Poland charges two Ukrainians with espionage and sabotage, investigates Russian intelligence link

Two Ukrainian citizens have been arrested in Poland and charged with espionage on behalf of a foreign intelligence service and sabotage, Poland’s Internal Security Agency (ABW) announced. The statement was carried on 10 November 2026 by OFFNews and 24 Chasa via Reuters and the Bulgarian News Agency (BTA). Polish investigators allege that Russian intelligence services assigned them their tasks. At the time of publication, Flank had found no independent confirmation of the allegations that Russia commissioned the operations or of the defendants’ actions.

Reconnaissance of military sites and critical infrastructure

Poland’s intelligence services coordinator, Tomasz Siemoniak, said ABW officers had detained the two men, aged 24 and 25, in Mińsk Mazowiecki. His statement of 10 November was reproduced by SEGA. According to Siemoniak, the suspects reconnoitred and photographed military sites and critical infrastructure.

ABW alleges that the tasks covered sites across the country. No specific facilities or information gathered were identified. The bringing of charges does not mean that guilt has been established in court.

Arson using plates resembling Ukrainian military number plates

Investigators allege that, before setting the cars on fire, the two defendants fitted them with replacement number plates intended to resemble those used on Ukrainian military vehicles. They also allege that the defendants were paid for their tasks, including in cryptocurrency. Prosecutors allege that Russian intelligence services commissioned the sabotage.

In Flank’s assessment, if the replacement of the plates is proven, the visible markings were part of the plan rather than a reliable indicator of who the vehicles belonged to. The defendants’ citizenship alone does not establish that a state commissioned the operations or that Ukrainian institutions were involved. The allegation of cryptocurrency payments may guide the financial investigation, but without transaction information it does not establish who paid.

Conflicting accounts of the alleged aim of the sabotage

The reports differ on a substantive point. OFFNews quotes prosecutors as saying the actions were intended to stir up “anti-Ukrainian sentiment”, while 24 Chasa and SEGA refer to “anti-Russian sentiment”. Without a verified original text from prosecutors, there is no basis for favouring either wording. The difference changes the meaning of the alleged political intent.

The exact dates of the arrests, the locations and dates of the alleged arson attacks, the number of cars and the extent of the damage remain unclear. Nor has evidence been presented of the tasking or the payments made. The media reports relay the Polish authorities’ account but contain no separate independent verification of the allegations. The investigation is continuing and further information may emerge.