Youths in Riga purchased multiple Premium Plus prepaid cards near a bus to Moscow, likely for resale in Russia to circumvent Western sanctions on digital services.

Economic & Financial PressureSanctions Evasion & SmugglingSanctions busting networks

Aggressor

Summary

On the afternoon of December 9, 2024, an observer in Riga, Latvia noticed a group of youths purchasing about ten Premium Plus prepaid cards with denominations of 50 and 100 euros from a Narvesen store near the bus station. The youths then proceeded to the bus platform for a 16:30 departure to Moscow, Russia. It is suspected that these prepaid cards are destined for resale in Moscow, allowing Russians to circumvent sanctions by paying for Western digital services like PlayStation games, PS Plus online subscriptions, and various app purchases through VPNs. While direct proof is absent, the analytics suggest this method will expand, providing a covert sanctions evasion channel involving transit through Latvia. Continuous monitoring of Russian online classified ads suggests potential largescale growth of this phenomenon.

Classification

Confidence: Medium

The event describes a suspected Russian sanctions evasion method involving prepaid cards purchased in Latvia and transported to Russia, indicative of hostile economic pressure tactics. It does not describe defensive measures by NATO or allies.

Source URL

https://x.com/i/web/status/1866494533401231769

Open source

Provenance

Publisher: extension
Submitted: Feb 14, 2026, 12:22 UTC
Last updated: Nov 8, 2026, 19:58 UTC
Event time: Dec 9, 2024, 14:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "dd485c19-7f58-40b2-b8a0-573be6db8f38",
  "url": "https://x.com/i/web/status/1866494533401231769",
  "source": "extension",
  "status": "approved",
  "category": "Economic & Financial Pressure",
  "subcategory": "Sanctions Evasion & Smuggling",
  "incident_type": "Sanctions busting networks",
  "country": "Latvia",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Sanctions",
    "5th column",
    "Latvia",
    "sanctions",
    "Prepaid Cards",
    "Russia",
    "Narvesen",
    "Riga",
    "Travel",
    "Digital Payments",
    "VPN"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Land",
  "headline": null,
  "description": "On December 9, 2024, near the Narvesen store at the bus station in Riga, Latvia, a group of youths were observed purchasing approximately ten Premium Plus prepaid cards worth 50 and 100 euros each. These cards are suspected to be taken by the youths onto a platform for a bus departing at 16:30 from Riga to Moscow, Russia. The cards are likely resold in Moscow to bypass Western sanctions, enabling payment for Western digital services such as PlayStation games, PS Plus subscriptions, and app store purchases, despite a 50 euro online purchase limit. This activity indicates a possible emerging channel for sanctions evasion using prepaid cards purchased in Latvia and transported to Russia via bus connections.",
  "summary_short": "Youths in Riga purchased multiple Premium Plus prepaid cards near a bus to Moscow, likely for resale in Russia to circumvent Western sanctions on digital services.",
  "summary_extended": "On the afternoon of December 9, 2024, an observer in Riga, Latvia noticed a group of youths purchasing about ten Premium Plus prepaid cards with denominations of 50 and 100 euros from a Narvesen store near the bus station. The youths then proceeded to the bus platform for a 16:30 departure to Moscow, Russia. It is suspected that these prepaid cards are destined for resale in Moscow, allowing Russians to circumvent sanctions by paying for Western digital services like PlayStation games, PS Plus online subscriptions, and various app purchases through VPNs. While direct proof is absent, the analytics suggest this method will expand, providing a covert sanctions evasion channel involving transit through Latvia. Continuous monitoring of Russian online classified ads suggests potential largescale growth of this phenomenon.",
  "actor_primary": "Youth group purchasing prepaid cards in Riga",
  "target_primary": null,
  "location_text": "Narvesen store near Riga bus station",
  "location_region": "Riga",
  "location_coordinates_lat": 56.9496,
  "location_coordinates_lon": 24.1052,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "Medium",
  "classification_rationale": "The event describes a suspected Russian sanctions evasion method involving prepaid cards purchased in Latvia and transported to Russia, indicative of hostile economic pressure tactics. It does not describe defensive measures by NATO or allies.",
  "event_time_utc": "2024-12-09T14:00:00.000Z",
  "end_time_utc": "2024-12-09T14:30:00.000Z",
  "event_time_confidence": "pm1h",
  "created_at": "2026-02-14T12:22:55.407Z",
  "updated_at": "2026-11-08T19:58:20.501Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_1h",
  "severity_band": "minor",
  "attribution_confidence_band": "low",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: MinorAttribution: LowSingle sourceTime: Within 1 hourLocation: Approximate

