Telegram Bot Allegedly Recruits Pro-Russian Supporters in Europe for Espionage and Sabotage

A joint investigation by the Organized Crime and Corruption Reporting Project (OCCRP) and several European media outlets has uncovered a Telegram bot allegedly recruiting European citizens with pro-Russian views for sabotage, espionage, and even assassinations. The bot, named “privet bot,” is believed to be connected to Russian intelligence services, according to European security agencies cited in the report.

The investigation revealed that the bot has been actively promoted on various online platforms, including Telegram, VKontakte, and even the gaming platform Steam. It was advertised at least eight times in Grey Zone, a Telegram channel linked to the Wagner Group, which has over half a million subscribers. These ads called for Europeans to join efforts against Ukraine’s Western allies.

Infiltrating the Network

In an attempt to gather more information, journalists engaged with “privet bot” by posing as a 26-year-old Estonian citizen, Valeriy Ivanov. They created a detailed fake persona, including a background story, social media presence on VKontakte, and a forged ID.

During their conversation, “privet bot” asked Ivanov to confirm his identity, questioned his military experience, and inquired if he had a criminal record. The bot also suggested tasks involving sabotage and offered $10,000 in cryptocurrency for actions such as spying on NATO bases, setting fire to civilian oil depots, and even carrying out assassinations.

The bot administrator also encouraged Ivanov to practice with Molotov cocktails, underlining the seriousness of the tasks and the potential risks. Despite these exchanges, the journalists eventually cut off communication.

Potential Russian Intelligence Involvement

Although the investigation did not directly link “privet bot” to any specific sabotage incidents, European security services from Germany, Estonia, Austria, and Latvia confirmed that the recruitment tactics mirrored other cases they had encountered. According to a source within a German security agency, such low-level agents are often unaware of whom they are truly working for due to complex networks of intermediaries.

Estonian Security Police (KAPO) spokesperson Marta Tuul noted that the primary goal of such efforts is to create societal fear and chaos. She emphasized that even if the operations are not always successful, their intent is to undermine public confidence in government institutions.

Growing Threat of Sabotage

Indrek Kannik, Director of the International Centre for Defence and Security in Estonia, highlighted the increasing number of sabotage attempts across Europe over the past two years. He pointed out that while the success rate of these recruited agents remains low, the minimal resources required make the operations appealing.

The investigation also revealed that several European citizens, including individuals from Estonia, Germany, and Poland, have been arrested or convicted for espionage or sabotage in favor of Russia. Some of these individuals were recruited through social media platforms like Telegram.

Following the release of the investigation, Telegram updated its moderation policies and blocked access to Grey Zone and several smaller channels promoting “privet bot” in some EU countries. However, the channels remain accessible through the web version of Telegram, though unavailable via mobile and desktop applications for users with EU-registered phone numbers.

A representative from Telegram stated that content promoting criminal activity violates the platform’s terms of service and is removed upon detection. The company also noted that no EU authority had officially reported the channels to Telegram through the designated Digital Services Act (DSA) contact points, which would have triggered faster removal.