
A cache of text messages and recorded conversations shared with POLITICO offers a rare, unfiltered look inside Moscow’s human intelligence operations targeting Russian opposition networks in Europe.
The exchanges, spanning from the summer of 2023 to 2025, involve a reluctant informant referred to as “Ivan” — a student based in Moscow — and his handlers from Russian intelligence. The materials, provided by Ivan himself, illustrate the everyday mix of persuasion, emotional manipulation, and subtle coercion used to keep assets engaged over the long term.
A Classic “Good Cop, Bad Cop” Routine
The conversations reveal handlers alternating between building rapport and applying pressure. They offer promises of assistance or protection while issuing reminders of Ivan’s vulnerabilities and expressing irritation when responses lag. Phrases such as “Don’t make me chase you” highlight the persistent, almost nagging tone that accompanies more serious demands.
Ivan was tasked with infiltrating online communications of an opposition group and reporting on their activities in Europe, all while remaining in Moscow. This points to a deliberate strategy of embedding informants within exile and diaspora circles rather than relying solely on short-term recruits for one-off sabotage missions.
A recorded New Year’s call is cited as particularly emblematic: it blends personal rapport with ongoing operational control, showing how handlers maintain influence across months and years.
Beyond “Disposable” Agents
Much recent public attention has focused on Russia’s use of quickly recruited, often low-skilled individuals — sometimes via Telegram channels — for acts of arson, vandalism, or surveillance in Europe, frequently motivated by small cash payments. The leaked materials with Ivan depict a different, more traditional HUMINT approach: the patient cultivation of someone with potential access to sensitive opposition circles.
This method relies on sustained relationship-building combined with leverage, including implied threats or reminders of possible consequences. Russian services have historically employed kompromat (compromising material), family pressures, career incentives, or legal vulnerabilities to recruit and retain assets, especially those with foreign connections or opposition sympathies.
Context of Heightened Hybrid Activities
The leaks emerge against a backdrop of intensified Russian espionage and sabotage operations across Europe linked to the war in Ukraine. Western security agencies have repeatedly issued warnings about efforts to penetrate Russian exile communities, opposition networks, and critical infrastructure.
Such detailed handler-informant communications are uncommon because operational security typically involves compartmentalization and encrypted channels. When they surface, they expose both the sophistication of long-term agent handling and occasional bureaucratic frustrations or sloppiness that can lead to defections or exposures.
Russian authorities routinely deny involvement in such activities or dismiss leaked materials as disinformation or fabrications. Independent verification of every detail in intelligence cases is inherently difficult, yet the patterns described align with previously documented FSB, GRU, and SVR tactics.
The mundane tone of many messages — mixing emotional appeals, persistence, and operational instructions — underscores a central reality of espionage: even high-stakes intelligence work often involves routine human dynamics of control, reluctance, and persuasion.
This case provides concrete insight into how Moscow seeks to monitor and disrupt opposition activities from afar, even as European countries strengthen countermeasures against Russian hybrid threats.