State entrusted Estonia-Russia border to shady Russian businessmen: one employee turned out to be a spy, three took bribes

Intelligence & EspionageHuman Intelligence (HUMINT)Recruitment of locals

Aggressor

Summary

At Estonia's Koidula border crossing, a company managing the queue employed Estonian-Russian dual citizens, leading to bribery by three workers and revelation that a security guard was an FSB spy passing sensitive information to Russia.

Railservis OÜ, responsible for managing the queue area at Koidula border crossing between Estonia and Russia, hired several employees with dual Estonian-Russian citizenship despite warnings from security services. Three employees took bribes in exchange for priority border crossings, while a security guard was uncovered as an FSB spy leaking information on border operations and staff. The company's ultimate owners, Aleksei Tšulets and Sergei Pasters, are businessmen tied to Russian and Belarusian oil and coal industries, already under EU sanctions for their involvement in the Russian shadow fleet oil trade. The Prosecutor suspects further sanctions violations by related firms. Despite these incidents, Railservis continues servicing the border crossing, posing ongoing security risks and enabling smuggling of sanction-prohibited goods.

Classification

Confidence: High

The article clearly describes a hostile espionage incident involving an FSB-recruited spy and corrupt employees facilitating illegal border crossings and sanction evasion, constituting aggressor activity. No direct defense preparation actions are described.

Source URL

https://ekspress.delfi.ee/artikkel/120441303/riik-andis-eesti-vene-piiri-hamarate-vene-arikate-hallata-uks-tootaja-osutus-spiooniks-kolm-votsid-pistist

Open source

Provenance

Publisher: extension
Submitted: Mar 11, 2026, 12:08 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Mar 11, 2026, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "3c9e7cb9-b057-4971-9138-5c09533c2b8b",
  "url": "https://ekspress.delfi.ee/artikkel/120441303/riik-andis-eesti-vene-piiri-hamarate-vene-arikate-hallata-uks-tootaja-osutus-spiooniks-kolm-votsid-pistist",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "Estonia",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "Koidula border crossing",
    "espionage",
    "FSB spy",
    "corruption",
    "bribery",
    "dual citizenship",
    "sanctions",
    "Russian shadow fleet",
    "Estonia-Russia border",
    "Railservis OÜ"
  ],
  "nodes": [
    "Node 1: Borders"
  ],
  "countries": [],
  "where_text": "Land",
  "headline": "State entrusted Estonia-Russia border to shady Russian businessmen: one employee turned out to be a spy, three took bribes",
  "description": "Railservis OÜ, the company entrusted by the Estonian Police and Border Guard Board to manage the queue area at the Koidula border crossing between Estonia and Russia, hired employees with dual Estonian-Russian citizenship despite security concerns by Estonian Internal Security Service (KAPO). This materialized as a threat when three employees accepted bribes for priority border crossing, and a security guard working for Railservis was revealed to be a spy recruited by the Russian FSB intelligence service who passed information about the border queue and employees to hostile intelligence. The ultimate beneficiaries of Railservis are Russian and Belarusian businessmen Aleksei Tšulets and Sergei Pasters, linked to the Russian shadow fleet oil business targeted by EU sanctions. The Prosecutor's office suspects Tšulets and Pasters of violating sanctions through another firm. The corrupt employees, all Estonian-Russian dual citizens living in Russia, systematically took bribes and handled customers transporting goods banned by sanctions. Railservis continues to provide services at the border despite these revelations.",
  "summary_short": "At Estonia's Koidula border crossing, a company managing the queue employed Estonian-Russian dual citizens, leading to bribery by three workers and revelation that a security guard was an FSB spy passing sensitive information to Russia.",
  "summary_extended": "Railservis OÜ, responsible for managing the queue area at Koidula border crossing between Estonia and Russia, hired several employees with dual Estonian-Russian citizenship despite warnings from security services. Three employees took bribes in exchange for priority border crossings, while a security guard was uncovered as an FSB spy leaking information on border operations and staff. The company's ultimate owners, Aleksei Tšulets and Sergei Pasters, are businessmen tied to Russian and Belarusian oil and coal industries, already under EU sanctions for their involvement in the Russian shadow fleet oil trade. The Prosecutor suspects further sanctions violations by related firms. Despite these incidents, Railservis continues servicing the border crossing, posing ongoing security risks and enabling smuggling of sanction-prohibited goods.",
  "actor_primary": "FSB",
  "target_primary": null,
  "location_text": "Koidula Border Crossing",
  "location_region": null,
  "location_coordinates_lat": 58.595272,
  "location_coordinates_lon": 25.013607,
  "location_precision": "Exact",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly describes a hostile espionage incident involving an FSB-recruited spy and corrupt employees facilitating illegal border crossings and sanction evasion, constituting aggressor activity. No direct defense preparation actions are described.",
  "event_time_utc": "2026-03-11T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "exact",
  "created_at": "2026-03-11T12:08:00.058Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "exact",
  "time_precision_band": "exact",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: ExactLocation: Exact

