UK Dismantles Financial Network Bankrolling Jan Marsalek’s Spy Ring via Crypto
The United Kingdom’s National Crime Agency has announced that it has dismantled an intricate financial network used by intelligence services to bankroll the operations of a spy ring linked to former Wirecard executive Jan Marsalek. The cell comprised six Bulgarian nationals, whom a London court has already sentenced to lengthy prison terms for surveilling politicians and journalists, as well as discussing potential assassination plots.
The investigation began roughly a year ago, after the NCA shut down two major networks responsible for converting large volumes of cash into cryptocurrency and back again. These channels had moved billions of dollars across the globe. The agency has now clarified that one such network attempted to finance the Bulgarian espionage cell. The funds passed through a scheme known as “Smart,” overseen by businesswoman E. Zh., who has been held in France for more than a year in connection with a separate case. Her lawyer declined to comment on the investigators’ findings.
According to prosecutorial documents, Jan Marsalek—who collaborated with intelligence operatives and vanished from public view in 2020—covered the group’s expenses and allocated substantial sums to individual missions, at times reaching approximately £45,000. These funds were funneled through cryptocurrency channels, enabling the concealment of both their origins and their intended recipients.
The broader investigative context underscores the scale of the challenge. Criminal organizations worldwide are increasingly using cryptocurrency to obscure the flow of money. Last month, the United States seized $15 billion worth of Bitcoin after exposing a large-scale fraud scheme in Cambodia. Experts estimate that such operations may have inflicted more than $75 billion in losses on victims over the past four years.
The Smart and TGR networks mentioned in the NCA investigation relied on the Tether stablecoin, known for its high liquidity. These networks operated as illicit settlement centers: cash was collected in one country, while the equivalent value became instantly accessible in another. Their clientele ranged from sanctioned media outlets to major criminal syndicates, including the notorious Kinahan family.
Sal Melki, the NCA’s deputy director for economic crime, notes that the investigation reveals a chain stretching from street-level drug trafficking to global financial maneuvers tied to organized crime and state-directed operations.
E. Zh. had already been placed under international sanctions: U.S. authorities claim she helped transfer more than $100 million for a businessman who was moving funds to the UAE. The British agency, for its part, has detained 45 suspected participants in similar schemes over the past year and seized significant quantities of cash.
According to Melki, such networks, which employ sophisticated money-laundering tools, span the entire spectrum of illicit financial activity—from grassroots fundraising to evading international sanctions and acquiring assets through clandestine mechanisms.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.