Russia Fifth Column Operations in Ukraine and Europe

Collaborators in Ukraine

• The Russian military's rapid seizure of territory in early 2022 — including the failed attempt to take Kyiv — relied on pre-positioned networks of collaborators with maps, contact information for local officials, and advance preparation for establishing Russian administrative control; the speed of Russian administrative setup in Kherson, Zaporizhzhia, and parts of Kharkiv oblast in the first weeks of the invasion suggests advance preparation that pre-positioned human networks could explain
• Categories of collaboration: Ukrainian law distinguishes between collaboration (свідома співпраця — conscious cooperation) involving different levels of complicity; Ukrainian law enforcement and prosecutors have opened thousands of collaboration cases ranging from individuals who provided information about neighbours to Russian forces, to people who accepted administrative positions in Russian occupation structures, to persons who participated in staged 'referendums' on annexation; the full legal and moral spectrum from genuine collaborators to individuals coerced under occupation conditions is represented across these cases
• Regional variation: collaboration rates varied significantly by region; areas with substantial Russian-speaking populations but Ukrainian civic identity (much of Kharkiv oblast) showed generally low collaboration rates; areas with longer histories of Russian political influence, economic dependency on Russia, and weaker pre-war Ukrainian civic identity showed higher rates; this regional variation provides evidence against simplistic 'language determines loyalty' narratives while confirming that historical political alignment created structural vulnerability
• Post-liberation accountability: territories liberated by Ukrainian forces have seen prosecution of collaboration cases, raising complex questions about proportionality, coercion versus choice, and the distinction between active harm-doing and passive acquiescence; Ukraine's law enforcement has been criticised both for excessive prosecution of marginal collaboration and for insufficient prosecution of active collaborators who fled with Russian forces

European Political Networks

• Russia has invested decades in cultivating political relationships in European countries — particularly with parties that share ideological affinity (far-right nationalist parties with anti-NATO positions, far-left parties with anti-Americanism tendencies) or that can be cultivated through financial ties (business interests in Russia, loans from Russian-connected banks); the Kremlin's European political network served both as an intelligence-gathering mechanism and as a vehicle for spreading narratives sympathetic to Russian positions
• Documented financial ties: investigations by European governments and journalism organisations have documented financial relationships between Russian-connected entities and multiple European political movements — including the Marine Le Pen's National Rally in France (a €9 million loan from a Russian-linked Czech bank), Alternative for Germany (AfD) leadership contacts with Russian intelligence-linked individuals, Italian politicians' meetings with Russian oligarchs, and similar ties in Hungary, Slovakia, Bulgaria, and other EU member states
• Narrative amplification: Russia's primary goal in these European political relationships is narrative amplification — ensuring that Russian-preferred framings (NATO provocation, Ukrainian corruption, need for negotiation at any price, war fatigue) receive authentic-seeming advocacy from domestic European voices rather than being obviously Russian-sourced; the political networks serve as narrative launderers
• Post-2022 attrition: many of Russia's European political relationships were damaged or severed after the full-scale invasion made association with Russian positions politically costly; some politicians who had previously amplified Russian narratives moved to support Ukraine; the narrowed but still-operational pro-Russian political networks that remain in 2026 are concentrated in countries with specific historical relationships with Russia (Hungary, Slovakia) and in far-right movements that maintain anti-NATO orientations

FSB and GRU Networks

• Russia's intelligence services maintain the human infrastructure of fifth column operations; the FSB's Second Service (counter-intelligence with responsibility for Ukraine) managed networks in Ukraine that in some cases dated back two decades, recruiting individuals in strategic positions — police, security services, military, government — who were maintained as dormant assets until activated by the invasion
• The Kherson Security Service (SBU) penetration case illustrates the depth of FSB pre-positioning: SBU counterintelligence investigations after the liberation of Kherson identified multiple individuals who had been SBU personnel compromised by FSB recruitment, who had provided operational intelligence to Russian forces and facilitated the initial Russian occupation administration — confirming that the FSB had pre-positioned agents inside Ukrainian security services before the invasion
• SBU counter-intelligence responses: the SBU launched significant counter-intelligence operations after the full-scale invasion, identifying and detaining hundreds of individuals assessed as Russian agents or FSB-recruited informants; the operations included purges of SBU personnel with suspect ties, targeting of collaborator networks in occupied and liberated areas, and disruption of Russian agent networks in Ukrainian rear areas that were conducting targeting intelligence for Russian missile strikes

Assessment and Outlook

• Russia's fifth column operations delivered mixed results: in Ukraine, the pre-positioned networks enabled rapid initial occupation administration but failed to prevent Ukrainian military resistance from achieving the strategic defeats of the Kyiv campaign failure and the Kharkiv, Kherson, and northern Luhansk liberations; in Europe, the political networks succeeded in slowing Western support in specific instances but failed to prevent the overall trajectory of Western aid to Ukraine
• Ukraine's counter-intelligence response has significantly attrited Russian agenture within Ukraine over the course of the war; the SBU's effectiveness in identifying and neutralising Russian networks has improved substantially since the full-scale invasion exposed the scale of Russian penetration that pre-war counter-intelligence had underestimated
• The European political fifth column represents a persistent strategic challenge rather than a short-term operational tool; cultivating political influence in democracies is a long-cycle investment that produces results over years and decades, and Russia's investments in European political networks will not be fully disrupted by the war; the counter-measures — transparency requirements, foreign funding restrictions, and the political costs of pro-Russian association — are partially effective but not comprehensive

Frequently Asked Questions