried out the attacks at night, using a flammable mixture and filming each incident on his smartphone before sending the footage to his Russian handler.

The SBU arrested him in Odesa in July 2025, where he had attempted to hide after carrying out the attacks. Investigators seized his phone, which contained evidence of his cooperation with Russia.

A court found him guilty on two counts — sabotage committed under martial law, and intentional destruction of property by arson — both carried out as part of a group acting on prior conspiracy. He was sentenced to 15 years in prison with confiscation of his property.

Explore further

From “easy money” to murder: Russia escalates recruitment of Ukrainians for terrorist attacks inside Ukraine, police warn

Easy money, hard time: other Telegram recruits jailed too

The case follows several similar convictions. In a May case, an agent received 15 years for burning a railway relay cabinet near a Dnipro station in an attempt to disrupt frontline logistics. The SBU said the unemployed local, recruited through Telegram, filmed the arson and reported it to his handler, then was caught before he could carry out a planned series of attacks on the city's critical infrastructure.

In June 2026, another agent was sentenced to 15 years for preparing to burn an electrical substation in Kropyvnytskyi.

In July, SBU investigators reported that a GRU agent in Zaporizhzhia received 15 years for preparing explosives for Russian-organized attacks.

Polish Prime Minister Donald Tusk said authorities had detained a Russian citizen recruited by Moscow to kill a man in Warsaw. The target holds US and Ukrainian passports, the Associated Press (AP) reported on 13 August. Tusk said Polish security services stopped the alleged attack “at the last minute.” 

Since 2022, AP has mapped about 200 acts of sabotage, arson, and disruption across Europe that officials have linked to Russia. European governments say the campaign aims to intimidate Ukraine’s supporters and disrupt military aid, while Ukrainian authorities report similar recruitment tactics inside Ukraine.

The suspect was detained on 7 August and remanded for three months, Warsaw police said. Tomasz Siemoniak, the minister overseeing Poland’s intelligence services, said the operation involved US services.

PM Tusk called it the first Russian-ordered attempt of its kind against a US citizen in another NATO country. He said the target was “inconvenient to the Putin regime,” without explaining why.

In their bulletin, Reuters reported that Russia’s Warsaw embassy did not immediately respond to a request for comment. Moscow denies conducting a sabotage campaign in Europe.

Russia has already gone after a German arms CEO and critics of the Kremlin

European authorities had already reported plots against arms-industry figures supplying Ukraine. CNN reported in 2024 that US and German services foiled a plot against Rheinmetall chief Armin Papperger. 

Former Bellingcat investigator Christo Grozev said an intelligence insider told him he was on Russia’s kill list. He also warned Putin critic Garry Kasparov that a Russian agent trained in assassination had infiltrated exile groups to approach him.

Russia has also been accused of targeting Kremlin opponents abroad. In June, Kremlin critic Robert Kuzovkov was shot dead in Poland. Tusk said the killing resembled a political assassination, but Warsaw has not attributed it to Russia.

Russia uses disposable agents, not career spies

The alleged recruitment in Warsaw resembles tactics reported elsewhere in Europe. German investigators identified a former Ukrainian bricklayer and an untrained Romanian woman as the suspected operatives surveilling Stefan Thumann, head of Bavarian drone maker Donaustahl. German intelligence later classified the case as a suspected planned assassination.

Ukrainian authorities have reported similar recruitment at home. The SBU said an FSB-directed foreign pair killed Colonel Ivan Voronych in Kyiv in July 2025. Both suspects later died in a shootout with law enforcement.

Ukrainian police say Russian recruitment can escalate from surveillance and simple deliveries to arson, terrorism, and murder. Since the start of 2026, police and the SBU have registered 31 terrorist attacks and prevented another 14.