Adversary Intelligence — 2026-07-31

FSB Claims Ukrainian Intelligence Recruiting Russians for Sabotage via Telegram Dating Bot

BLUFMoscow is leveraging documented youth recruitment cases to construct a dual-purpose justification for expanded digital surveillance and coercive action against Telegram's operational independence in Russia.

The FSB stated that Ukrainian intelligence services recruited Russians for sabotage and terrorism through the Telegram dating chatbot "Daivinchik/Leo," with operatives posing as young women to build online relationships with Russian men before pivoting to phishing links and geolocation requests 123. Russian authorities said fake law enforcement contacts then coerced targets, claiming their money or shared coordinates had aided Ukrainian forces, into carrying out armed attacks on police and arson against transport, energy, and financial targets 23. The FSB and Interior Ministry reported 46 arrests of users aged 12 to 22 across 16 Russian regions since July 2025, with the Investigative Committee opening cases under terrorism, sabotage, and minor-recruitment statutes 13. The FSB also accused Telegram of failing to remove the bot despite Roskomnadzor blacklisting it in December over child pornography and "LGBT propaganda" content, and separately blamed founder Pavel Durov for enabling coordination of attacks on the platform 124.

Analysis
The FSB's disclosure functions as a domestic security narrative tying documented teenage recruitment cases to Kyiv's intelligence services while indicting Telegram's moderation practices, reinforcing Moscow's parallel push to compel platform compliance or justify further restrictions. Framing the scheme as targeting minors as young as 12 sharpens public alarm and provides legal cover for expanded surveillance of youth dating and messaging apps, and pairing the claims with renewed criticism of Durov links domestic radicalization and platform accountability into one justification for state action against Telegram. Sourcing traces to a single FSB statement carried by two primary Russian wires and translated rather than independently corroborated by the secondary outlets. Continued regional arrests indicate the FSB will keep publicizing cases through the remainder of 2026, though the pattern may equally reflect domestic radicalization or petty crime reframed as foreign tradecraft to deflect from platform-security failures.

4 sources