Source reliability

Info credibility

Event time

Dec 9, 2024, 14:00 UTC

End time

Dec 9, 2024, 14:30 UTC

Event time confidence

pm1h

Location

Narvesen store near Riga bus station

Region

Riga

Primary actor

Youth group purchasing prepaid cards in Riga

Country

Latvia

Tags

Sanctions, 5th column, Latvia, sanctions, Prepaid Cards, Russia, Narvesen, Riga, Travel, Digital Payments, VPN

Loading signal...

{ "id": "dd485c19-7f58-40b2-b8a0-573be6db8f38", "url": "https://x.com/i/web/status/1866494533401231769", "source": "extension", "status": "approved", "category": "Economic & Financial Pressure", "subcategory": "Sanctions Evasion & Smuggling", "incident_type": "Sanctions busting networks", "country": "Latvia", "source_reliability": "C", "info_credibility": "3", "tags": [ "Sanctions", "5th column", "Latvia", "sanctions", "Prepaid Cards", "Russia", "Narvesen", "Riga", "Travel", "Digital Payments", "VPN" ], "nodes": [], "countries": [], "where_text": "Land", "headline": null, "description": "On December 9, 2024, near the Narvesen store at the bus station in Riga, Latvia, a group of youths were observed purchasing approximately ten Premium Plus prepaid cards worth 50 and 100 euros each. These cards are suspected to be taken by the youths onto a platform for a bus departing at 16:30 from Riga to Moscow, Russia. The cards are likely resold in Moscow to bypass Western sanctions, enabling payment for Western digital services such as PlayStation games, PS Plus subscriptions, and app store purchases, despite a 50 euro online purchase limit. This activity indicates a possible emerging channel for sanctions evasion using prepaid cards purchased in Latvia and transported to Russia via bus connections.", "summary_short": "Youths in Riga purchased multiple Premium Plus prepaid cards near a bus to Moscow, likely for resale in Russia to circumvent Western sanctions on digital services.", "summary_extended": "On the afternoon of December 9, 2024, an observer in Riga, Latvia noticed a group of youths purchasing about ten Premium Plus prepaid cards with denominations of 50 and 100 euros from a Narvesen store near the bus station. The youths then proceeded to the bus platform for a 16:30 departure to Moscow, Russia. It is suspected that these prepaid cards are destined for resale in Moscow, allowing Russians to circumvent sanctions by paying for Western digital services like PlayStation games, PS Plus online subscriptions, and various app purchases through VPNs. While direct proof is absent, the analytics suggest this method will expand, providing a covert sanctions evasion channel involving transit through Latvia. Continuous monitoring of Russian online classified ads suggests potential largescale growth of this phenomenon.", "actor_primary": "Youth group purchasing prepaid cards in Riga", "target_primary": null, "location_text": "Narvesen store near Riga bus station", "location_region": "Riga", "location_coordinates_lat": 56.9496, "location_coordinates_lon": 24.1052, "location_precision": "Approximate", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "Medium", "classification_rationale": "The event describes a suspected Russian sanctions evasion method involving prepaid cards purchased in Latvia and transported to Russia, indicative of hostile economic pressure tactics. It does not describe defensive measures by NATO or allies.", "event_time_utc": "2024-12-09T14:00:00.000Z", "end_time_utc": "2024-12-09T14:30:00.000Z", "event_time_confidence": "pm1h", "created_at": "2026-02-14T12:22:55.407Z", "updated_at": "2026-11-08T19:58:20.501Z", "reliability_band": "strong", "location_precision_band": "approximate", "time_precision_band": "within_1h", "severity_band": "minor", "attribution_confidence_band": "low", "attribution_basis": "single_source" }