In short
- OCCRP says five defendants face up to 20 years in prison for conspiracy to finance terrorism, with two facing an additional 10-year maximum for murder-for-hire charges.
- OCCRP details Durruthy transferred over $1,000 in cryptocurrency and booked hotels in Poland and Czechia for the Prague attack, while offering $40,000 for a U.S. assassination.
What happened
A U.S. federal indictment accuses five individuals of operating the "RIS Network" for Russian intelligence, orchestrating sabotage and assassination plots in Europe and the United States. The indictment links the network to a June 2024 arson attempt at a Prague bus depot, coordinated by Oemis Romagoza Durruthy, who provided logistical support and transferred over $1,000 in cryptocurrency.
The network allegedly recruited operatives for targeted killings, including offering $40,000 to "eliminate" a Russian dissident in the U.S. and $25,000 for a similar plot in Lithuania. Czech authorities have not initiated proceedings related to the U.S. case, and all five defendants remain at large, facing up to 20 years in prison for conspiracy to finance terrorism.
I am offering serious money for serious work," Khrameev wrote, adding he was "interested in all the countries that are helping Ukraine.
In numbers
- over $1,000 Cryptocurrency transferred for Prague attack logistics
- $40,000 Amount offered for U.S. assassination plot
What compliance teams should check
- Review client transactions for links to the RIS Network and individuals named in the U.S. federal indictment.
- Screen for cryptocurrency transfers exceeding $1,000 related to hotel bookings in Poland and Czechia, as described in the OCCRP report.
- Monitor for payments matching $40,000 or $25,000 typologies for murder-for-hire or sabotage, referencing the OCCRP's details on Russian intelligence operations.
Why it matters
This story highlights the use of cross-border financial flows, including cryptocurrency, to fund sabotage and assassination plots by a Russian intelligence network. The indictment details specific amounts, typologies, and operational logistics, providing actionable intelligence for compliance officers. Monitoring for similar patterns—such as payments for surveillance, hotel bookings, and large transfers—can help detect and prevent terrorist financing and targeted violence, especially in jurisdictions aligned with Ukraine or hosting Russian dissidents.
Catch stories like these on your own customers.
complead screens your customers against adverse media, sanctions and PEP lists, and re-checks them every day. When a name you hold turns up in the news, it lands in your case queue with the evidence attached.