Russia Using Cryptocurrency to Fund Sabotage in EU, Polish Official Says
Russia is utilizing cryptocurrencies to pay individuals involved in hybrid attacks targeting European Union countries, a tactic employed to obscure the financial trail and evade intelligence tracking, according to a senior Polish security official.
Sławomir Cenckiewicz, chief of Poland’s national security bureau, told the Financial Times that Moscow is likely using cryptocurrency to finance a range of disruptive activities, including drone incursions, sabotage, and attempts to compromise critical infrastructure like water supplies. Evidence suggests Russia is also employing a “shadow fleet” of oil tankers for reconnaissance purposes, launching drones into European airspace – a practice recently highlighted by Ukrainian President Volodymyr Zelenskyy. Last month, nineteen Russian drones violated Polish airspace, triggering a NATO response and marking the first direct confrontation between the alliance and Kremlin assets since the 2022 invasion of Ukraine.
Cenckiewicz revealed that a network of agents recruited by Russia’s GRU military intelligence agency and uncovered in Poland in 2023 were “to a high extent financed with cryptocurrency,” a method Warsaw believes continues to be used. Poland recently approved legislation to tighten regulation of the crypto asset market, aiming to prevent such funding channels; this follows dozens of charges in the past three years related to spying and sabotage. “The Polish intelligences services are very much interested in this whole legislative process, to ensure there are no gaps that would allow foreign powers to use [crypto] to finance their agents,” Cenckiewicz said. This escalation in covert activity underscores the growing threat of Russian interference within the EU, prompting increased security measures and international cooperation. Further information on the evolving landscape of cyber warfare can be found at the Council on Foreign Relations.
Recent investigations in Poland have uncovered attempts to smuggle explosives hidden in food cans and a deliberate detachment of a coal wagon on a busy rail line, both attributed to potential Russian diversionary tactics. Cenckiewicz stated that Poland is now in “a state of war” with Russia in the cyber domain. Officials are currently investigating a Ukrainian citizen suspected of working with the GRU and have handed over a 16-year-old Ukrainian to Kyiv, accused of aiding Russian intelligence in recruiting other young people for attacks.
Cenckiewicz indicated that officials expect Russia to continue relying on locally recruited agents, offering small payments to minimize risk, and that the legislative process will be closely monitored to prevent exploitation.
