A stark new report from a leading British defence thinktank has exposed how Russian intelligence is waging a hybrid war against the UK and Europe by recruiting so-called 'disposable agents' through online platforms. The research details a systematic campaign designed to destabilise Western powers and turn public opinion against Ukraine.
The 'Gig-Economy' Model of Modern Sabotage
According to the study published by the Royal United Services Institute (RUSI), the methods of the Kremlin have shifted dramatically. Gone is the Cold War reliance on highly trained operatives; in its place is a remote, freelance model described as the 'gig-economy era' of Russian sabotage.
Intelligence officers linked to Moscow are now accused of using messaging apps like Telegram and online gaming sites to woo individuals. These 'agents for a day' are then tasked with conducting arson, vandalism, and reconnaissance. Payment, often ranging from hundreds to thousands of euros, is frequently promised in cryptocurrency to obscure the funding trail.
The report, entitled 'Responding to Russian Sabotage Financing', states this tactic of deniable activity below the threshold of conventional war has 'evolved into a systematic and geographically targeted threat'.
Exploiting Vulnerabilities and Stoking Tension
Money is identified as a key motivator, with teenagers, migrants, and older people with Soviet military experience seen as ripe for recruitment. Alarmingly, the report highlights that Russian spies are increasingly recruiting Ukrainians to execute these sabotage tasks across Europe.
This is viewed as a deliberate strategic move. 'If such incidents are treated purely as the actions of individual Ukrainians, this could fuel anti-Ukrainian sentiment and erode public support for Kyiv - a strategic aim of sabotage operations,' the authors warn. The aim is to undermine NATO unity and test the alliance's red lines.
The scale is growing rapidly. Incidents of Russia-linked arson and serious sabotage in Europe reportedly surged to 34 in 2024, up from just 12 in 2023 and two in 2022.
Urgent Call for a Coordinated Western Response
The RUSI analysts urge NATO and the European Union to dramatically improve their response to deter future attacks. Their recommendations include:
- Agreeing on a clear, common definition of what constitutes sabotage.
- Using counterterrorism powers to track and disrupt the illicit funding channels that enable these operations.
- Treating individual, seemingly minor incidents as part of a broader, grave campaign against Western allies.
The report cites Poland as a frequent target. One major incident saw an explosion on a key railway aid route to Ukraine in November 2025, an act the Polish Prime Minister called 'unprecedented sabotage'. Suspects included Ukrainian nationals, which authorities interpret as part of a Russian strategy to exploit migrant communities and create political tension.
With many Russian intelligence officers expelled from Europe after the 2022 invasion of Ukraine, the Kremlin's increased reliance on this network of intermediaries and disposable agents presents a complex and evolving challenge to European security.
