Russian intelligence uses Telegram and crypto to lure European youth into violence

A study by ISD reveals Russian actors use Telegram groups and crypto payments to recruit teenagers across Europe for violent acts, including arson and sabotage.

16/09/2026 16:307 min read

Across Europe, Russian intelligence operatives are employing Telegram and cryptocurrency to lure teenagers and young adults into committing sabotage and violence.

This information comes from the Institute for Strategic Dialogue (ISD), which released a study shared with the i Paper.

The research found that Russian entities target youths through a set of Telegram groups referred to as "com networks," where members vie for influence by posting damaging material.

The i Paper found that two clips circulated in these groups originated in the UK. One video shows a person recording themselves destroying a care worker's vehicle.

A second clip appears to depict the same individual hurling a brick through a home's window.

Seven days after those events, Ukrainian authorities detained two boys, ages 11 and 15, who were reportedly preparing to assault their school using firearms and explosives "on the orders of the Russian Federation."

Ukraine's Security Service labeled the incidents part of a Russian intelligence operation.

The ISD stated that "multiple indicators suggesting possible Russian state-linked support" exist for portions of the network, and that its organizers "mirror established Russian methods for recruiting 'disposable agents' for violence abroad."

Steven Rai, the study's author, says that the Russia-linked Telegram conversations have been observed offering cryptocurrency for arson, and that such payments within the com networks are "completely new."

A broad overarching coalition of several Telegram networks asserts it aims to unite participants with differing viewpoints under "one goal" of causing chaos.

One faction of this coalition says it is aligned with Direct Action, a far-right group created by Russia that orchestrated the firebombing of former British Prime Minister Sir Keir Starmer's residence.

Reportedly, thousands of dollars' worth of the stablecoin USDT was promised to a 22-year-old Ukrainian for executing the attacks, with the aim of generating media attention.

Share to

Disclaimer: this article comes from third-party media and is provided for reference only. It does not constitute investment advice. Crypto and other financial products carry significant price volatility risk, so please make your own decisions carefully.

Related articles