
STR: Suspicious Transaction Report How Russian Sabotage Is Financed and How to Disrupt It
Jan 23, 2026
Matthew Redhead, a specialist in illicit finance and hybrid warfare, and Tom Keatinge, an expert on finance and security policy, unpack how Russian sabotage is funded. They explore disposable operatives, social-media recruitment, crypto and stablecoin payments. Discussion highlights tracing repeat wallet patterns, OTC crypto risks and why financial intelligence is a key disruption tool.
AI Snips
Chapters
Transcript
Episode notes
Gig‑Economy Recruitment Model
- Recruitment mirrors gig‑economy and money‑mule models using social media and messaging.
- Tasks range from surveillance for a few hundred euros to major attacks for several thousand.
Crypto As Functional Backbone
- Crypto (including stablecoins) functions as the operational backbone for fast cross‑border payments.
- Networks combine crypto with cash and in‑kind payments for hybrid resilience.
Speed Over Sophisticated Anonymity
- Networks prioritise speed and volume over sophisticated anonymity techniques.
- That pragmatic choice creates traceable footprints investigators can exploit.