Source reliability

Info credibility

Event time

Mar 11, 2026, 00:00 UTC

Event time confidence

exact

Location

Koidula Border Crossing

Primary actor

FSB

Country

Estonia

Tags

Koidula border crossing, espionage, FSB spy, corruption, bribery, dual citizenship, sanctions, Russian shadow fleet, Estonia-Russia border, Railservis OÜ

Nodes

Node 1: Borders

Loading signal...

{ "id": "3c9e7cb9-b057-4971-9138-5c09533c2b8b", "url": "https://ekspress.delfi.ee/artikkel/120441303/riik-andis-eesti-vene-piiri-hamarate-vene-arikate-hallata-uks-tootaja-osutus-spiooniks-kolm-votsid-pistist", "source": "extension", "status": "approved", "category": "Intelligence & Espionage", "subcategory": "Human Intelligence (HUMINT)", "incident_type": "Recruitment of locals", "country": "Estonia", "source_reliability": "B", "info_credibility": "3", "tags": [ "Koidula border crossing", "espionage", "FSB spy", "corruption", "bribery", "dual citizenship", "sanctions", "Russian shadow fleet", "Estonia-Russia border", "Railservis OÜ" ], "nodes": [ "Node 1: Borders" ], "countries": [], "where_text": "Land", "headline": "State entrusted Estonia-Russia border to shady Russian businessmen: one employee turned out to be a spy, three took bribes", "description": "Railservis OÜ, the company entrusted by the Estonian Police and Border Guard Board to manage the queue area at the Koidula border crossing between Estonia and Russia, hired employees with dual Estonian-Russian citizenship despite security concerns by Estonian Internal Security Service (KAPO). This materialized as a threat when three employees accepted bribes for priority border crossing, and a security guard working for Railservis was revealed to be a spy recruited by the Russian FSB intelligence service who passed information about the border queue and employees to hostile intelligence. The ultimate beneficiaries of Railservis are Russian and Belarusian businessmen Aleksei Tšulets and Sergei Pasters, linked to the Russian shadow fleet oil business targeted by EU sanctions. The Prosecutor's office suspects Tšulets and Pasters of violating sanctions through another firm. The corrupt employees, all Estonian-Russian dual citizens living in Russia, systematically took bribes and handled customers transporting goods banned by sanctions. Railservis continues to provide services at the border despite these revelations.", "summary_short": "At Estonia's Koidula border crossing, a company managing the queue employed Estonian-Russian dual citizens, leading to bribery by three workers and revelation that a security guard was an FSB spy passing sensitive information to Russia.", "summary_extended": "Railservis OÜ, responsible for managing the queue area at Koidula border crossing between Estonia and Russia, hired several employees with dual Estonian-Russian citizenship despite warnings from security services. Three employees took bribes in exchange for priority border crossings, while a security guard was uncovered as an FSB spy leaking information on border operations and staff. The company's ultimate owners, Aleksei Tšulets and Sergei Pasters, are businessmen tied to Russian and Belarusian oil and coal industries, already under EU sanctions for their involvement in the Russian shadow fleet oil trade. The Prosecutor suspects further sanctions violations by related firms. Despite these incidents, Railservis continues servicing the border crossing, posing ongoing security risks and enabling smuggling of sanction-prohibited goods.", "actor_primary": "FSB", "target_primary": null, "location_text": "Koidula Border Crossing", "location_region": null, "location_coordinates_lat": 58.595272, "location_coordinates_lon": 25.013607, "location_precision": "Exact", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The article clearly describes a hostile espionage incident involving an FSB-recruited spy and corrupt employees facilitating illegal border crossings and sanction evasion, constituting aggressor activity. No direct defense preparation actions are described.", "event_time_utc": "2026-03-11T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "exact", "created_at": "2026-03-11T12:08:00.058Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "exact", "time_precision_band": "exact", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }