Event 8b6dda66-fda0-475a-80fb-33584d6aa28c

Approved event from Hybrid War Tracker

Status: Approved Confidence: High Category: Uncategorized Country: Libya Country: Russia Country: United Kingdom Country: Germany Country: Austria Country: Singapore Country: United Arab Emirates Attack Type: Espionage Where: Land Node: Node 2: 5th Column
🕐
Event Time
2w ago
Created
2w ago
✏️
Updated
1w ago

Summary

Headline: Marsalek’s missing millions: the unravelling of a secret Libyan empire

Short Summary: Jan Marsalek, fugitive ex-Wirecard COO and Russian spy, covertly invested tens of millions of fraud proceeds in Libyan cement factories and oil assets via complex offshore deals tied to Russia-backed warlord Khalifa Haftar, illuminating the shadow battle for influence and assets in Libya.

Extended Summary: Jan Marsalek, the former COO of Wirecard and a fugitive wanted for Europe’s largest financial fraud, has operated as a Russian intelligence agent of influence with extensive clandestine financial interests in Libya. According to a Financial Times and Bayerischer Rundfunk joint investigation published on December 11, 2025, Marsalek funneled millions of euros stolen from Wirecard into strategic Libyan assets including three cement factories and oil drilling operations managed by Libya Holdings Group (LHG), founded by Ahmed Ben Halim, a London-based financier with Libyan exile connections. Marsalek concealed ownership via offshore shell companies and Cyprus-registered entities, acting as a silent partner to a Dubai businessman nominally controlling the Libyan Cement Company (LCC). He also backed Lorasco, an operator of drilling rigs worth over $80 million, channeling $10 million through a Singapore-linked entity into this venture. His involvement extended beyond finance, with email evidence showing engagement with the Russian mercenary group RSB for demining. Marsalek’s network aimed to leverage Libya’s reconstruction needs and political landscape to advance Russian geopolitical objectives, including fostering ties with local warlords like General Khalifa Haftar, supported by Russia. Marsalek’s attempts to influence Libyan politics included proposing Ben Halim as a prime ministerial candidate. Since Marsalek fled to Russia in 2020, disputes erupted among his associates, notably Joe Bowman who sought to acquire Marsalek’s stakes via a company controlled by his wife, sparking legal battles with LHG who claim these assets are proceeds of crime and froze share transfers. Marsalek’s current operational status remains unclear, but the strategic significance of Libya as a gateway to Africa and a geopolitical lever to Europe underscores the importance of these clandestine investments to Moscow. UK security services appear inactive despite recent convictions of British-Bulgarian spies linked to Marsalek’s operations. This investigation exposes how Marsalek blends criminal fraud, espionage, and influence operations to further Russian interests under the cloak of legitimate business in North Africa.

Description

A Financial Times and Bayerischer Rundfunk investigation exposes Jan Marsalek’s covert financial network in Libya involving secret deals to acquire Libyan cement factories and oil drilling assets. Marsalek, a fugitive Austrian ex-Wirecard COO and Russian spy, used illicit Wirecard fraud money to invest via complex offshore structures linked to Libya Holdings Group (LHG) and its founder Ahmed Ben Halim. These investments, including LHG's cement factories later sold to a businessman connected to Libyan warlord Khalifa Haftar, align with Marsalek’s role as a Russian agent of influence seeking to advance Moscow’s geopolitical ambitions in Libya. The report details his financial ties to Russian mercenaries, involvement in crypto token schemes, and political maneuvering to install Marsalek-friendly figures, all masked by shell companies and anonymous ownership. Ongoing disputes between former Marsalek associates and LHG over control of these assets highlight attempts to conceal his legacy. Marsalek’s whereabouts remain in Russia, protected by the state, while UK authorities have yet to act on his London financial network. This investigation illustrates Marsalek’s fusion of financial fraud with hybrid espionage tactics advancing Russian interests in North Africa.

Evidence

Quotes

‘Assholes’ were trying to ‘steal’ his money, he would write in a December 2020 Telegram message to Orlin Roussev, one of the Bulgarian spies convicted last year in Britain, ‘because they think I am hiding in a cave in Afghanistan.’
‘I’ve never had any reason to be disingenuous about Marsalek’s past involvement. He was a fantastic investor and a good friend. What we were doing at the time was completely legitimate... he was just this hugely talented, very successful European businessman,’ Bowman told the FT.
‘At no time during the due diligence processes carried out by LHG companies was it discovered or suspected that Marsalek was the UBO of any investing party,’ they said.
Ben Halim claimed the $15.5mn payment from the sale of cement factories was to cover expenses he personally incurred over years keeping LCC in business.
‘He was the anchor investor in Lorasco from day one and it was known to all of us internally [at LHG],’ Bowman said.
Marsalek ‘asked Ben Halim whether he would be interested in running for political office, with a view eventually to becoming prime minister of the country,’ though Ben Halim dismissed this as fantasy.
‘The business wouldn’t have been created without him. That was really one of the reasons why I parted ways with LHG. They have been trying to bury the truth,’ Bowman said.
LHG accused Joe Bowman of conspiracy to defraud and misusing Marsalek’s past ties to freeze out rightful shareholdings.
Last year’s Mayfair deal might have been the trigger for Marsalek to hack former associates, sending warnings not to talk about his Libyan activities.
‘Marsalek was integral to attempts to open a Wirecard Bank account and hire RSB Russian mercenaries to clear unexploded ordnance from cement plants,’ correspondences reviewed by the FT confirm.

Related URLs