The scheme relied on three core tactics: a deliberately formed hub company, a multi-country shell-company structure, and systematic documentation fraud.
The network was run through a Vienna-registered firm whose director is a 28-year-old Belarusian national . Austrian authorities arrested him in May 2026. He appeared before a judge in Vienna on August 12, 2026, on charges of violating the EU Sanctions Act and the Foreign Trade and Payments Act .
The network operated through shell companies spanning at least eight countries, including Turkey, the United Arab Emirates, Spain, Hong Kong, Belarus, Kyrgyzstan, South Korea, Poland, and Lithuania . Goods were routed through intermediary firms in Spain and Hong Kong before reaching Russia .
The Vienna company falsified end-user certificates, declaring that the equipment was destined for civilian customers in non-sanctioned countries, when it was actually being re-exported to Russian defense firms linked to Rostec . European manufacturers were led to believe the goods would remain in the transit countries .
The equipment was used to manufacture engines for cruise missiles (Marschflugkörper) and fighter jets, as well as other military hardware, for Rostec-affiliated Russian arms manufacturers .
This case illustrates a pattern that has become a central challenge for European enforcement agencies: