The group was found to be working on behalf of Russia’s Federal Security Service, carrying out surveillance and intelligence gathering tasks focused mainly on Polish military and infrastructure sites. Their targets included airports, seaports, railways, and sites related to the transport of aid to Ukraine.

The presented evidence indicated that the defendants used the Telegram encrypted messaging app to communicate with their Russian handlers. In exchange for fulfilling tasks such as installing covert cameras or engaging in attempts to disrupt railway transport, they received payments in cryptocurrency.

Russian spy ring busted in Poland – RMF24 (updated)

The investigation revealed that group members received regular payments to reimburse their travel, accommodation, and equipment costs, along with incentives that ranged from $5 for distributing leaflets to $300-400 for installing a camera, and even up to $10,000 for attempting to derail a train.

According to the prosecutor’s indictment, the defendants were linked to foreign intelligence, specifically the Fifth Department of Operational Information and International Contacts of the Federal Security Service of the Russian Federation (FSB), targeting Poland.

The investigation revealed the activities of the defendants and at least ten other suspects from January to June 2023 in various cities across the country, primarily those near the Ukrainian border.

Individual members of the group were involved in purchasing camera components, purchasing and registering SIM cards, conducting surveillance and filming facilities, installing GPS transmitters on trains, recruiting people to perform tasks ordered by handler “Andrey,” transferring rewards, and disinformation activities. The group members reportedly used the purchased equipment to conduct “operational raids to collect information about critical infrastructure facilities.”

One to six years of prison time