Espionage during the war in Ukraine

The war in Ukraine has evolved into a multidimensional conflict, encompassing nearly all areas of state activity. Military and diplomatic efforts have long ceased to be the sole forms of confrontation, with intelligence and counterintelligence operations gaining significant prominence. Espionage in the context of the Ukrainian-Russian confrontation spans a broad spectrum of activities – from classical intelligence gathering on troop movements and critical infrastructure, to the infiltration of civil administration, and large-scale operations in cyberspace.

As of late December 2024, with the situation along the frontlines remaining unstable, the intelligence services of both sides – particularly the Russian services, owing to their extensive experience and institutional resources – are exceptionally active and continuously refining their techniques.

This text aims to outline the key phenomena related to Russian espionage in Ukraine and to provide a separate chapter detailing methods and examples of Ukrainian intelligence operations. The data presented is sourced from official communications of the Security Service of Ukraine (SBU) and reports from the Russian Federal Security Service (FSB). Media publications will also be referenced.

Russian espionage in Ukraine: an overview of the phenomenon

Historically, Russia has maintained extensive intelligence structures on Ukrainian territory, dating back to the Soviet era and later to periods of close cooperation between Kyiv and Moscow under pro-Kremlin politicians. Since 2014, when Russia annexed Crimea and began supporting separatists in Donbas, there have been consistent reports of Russian agents infiltrating Ukraine’s state administration and military.

The escalation of the war in February 2022 only further activated these structures. According to the Security Service of Ukraine (SBU), as highlighted in a communication from August 2023 (https://t.me/SBUkr/9333), Ukrainian counterintelligence is uncovering an increasing number of instances of direct espionage in Russia's favour. Arrests have included individuals from the circles of mid- and high-ranking officials, as well as informants among the civilian population, who are often offered financial incentives to provide information on Ukrainian troop movements.

A communication from August 2023 (https://t.me/SBUkr/9352) illustrates how Russia is increasingly relying on so-called sleeper cells—agents who reside in Ukraine for extended periods without engaging in overt intelligence activities, only to conduct sabotage or provide critical intelligence at pivotal moments. The Guardian has highlighted a sharp increase in the number of informal agents, often recruited from Ukrainians who sympathise with Russia for ideological or economic reasons.

For security reasons, Ukrainian services do not disclose all details of foiled operations, but numerous reports indicate that the most common targets of Russian spies are the Ukrainian army's communications systems, weapons and ammunition storage sites, and the collection of information on key armed forces commanders. There are also reports of agents infiltrating local offices and the wider civil administration. 

Read more: