Signal
Submitted
Apr 28, 2026, 14:21 UTC
Germany faces increased activity of Russian 'illegal' spies living undercover since 2022, with security services intensifying efforts to detect them amid wider European exposure.
Following Russia's 2022 invasion of Ukraine, German intelligence confirms heightened deployment of 'illegal' spies—Russian agents living under false identities without diplomatic cover—in Germany and across Europe. These spies lead normal civilian lives but conduct espionage on defense policies, military support to Ukraine, and sanctions against Russia. The case of the 2011 Anschlag spy couple remains the only known German exposure, but recent arrests in the Netherlands, Norway, Slovenia, and elsewhere reveal a broader network. Germany aided investigations especially regarding suspects traveling to the country. The use of traditional shortwave radio for instructions reportedly increased since the onset of war, a vintage tactic combined with modern covert methods. The German domestic security agency BfV, led by Thomas Haldenwang, stated that Russia uses its full espionage toolkit including potential hostile acts, emphasizing ongoing counterintelligence operations. This reflects Russia's adaptation after large diplomatic expulsions cut its overt spy presence in Europe, intensifying reliance on clandestine agents embedded deeply over long periods or under abbreviated training as 'Illegalen Light.'
Confidence: High
The article explicitly reports confirmed Russian hostile espionage activities in Germany by illegal spies using false identities, names named German intelligence and officials, and details arrests and methods, demonstrating a clear aggressor hybrid warfare event.
Source URL
https://tagesschau.de/investigativ/ndr-wdr/russland-spione-deutschland-anschlag-agentenfunk-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "c25f4c1f-7ff2-44c6-abdf-28eb6f113ba5",
"url": "https://tagesschau.de/investigativ/ndr-wdr/russland-spione-deutschland-anschlag-agentenfunk-100.html",
"source": "extension",
"status": "approved",
"category": "Intelligence & Espionage",
"subcategory": "Human Intelligence (HUMINT)",
"incident_type": "Recruitment of locals",
"country": "Germany",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"russian intelligence operations",
"Illegal spies",
"Germany",
"Shortwave radio",
"Hybrid warfare",
"BfV",
"russia–ukraine war",
"Counterintelligence",
"Illegals",
"Spy arrests"
],
"nodes": [
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Land",
"headline": "Russian 'Illegal' Spies Operating in Germany Undercover Since Start of Ukraine War",
"description": "Since the start of the Russian invasion of Ukraine in February 2022, multiple Russian 'illegal' spies using false identities have been uncovered in several European countries, including Germany, according to German security agencies. The German Federal Office for the Protection of the Constitution (BfV) President Thomas Haldenwang confirmed ongoing intensive efforts to detect these undercover spies, who live seemingly normal lives but secretly gather intelligence. These 'illegal' agents operate without diplomatic immunity and face severe prison sentences if caught. Since Russia's diplomatic personnel were heavily reduced due to expulsions after the war began, Russia increasingly relies on these undercover agents. The operatives use classic methods like shortwave radio for mission instructions. European services have noted a rise in activity of suspected Russian shortwave transmitters, indicating possible renewed deployment or increased numbers of these spies in Europe. Germany is a key target for espionage efforts, focusing on defense policies, armament, Ukraine support, and sanctions against Russia. Arrests in neighboring countries, including a couple in Slovenia suspected of supporting other 'illegal' spies with funds, suggest an extensive Russian intelligence network. The 2011 case of the Anschlag couple in Germany, caught after decades spying under fabricated Austrian identities, remains the only public German case so far, but security sources expect increased future activity. The BfV vows to vigorously counter these threats amid growing concerns about sabotage and espionage related to the Ukraine conflict.",
"summary_short": "Germany faces increased activity of Russian 'illegal' spies living undercover since 2022, with security services intensifying efforts to detect them amid wider European exposure.",
"summary_extended": "Following Russia's 2022 invasion of Ukraine, German intelligence confirms heightened deployment of 'illegal' spies—Russian agents living under false identities without diplomatic cover—in Germany and across Europe. These spies lead normal civilian lives but conduct espionage on defense policies, military support to Ukraine, and sanctions against Russia. The case of the 2011 Anschlag spy couple remains the only known German exposure, but recent arrests in the Netherlands, Norway, Slovenia, and elsewhere reveal a broader network. Germany aided investigations especially regarding suspects traveling to the country. The use of traditional shortwave radio for instructions reportedly increased since the onset of war, a vintage tactic combined with modern covert methods. The German domestic security agency BfV, led by Thomas Haldenwang, stated that Russia uses its full espionage toolkit including potential hostile acts, emphasizing ongoing counterintelligence operations. This reflects Russia's adaptation after large diplomatic expulsions cut its overt spy presence in Europe, intensifying reliance on clandestine agents embedded deeply over long periods or under abbreviated training as 'Illegalen Light.'",
"actor_primary": "Thomas Haldenwang",
"target_primary": null,
"location_text": "Germany",
"location_region": null,
"location_coordinates_lat": 51.1657,
"location_coordinates_lon": 10.4515,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article explicitly reports confirmed Russian hostile espionage activities in Germany by illegal spies using false identities, names named German intelligence and officials, and details arrests and methods, demonstrating a clear aggressor hybrid warfare event.",
"event_time_utc": "2024-06-12T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-04-28T14:21:00.731Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Jun 12, 2024, 00:00 UTC
Event time confidence
exact
Location
Germany
Primary actor
Thomas Haldenwang
Country
Germany
Countries
Germany
Tags
russian intelligence operations, Illegal spies, Germany, Shortwave radio, Hybrid warfare, BfV, russia–ukraine war, Counterintelligence, Illegals, Spy arrests
Nodes
Node 2: 5th Column
Signal
Submitted
Apr 28, 2026, 14:21 UTC
Germany faces increased activity of Russian 'illegal' spies living undercover since 2022, with security services intensifying efforts to detect them amid wider European exposure.
Following Russia's 2022 invasion of Ukraine, German intelligence confirms heightened deployment of 'illegal' spies—Russian agents living under false identities without diplomatic cover—in Germany and across Europe. These spies lead normal civilian lives but conduct espionage on defense policies, military support to Ukraine, and sanctions against Russia. The case of the 2011 Anschlag spy couple remains the only known German exposure, but recent arrests in the Netherlands, Norway, Slovenia, and elsewhere reveal a broader network. Germany aided investigations especially regarding suspects traveling to the country. The use of traditional shortwave radio for instructions reportedly increased since the onset of war, a vintage tactic combined with modern covert methods. The German domestic security agency BfV, led by Thomas Haldenwang, stated that Russia uses its full espionage toolkit including potential hostile acts, emphasizing ongoing counterintelligence operations. This reflects Russia's adaptation after large diplomatic expulsions cut its overt spy presence in Europe, intensifying reliance on clandestine agents embedded deeply over long periods or under abbreviated training as 'Illegalen Light.'
Confidence: High
The article explicitly reports confirmed Russian hostile espionage activities in Germany by illegal spies using false identities, names named German intelligence and officials, and details arrests and methods, demonstrating a clear aggressor hybrid warfare event.
Source URL
https://tagesschau.de/investigativ/ndr-wdr/russland-spione-deutschland-anschlag-agentenfunk-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "c25f4c1f-7ff2-44c6-abdf-28eb6f113ba5",
"url": "https://tagesschau.de/investigativ/ndr-wdr/russland-spione-deutschland-anschlag-agentenfunk-100.html",
"source": "extension",
"status": "approved",
"category": "Intelligence & Espionage",
"subcategory": "Human Intelligence (HUMINT)",
"incident_type": "Recruitment of locals",
"country": "Germany",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"russian intelligence operations",
"Illegal spies",
"Germany",
"Shortwave radio",
"Hybrid warfare",
"BfV",
"russia–ukraine war",
"Counterintelligence",
"Illegals",
"Spy arrests"
],
"nodes": [
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Land",
"headline": "Russian 'Illegal' Spies Operating in Germany Undercover Since Start of Ukraine War",
"description": "Since the start of the Russian invasion of Ukraine in February 2022, multiple Russian 'illegal' spies using false identities have been uncovered in several European countries, including Germany, according to German security agencies. The German Federal Office for the Protection of the Constitution (BfV) President Thomas Haldenwang confirmed ongoing intensive efforts to detect these undercover spies, who live seemingly normal lives but secretly gather intelligence. These 'illegal' agents operate without diplomatic immunity and face severe prison sentences if caught. Since Russia's diplomatic personnel were heavily reduced due to expulsions after the war began, Russia increasingly relies on these undercover agents. The operatives use classic methods like shortwave radio for mission instructions. European services have noted a rise in activity of suspected Russian shortwave transmitters, indicating possible renewed deployment or increased numbers of these spies in Europe. Germany is a key target for espionage efforts, focusing on defense policies, armament, Ukraine support, and sanctions against Russia. Arrests in neighboring countries, including a couple in Slovenia suspected of supporting other 'illegal' spies with funds, suggest an extensive Russian intelligence network. The 2011 case of the Anschlag couple in Germany, caught after decades spying under fabricated Austrian identities, remains the only public German case so far, but security sources expect increased future activity. The BfV vows to vigorously counter these threats amid growing concerns about sabotage and espionage related to the Ukraine conflict.",
"summary_short": "Germany faces increased activity of Russian 'illegal' spies living undercover since 2022, with security services intensifying efforts to detect them amid wider European exposure.",
"summary_extended": "Following Russia's 2022 invasion of Ukraine, German intelligence confirms heightened deployment of 'illegal' spies—Russian agents living under false identities without diplomatic cover—in Germany and across Europe. These spies lead normal civilian lives but conduct espionage on defense policies, military support to Ukraine, and sanctions against Russia. The case of the 2011 Anschlag spy couple remains the only known German exposure, but recent arrests in the Netherlands, Norway, Slovenia, and elsewhere reveal a broader network. Germany aided investigations especially regarding suspects traveling to the country. The use of traditional shortwave radio for instructions reportedly increased since the onset of war, a vintage tactic combined with modern covert methods. The German domestic security agency BfV, led by Thomas Haldenwang, stated that Russia uses its full espionage toolkit including potential hostile acts, emphasizing ongoing counterintelligence operations. This reflects Russia's adaptation after large diplomatic expulsions cut its overt spy presence in Europe, intensifying reliance on clandestine agents embedded deeply over long periods or under abbreviated training as 'Illegalen Light.'",
"actor_primary": "Thomas Haldenwang",
"target_primary": null,
"location_text": "Germany",
"location_region": null,
"location_coordinates_lat": 51.1657,
"location_coordinates_lon": 10.4515,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article explicitly reports confirmed Russian hostile espionage activities in Germany by illegal spies using false identities, names named German intelligence and officials, and details arrests and methods, demonstrating a clear aggressor hybrid warfare event.",
"event_time_utc": "2024-06-12T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-04-28T14:21:00.731Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Jun 12, 2024, 00:00 UTC
Event time confidence
exact
Location
Germany
Primary actor
Thomas Haldenwang
Country
Germany
Countries
Germany
Tags
russian intelligence operations, Illegal spies, Germany, Shortwave radio, Hybrid warfare, BfV, russia–ukraine war, Counterintelligence, Illegals, Spy arrests
Nodes
Node 2: 5th Column