Russian online recruitment of intel gatherers across Europe revealed by investigation

The coordinated Russian intelligence gathering operation via Telegram recruits Europe’s Russian-speakers for collecting sensitive military info.
Aftermath of a Russian-backed arson attack on a Ukraine-linked warehouse in East London, March 2024. Photo: X/London Fire Brigade.
Russian online recruitment of intel gatherers across Europe revealed by investigation

A new investigation by Novaya Gazeta Europa has uncovered a Russian intelligence gathering operation that uses a Telegram bot to recruit Russian-speaking residents in Europe to collect information about military facilities and activities in the EU and Ukraine.

These reported activities align with the established pattern of widespread Russian political warfare operations in the EU and Ukraine, including sabotage and espionage, with similar recruitment methods repeatedly observed in past incidents.

According to the investigation, Russian pro-Kremlin Telegram channels have been publishing monthly recruitment calls over the past six months, asking Russian speakers to share information about NATO military objects through a specialized bot. The bot’s “sales pitch” asks Europeans and Ukrainians to transmit information on military-linked facilities, adding, “We need eyes and ears in Ukraine and on the territory of Europe.”

Novaya Gazeta Europa found that while the channels appear anonymous, they traced the distribution of these recruitment messages to the member of the occupation authorities of Crimea, Ksenia Temnik, head of a “legal department” at Crimea’s “military commissariat.” The publication notes that Temnik received her Russian passport in April 2014 following Russia’s annexation of Crimea and has since held various positions in the Crimean administration.

The investigators did not name both occupied Crimea-linked channel and the spy recruitment Telegram bot.

Ukraine’s Security Service often reports that suspected spies and saboteurs were recruited by Russian intelligence through messaging apps, frequently highlighting Telegram chats in the accompanying photos.

Russia’s intelligence gathering

When contacted by the publication’s journalist posing as a potential informant, the bot operators requested:

  • Photos and videos of NATO armed forces
  • Information about military equipment movements
  • Details about Ukrainian specialists’ training locations
  • Detailed maps and guidebooks from European countries
  • Purchase and activation of anonymous SIM cards

The operators, claiming to serve in the Russian Airborne Forces (VDV), expressed particular interest in monitoring the situation along the Belarus border for potential NATO troop concentrations, Novaya Gazeta Europa reported.

The investigation revealed that bot operators provided detailed security guidelines to potential informants, including:

  • Immediate deletion of photographs after transmission
  • Removal of compromising correspondence
  • Maintaining silence about support for Russia
  • Developing cover stories for interest in military objects

Earlier, several Russian spies and saboteurs were arrested in EU

The report notes that several European Union countries have reported Russian intelligence services’ involvement in organizing sabotage operations in their territories over the past year.

Notable incidents include:

  • Estonia arresting more than ten individuals accused of following Russian intelligence services’ orders
  • Latvia reporting recruitment attempts for spying on a NATO airbase
  • German prosecutors announcing in April the arrest of two Russian and German citizens allegedly preparing explosions at industrial and military facilities
  • Polish authorities arresting a group accused of attempting to disrupt trains delivering aid to Ukraine

The investigation follows a September 2024 OCCRP report about similar recruitment bots on Telegram, though those operators were reportedly more direct about requesting criminal activities, such as arson, sabotage, and assassinations, according to Novaya Gazeta Europa.

Related:

You could close this page. Or you could join our community and help us produce more materials like this.  We keep our reporting open and accessible to everyone because we believe in the power of free information. This is why our small, cost-effective team depends on the support of readers like you to bring deliver timely news, quality analysis, and on-the-ground reports about Russia's war against Ukraine and Ukraine's struggle to build a democratic society. A little bit goes a long way: for as little as the cost of one cup of coffee a month, you can help build bridges between Ukraine and the rest of the world, plus become a co-creator and vote for topics we should cover next. Become a patron or see other ways to support. Become a Patron!

To suggest a correction or clarification, write to us here

You can also highlight the text and press Ctrl + Enter

Please leave your suggestions or corrections here



    Euromaidan Press

    We are an independent media outlet that relies solely on advertising revenue to sustain itself. We do not endorse or promote any products or services for financial gain. Therefore, we kindly ask for your support by disabling your ad blocker. Your assistance helps us continue providing quality content. Thank you!