Adversary Intelligence — 2026-06-16

Court Convicts Two in Russian-Directed Arson Attacks on UK PM Starmer Homes as Investigations Identify SVR-Linked Handler

BLUFFormal UK designation of the identified SVR-linked handler remains unlikely within 90 days, leaving intact a covert action model Russia has already replicated across multiple NATO states.

On June 15, a London jury convicted Roman Lavrynovych, 22, and Stanislav Carpiuc, 27, of conspiracy to commit arson for the May 2025 attacks on properties linked to Prime Minister Starmer, acquitting a third defendant 12. Prosecutors said the handler, alias "El Money," directed Lavrynovych via Telegram and paid him roughly $4,000 in cryptocurrency; Counter Terrorism Policing London stated no evidence tied the tasker to a hostile state 1. BBC and Financial Times investigations named El Money as Evgeny Lyukshin, 23, a Russian diplomat and son of a senior Foreign Ministry official 12. The Insider found Lyukshin's father is registered at Moscow housing linked to SVR employees and that Lyukshin recruited Lavrynovych through Direct Action, a Russia-run fake far-right group 2.

Analysis
Formal UK designation of Lyukshin within 90 days of the conviction is unlikely: Counter Terrorism Policing declined state attribution at sentencing, and London's consistent restraint in comparable cases makes persona non grata action improbable absent a confirmed intelligence chain. The conviction exposes a replicable Russian covert action model, validated primarily by The Insider's investigation, using diplomatic cover, cryptocurrency payments, and fabricated extremist fronts that Direct Action has already deployed across Sweden, Spain, and other NATO states. Lyukshin may have acted on personal initiative through intelligence-adjacent connections rather than under formal SVR direction, preserving Moscow's disavowal option. Moderate confidence rests on the absence of any designation commitment and London's consistent restraint pattern. Whether London designates within that window determines whether NATO treats collective Direct Action suppression as a coordinated option or concedes continued platform operation.

3 sources