From “easy money” to murder: Russia escalates recruitment of Ukrainians for terrorist attacks inside Ukraine, police warn

Russian security services are increasingly recruiting Ukrainians to carry out sabotage, terrorist attacks, and killings, with police reporting a sharp rise in attacks linked to such recruitment since 2024, according to independent Ukrainian outlet Babel.

Since the start of 2026, Ukraine’s National Police and Security Service have registered 31 terrorist attacks, 80% of which have been solved, while another 14 were prevented during preparation.

Authorities have also registered 11 cases of military personnel being poisoned that are being investigated for links to Russian recruitment.

From simple tasks to terrorism

Andrii Niebytov, deputy head of the National Police and chief of criminal police, said Russian recruitment became systematic in early 2024, Babel reported.

Russian handlers typically approach people through Telegram channels and chats where users seek work, easy money, or drugs. The first assignment may appear harmless: photographing a location, passing information, moving a package, or delivering an item.

The tasks can then escalate into property damage, arson, terrorist attacks, and killings. Police say handlers can gradually involve recruits in more serious crimes before using threats or blackmail to keep them under control.

The increase is reflected in police figures. Russian operatives used Ukrainian recruits to carry out nine terrorist attacks in 2024, according to data cited by Babel. The figure rose to 61 in 2025, including 27 attacks that police stopped during preparation. Authorities solved 52 terrorist cases that year.

Military personnel targeted through poisoning

One increasingly dangerous part of the recruitment campaign involves attempts to target Ukrainian service members.

Police have registered 11 poisoning cases since the beginning of 2026 in which investigators are examining or have established links to Russian recruitment, Babel reported.

In some cases, Russian handlers have used young women to establish contact with soldiers, arrange meetings, or deliver poisoned items.

In late July, police detained a 20-year-old woman in Poltava who is suspected of poisoning two soldiers with drugs allegedly provided to her by mail.

In Rivne, investigators are examining the death of a soldier allegedly poisoned by a minor girl with a drug mixed with alcohol. The Russian handler reportedly installed tracking software on the girl’s phone and remotely monitored her actions.

A toolkit built around vulnerability

Russian operatives use different entry points depending on the target. Some recruits are drawn in by promises of easy money or drugs, while others are manipulated through personal relationships or threatened with supposed criminal prosecution.

One scheme involves fraudulent call centers operating in Russian-occupied Ukrainian territories. Callers impersonate Security Service of Ukraine officials and accuse targets of offenses such as buying Russian-made goods or financing Russia.

Police are investigating 449 fraud cases involving this scheme. But according to Babel, the same tactic is now also being used for recruitment.

After intimidating targets, callers send fake summonses, notices of suspicion, or other documents through messaging apps. They then offer to help the person avoid prosecution in exchange for carrying out criminal assignments.

Explore further

Ukraine arrests two alleged Russian agents in Kyiv accused of activating Starlink terminals to support Russian missile and drone strikes

Children used as disposable operatives

Russian handlers have also targeted minors, who can be easier to manipulate and may be used as intermediaries or perpetrators.

The National Police said 260 children have independently contacted authorities after being approached by Russian recruiters, according to Babel. Their reports helped prevent terrorist attacks in which minors were allegedly intended to be used as perpetrators.

Police say Russian intelligence services are constantly changing their methods, while the basic pattern remains consistent: identify a vulnerability, offer or impose an initial task, and gradually draw the recruit into more serious criminal activity.

Ukrainian authorities are urging people approached with suspicious offers or assignments to stop contact and report the recruitment attempt immediately.