Polish authorities have formally charged a Russian couple with espionage on behalf of the FSB. On October 13, 2025, the National Prosecutor’s Office in Silesia submitted the indictment to the District Court in Sosnowiec, southern Poland. The couple is accused of participating in Russian intelligence activities and transmitting information potentially harmful to the Republic of Poland under Article 130 §2 of the Polish Criminal Code.
Details of the Espionage Operation
Investigators determined that the male suspect gathered intelligence on Russian opposition figures residing in Poland and on individuals and institutions supporting them. The collected data was transferred to his wife via an encrypted electronic device for delivery to the FSB in Russia. The couple was detained in July 2024 and placed under temporary arrest. Separate proceedings continue against other individuals implicated in the case. The investigation was conducted in cooperation with the Katowice branch of Poland’s Internal Security Agency.
Rising Russian Intelligence Activity in Europe
In recent years, Russia has intensified espionage across EU and NATO countries, employing methods ranging from traditional intelligence collection to cyber operations. Moscow’s interests extend beyond military and political intelligence to commercial and critical infrastructure, including energy, transportation, and technological systems. Russian agencies have also conducted sabotage operations, posing real risks to public safety and state stability.
Strategic Objectives and Hybrid Threats
The aim of Russian espionage and sabotage in Europe is to undermine internal stability, economic resilience, and defense capabilities. Such actions are designed to create chaos, reduce public trust in institutions, and gather critical information. Diversions also serve as tools of hybrid warfare, intended to intimidate and deter support for Ukraine.
Use of Temporary Operatives
Russian operations often rely on “one-time” actors recruited online, including through Telegram, offering cryptocurrency payments. These individuals may include local criminals, migrants, or teenagers and are tasked with attacks on critical infrastructure, military logistics, and Ukrainian support facilities. This approach allows Russian intelligence to maintain plausible deniability despite an increasing number of arrests across Europe.
Recent Security Incidents in Poland
Earlier in October, Polish authorities arrested a GRU agent planning sabotage using explosives hidden in corn storage bins and drones. The operations reportedly targeted sites in Poland, Lithuania, and Germany. Meanwhile, Polish Digital Affairs Minister Krzysztof Havkowski noted growing cyberattacks on critical infrastructure, and National Security Bureau head Sławomir Cenckiewicz stated, “In cyberspace, Poland is now at war with Russia; this is no longer just a threat.”
EU and NATO Counterintelligence Measures
In response to heightened Russian espionage, EU and NATO countries have strengthened counterintelligence operations, resulting in record numbers of exposures and expulsions of Russian diplomats and suspected agents. Despite these measures, Russian intelligence activity in Europe remains persistent and aggressive.
