Adversary Intelligence — 2026-07-24

SBU Counterintelligence Arrests Two FSB Agents in Kyiv Who Registered 76 Starlink Terminals for Russian Strike Coordination

BLUFExploitation of a postal-worker insider to bypass Starlink registration controls reveals a structural verification gap that SBU arrests alone cannot close without systemic reform of the activation chain.

The SBU's counterintelligence directorate arrested two unemployed Kyiv residents on charges of registering 76 Starlink terminals for Russia's FSB, according to an SBU press announcement 12. The SBU said the pair, recruited through Telegram channels advertising quick money, first registered the terminals in their own names and passed the credentials to an FSB handler, then used forged Ukrainian passports and the help of a postal worker to activate additional terminals while bypassing Starlink's verification checks 123. Russian forces intended to use the terminals to coordinate missile and drone strikes and to locate Ukrainian electronic-warfare systems shielding frontline positions, the SBU said 12. Searches at the suspects' residences turned up phones documenting their FSB contacts, and the SBU said it blocked all 76 terminals; both face treason charges under Ukraine's martial-law criminal code carrying life imprisonment with asset confiscation 123.

Analysis
The arrests confirm a repeatable FSB pattern for accessing Ukraine's Starlink network: recruit unemployed locals through Telegram job lures, register terminals under clean identities, then use forged passports and a compromised postal-service insider to defeat verification checks. That insider access point is the operationally significant detail, pointing to a structural gap in the verification chain that other cells could replicate, and Kyiv's disclosure of a similar network within weeks suggests the loophole has been exploited repeatedly rather than as an isolated incident. Reporting rests on a single SBU release, with other outlets restating rather than independently corroborating it, and the disclosure may function as much as a deterrence signal against Telegram-recruited registration as evidence of a larger network. Whether the postal-verification gap itself has been closed, or only this cell, remains unresolved.

5 sources

SBU Blocks 76 Illegal Starlink Terminals Registered by Russian Agents in Kyiv - United24 Media
SBU arrests two FSB agents in Kyiv who registered 76 Starlink terminals for Russian military - Mezha
СБУ у Києві викрила агентів ФСБ за реєстрацію 76 Starlink - LB.ua
Russian Agents Activate 76 Starlink Terminals in Kyiv, SBU Says - Kyiv Post
SBU press announcement on detention of two FSB agents in Kyiv for registering 76 Starlink terminals - Security Service of Ukraine (SBU) official channel