Ex-Wirecard Executive Jan Marsalek Linked to Russian and Chinese Espionage Activities

Intelligence & EspionageHuman Intelligence (HUMINT)Recruitment of locals

Aggressor

Summary

Fugitive ex-Wirecard executive Jan Marsalek is implicated in espionage for Russia and China, with chats revealing military equipment deals and spying plans in Europe.

Jan Marsalek, the fugitive former Wirecard executive wanted for international fraud, is also suspected of acting as a Russian agent and engaging with Chinese contacts to facilitate espionage and military equipment deals. Analysis of approximately 200,000 Telegram chats between Marsalek and Orlin Roussev, a Bulgarian leader of spies convicted in London, reveals attempts to broker deals involving military hardware captured in Ukraine and possible covert surveillance of Uigur minorities in Munich on behalf of China. Marsalek also proposed collaboration on satellite communications similar to Starlink to support Russian military needs and discussed potential espionage activities targeting US military bases in Germany. Despite Marsalek's apparent boasting, some contacts' authenticity and concretization of deals remain unclear. The London court sentenced six Bulgarians to over 50 years collectively for spying for Russia linked to Marsalek.

Classification

Confidence: High

This report details a concrete case of a fugitive actor acting as a Russian agent, engaging with Chinese contacts for espionage and military equipment deals, supported by court sentences and detailed chat evidence.

Source URL

https://tagesschau.de/investigativ/ndr-wdr/marsalek-helfer-chats-china-100.html

Open source

Provenance

Publisher: extension
Submitted: Apr 28, 2026, 12:29 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Jan 25, 2023, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "e587417e-b904-476d-9ac1-afbb8b254016",
  "url": "https://tagesschau.de/investigativ/ndr-wdr/marsalek-helfer-chats-china-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "Germany",
  "source_reliability": "A",
  "info_credibility": "3",
  "tags": [
    "Jan Marsalek",
    "russian intelligence operations",
    "Chinese military",
    "Uigur surveillance",
    "Telegram chats",
    "Military equipment trade",
    "Kamikaze drones",
    "Bulgarian spies",
    "Wirecard scandal",
    "Hybrid warfare"
  ],
  "nodes": [
    "Node 1: Borders",
    "Node 2: 5th Column"
  ],
  "countries": [
    "Germany"
  ],
  "where_text": "Land",
  "headline": "Ex-Wirecard Executive Jan Marsalek Linked to Russian and Chinese Espionage Activities",
  "description": "Jan Marsalek, the fugitive former Wirecard executive wanted for international fraud, is also suspected of acting as a Russian agent and engaging with Chinese contacts to facilitate espionage and military equipment deals. Analysis of approximately 200,000 Telegram chats between Marsalek and Orlin Roussev, a Bulgarian leader of spies convicted in London, reveals attempts to broker deals involving military hardware captured in Ukraine and possible covert surveillance of Uigur minorities in Munich on behalf of China. Marsalek also proposed collaboration on satellite communications similar to Starlink to support Russian military needs and discussed potential espionage activities targeting US military bases in Germany. Despite Marsalek's apparent boasting, some contacts' authenticity and concretization of deals remain unclear. The London court sentenced six Bulgarians to over 50 years collectively for spying for Russia linked to Marsalek.",
  "summary_short": "Fugitive ex-Wirecard executive Jan Marsalek is implicated in espionage for Russia and China, with chats revealing military equipment deals and spying plans in Europe.",
  "summary_extended": null,
  "actor_primary": "Jan Marsalek",
  "target_primary": null,
  "location_text": "Munich",
  "location_region": null,
  "location_coordinates_lat": 48.1351,
  "location_coordinates_lon": 11.582,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "This report details a concrete case of a fugitive actor acting as a Russian agent, engaging with Chinese contacts for espionage and military equipment deals, supported by court sentences and detailed chat evidence.",
  "event_time_utc": "2023-01-25T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-04-28T12:29:00.034Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "independent_sources"
}

Public assessmentReliability: StrongSeverity: SignificantAttribution: HighIndependence confirmedTime: Same dayLocation: Approximate

Source reliability

Info credibility

Event time

Jan 25, 2023, 00:00 UTC

Event time confidence

pm24h

Location

Munich

Primary actor

Jan Marsalek

Country

Germany

Countries

Germany

Tags

Jan Marsalek, russian intelligence operations, Chinese military, Uigur surveillance, Telegram chats, Military equipment trade, Kamikaze drones, Bulgarian spies, Wirecard scandal, Hybrid warfare

Nodes

Node 1: Borders, Node 2: 5th Column

Loading signal...

{ "id": "e587417e-b904-476d-9ac1-afbb8b254016", "url": "https://tagesschau.de/investigativ/ndr-wdr/marsalek-helfer-chats-china-100.html", "source": "extension", "status": "approved", "category": "Intelligence & Espionage", "subcategory": "Human Intelligence (HUMINT)", "incident_type": "Recruitment of locals", "country": "Germany", "source_reliability": "A", "info_credibility": "3", "tags": [ "Jan Marsalek", "russian intelligence operations", "Chinese military", "Uigur surveillance", "Telegram chats", "Military equipment trade", "Kamikaze drones", "Bulgarian spies", "Wirecard scandal", "Hybrid warfare" ], "nodes": [ "Node 1: Borders", "Node 2: 5th Column" ], "countries": [ "Germany" ], "where_text": "Land", "headline": "Ex-Wirecard Executive Jan Marsalek Linked to Russian and Chinese Espionage Activities", "description": "Jan Marsalek, the fugitive former Wirecard executive wanted for international fraud, is also suspected of acting as a Russian agent and engaging with Chinese contacts to facilitate espionage and military equipment deals. Analysis of approximately 200,000 Telegram chats between Marsalek and Orlin Roussev, a Bulgarian leader of spies convicted in London, reveals attempts to broker deals involving military hardware captured in Ukraine and possible covert surveillance of Uigur minorities in Munich on behalf of China. Marsalek also proposed collaboration on satellite communications similar to Starlink to support Russian military needs and discussed potential espionage activities targeting US military bases in Germany. Despite Marsalek's apparent boasting, some contacts' authenticity and concretization of deals remain unclear. The London court sentenced six Bulgarians to over 50 years collectively for spying for Russia linked to Marsalek.", "summary_short": "Fugitive ex-Wirecard executive Jan Marsalek is implicated in espionage for Russia and China, with chats revealing military equipment deals and spying plans in Europe.", "summary_extended": null, "actor_primary": "Jan Marsalek", "target_primary": null, "location_text": "Munich", "location_region": null, "location_coordinates_lat": 48.1351, "location_coordinates_lon": 11.582, "location_precision": "Approximate", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "This report details a concrete case of a fugitive actor acting as a Russian agent, engaging with Chinese contacts for espionage and military equipment deals, supported by court sentences and detailed chat evidence.", "event_time_utc": "2023-01-25T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-04-28T12:29:00.034Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "approximate", "time_precision_band": "within_24h", "severity_band": "significant", "attribution_confidence_band": "high", "attribution_basis": "independent_sources" }