Russia’s Crypto Money Laundering Network Funded Spy Ring Run by Jan Marsalek

The UK’s National Crime Agency (NCA) has revealed that a sophisticated Russian-run crypto money-laundering network provided financing to a spy operation linked with former Wirecard executive Jan Marsalek.

What the findings reveal

• The NCA has been investigating two major laundering networks known as Smart and TGR, which, according to the agency, “move billions globally” via cash-to-crypto conversions.
• These networks are alleged to have channelled funds from organised crime (including the Irish-based Kinahan Organised Crime Group) and Russian-linked interests to finance espionage activities and bypass sanctions.
• Marsalek, a fugitive wanted across Europe, is said to have coordinated with the spy ring led by Bulgarian national Orlin Roussev, which targeted UK and European individuals and organisations on behalf of Russian intelligence.
• One key component of the operation: physical cash collected in the UK (often from drug-trafficking and arms deals) was converted into cryptocurrency, then routed internationally to sanctioned individuals and espionage networks.
• The networks were also tied to off-the-radar services such as facilitating payments for the Kremlin’s military-industrial base, according to the NCA.

Why it matters

• Crypto as a geopolitical tool: This case illustrates how crypto-assets are being used not merely by criminals but by state-linked actors for espionage and sanctions evasion.
• Regulatory pressure intensifies: The involvement of a major European payments executive and a spy ring raises the stakes for regulators and exchanges to better monitor illicit flows.
• Trust and transparency: The findings cast a long shadow over the crypto-industry’s claims of transparency, when major networks can be used to fund covert intelligence operations, user trust and regulatory scrutiny both intensify.
• Cross-border laundering complexity: This investigation spans street-level cash handovers in the UK, crypto conversions, sanction-evading flows into Russia and global coordination, showing the multi-layer challenge authorities face.

FAQs

Q1: Who is Jan Marsalek?
A1: Jan Marsalek is the former COO of German payments giant Wirecard, now a fugitive. He is alleged to be working with Russian intelligence and is wanted for fraud and espionage-related offences.

Q2: What are the Smart and TGR networks?
A2: Smart and TGR are two money-laundering networks identified by the NCA as facilitating cash-to-crypto conversions for organised crime, Russian clients and state-linked espionage activities.

Q3: How were the funds moved?
A3: The networks collected cash from criminal activities (e.g., drug trafficking, firearms), converted it into cryptocurrency via UK-based operations and then routed it to sanctioned Russian entities and spy networks.

Q4: What is the significance of the spy ring?
A4: A ring of six Bulgarian nationals, led by Orlin Roussev, was convicted in 2025 for spying on behalf of Russia. Investigators say they were financed through these crypto-laundering networks.

Q5: What are the implications for the crypto industry?
A5: The case strengthens calls for stricter compliance, transparency and oversight of crypto exchanges, especially in relation to sanctions, state-linked actors and large-value flows.

Q6: What actions are being taken by law enforcement?
A6: The investigation known as “Operation Destabilise” has resulted in dozens of arrests, asset seizures, and sanctions by the U.S. and U.K. on entities associated with these laundering networks.