A few thousand pounds, a Telegram account, and a bottle of accelerant. That's all it took for the Kremlin to bring its shadow war directly to the front door of British Prime Minister Keir Starmer.
If you read the initial headlines about the convictions of Roman Lavrynovych and Stanislav Carpiuc at the Old Bailey, you might have thought this was just a run-of-the-mill, bizarre local crime story. Two young men, desperate for cash, setting fire to a car and a couple of properties in north London. But look past the surface. This wasn't a random act of urban chaos. A deep-dive investigation by the BBC has exposed the puppet master behind the matches: a 23-year-old Russian diplomat named Evgeny Lyukshin, operating under the digital handle "EL Money."
Moscow has radically upgraded its playbook. They aren't just hacking servers or poisoning former spies with exotic nerve agents anymore. They're using low-level, completely oblivious proxies to commit violent arson on our streets, then using far-right internet trolls to twist the narrative into a weapon of mass confusion. It's cheap, it's chaotic, and honestly, it's working better than anyone wants to admit.
The Proxy Trap in North London
The mechanics of the May 2025 attacks reveal exactly how cold-blooded this operation was. Lyukshin didn't recruit hardcore ideological saboteurs. He went fishing in Telegram groups where vulnerable immigrants look for gig work.
He found Roman Lavrynovych, a 22-year-old Ukrainian builder living in London, who desperately needed money. Operating as "EL Money," the young Russian diplomat offered cash and even the promise of Russian citizenship. Lavrynovych had no idea who he was actually targeting. When police later asked him if he knew Keir Starmer, he flatly admitted he'd never even heard the name.
The timeline of the attacks shows a deliberate, escalating campaign.
- May 8, 2025: A Toyota vehicle previously owned by Starmer is set ablaze on a street in Kentish Town.
- May 11, 2025: A fire breaks out at a block of flats in Islington where Starmer used to live.
- May 12, 2025: The front door of Starmer’s former home in Kentish Town is torched. Inside, the Prime Minister's sister-in-law, her partner, and her daughter are sleeping.
Right after the third attack, the digital handler texted Lavrynovych to burn his clothes and promised a payout in cryptocurrency, adding a chilling realization: "Look, you attacked the home of a very high-ranking person in Britain."
The promised thousands of pounds? Lavrynovych never saw a single penny. Instead, he got a one-way ticket to a British prison after being found guilty of conspiracy to commit arson and reckless endangerment of life.
The Invisible Weaponization of the Far Right
The physical fires were only phase one. The real genius—and the real terror—of this modern Russian strategy is phase two: the information warfare that follows the smoke.
As soon as the fires were extinguished, a wildly offensive and completely fabricated conspiracy theory flooded the internet. The rumor claimed that the Ukrainian suspects were male sex workers and implied Starmer was caught up in a sordid personal scandal.
This wasn't just random internet noise. It was a classic, textbook example of a Russian "reflexive control" operation. Hostile state agents didn't even need to build the infrastructure to spread the lie. They just dropped the match into the British cultural landscape and let homegrown polarization do the heavy lifting.
Fringe political figures and far-right agitators like Tommy Robinson immediately picked up the story, blasting it across X, YouTube, and TikTok. It even made its way onto physical placards at street protests. To close the loop, Kirill Dmitriev—a special envoy to Vladimir Putin—personally reposted Robinson's garbage on X.
By mapping the digital footprint of the lie, organizations like the Center for Countering Digital Hate showed exactly how Russia weaponizes local biases. They mixed homophobia, deep-seated anti-establishment anger, and anti-immigrant sentiment into a toxic cocktail. The goal wasn't to convince everyone the lie was true; it was to exhaust the public, erode trust in leadership, and paint Western democracy as morally decaying.
The Cheap Reality of Hybrid Warfare
We need to stop thinking of foreign intelligence threats as slick, tuxedo-wearing operatives. The UK expelled over 600 Russian operatives, including 400 suspected spies, following the 2018 Salisbury novichok poisoning. That massive cleanup forced Moscow's hand. They can't easily put boots on the ground anymore, so they've outsourced the work.
This is decentralized, cut-rate sabotage. The BBC's wider look into Lyukshin's digital footprint revealed he was also ordering local British vandals to spray-paint Islamic declarations of faith on a defunct Debenhams in Bristol, and hiring others to plaster anti-Muslim posters designed to look like they were written by radical Hindus.
It is calculated chaos. They want communities fighting communities. They want the police chasing ghosts. And they're doing it all for a few thousand dollars worth of Bitcoin and some Telegram messages.
Western nations are struggling to counter this because our legal and political systems aren't built for it. When Lavrynovych and Carpiuc stood trial at the Old Bailey, they were prosecuted purely for arson. The jury wasn't even allowed to consider the geopolitical puppet strings because, strictly speaking under the law, the motive was financial, not ideological.
How We Fight Back Against Shadow Operations
If we keep treating these events as isolated criminal acts, we've already lost. G7 leaders meeting in Évian-les-Bains have openly acknowledged that Western democracies are dealing with these proxy strikes on a daily basis. To actually protect our infrastructure and our communities, the response needs to shift from reactive policing to active systemic defense.
First, the financial plumbing of these operations has to be choked out. The UK’s decision to slap 70 new sanctions on Russia’s energy networks, military procurement chains, and the "shadow fleet" of oil tankers is a necessary macro-step. But on a micro-level, crypto exchanges must face harsher regulatory crackdowns to block the specific anonymous wallets state handlers use to fund street-level crimes.
Second, digital hygiene isn't a luxury anymore; it's national security. Platforms like Telegram, X, and TikTok cannot continue to treat state-sponsored disinformation pipelines as mere "free speech." When a hostile nation’s diplomatic corps is actively using messaging apps to source arsonists from local job boards, the platforms hosting those groups bear a direct responsibility to clean house.
Finally, we have to look in the mirror. The only reason Russia's narrative warfare works is because we are so willing to swallow divisive lies if they match our political grudges. The next time a bizarre, scandalous story breaks online that perfectly feeds into your worst assumptions about a politician or a community, don't share it. Take a beat, look for the source, and ask yourself who actually wins if you get angry.
