How the network operated

The scheme relied on three core tactics: a deliberately formed hub company, a multi-country shell-company structure, and systematic documentation fraud.

Hub company and its director

The network was run through a Vienna-registered firm whose director is a 28-year-old Belarusian national . Austrian authorities arrested him in May 2026. He appeared before a judge in Vienna on August 12, 2026, on charges of violating the EU Sanctions Act and the Foreign Trade and Payments Act .

Shell companies across eight countries

The network operated through shell companies spanning at least eight countries, including Turkey, the United Arab Emirates, Spain, Hong Kong, Belarus, Kyrgyzstan, South Korea, Poland, and Lithuania . Goods were routed through intermediary firms in Spain and Hong Kong before reaching Russia .

Forged end-user certificates

The Vienna company falsified end-user certificates, declaring that the equipment was destined for civilian customers in non-sanctioned countries, when it was actually being re-exported to Russian defense firms linked to Rostec . European manufacturers were led to believe the goods would remain in the transit countries .

End users and military applications

The equipment was used to manufacture engines for cruise missiles (Marschflugkörper) and fighter jets, as well as other military hardware, for Rostec-affiliated Russian arms manufacturers .

Financial scale and seizures

• Investigators estimate that more than €3.3 million (approximately $3.82 million) worth of industrial goods were funneled through the network since 2022 .
• Authorities seized €140,000 worth of tools and machinery during the operation .
• The investigation is ongoing, with further arrests and charges possible .

Broader significance for EU export controls

This case illustrates a pattern that has become a central challenge for European enforcement agencies:

• Proliferation of intermediary hubs: Evasion networks increasingly use shell companies in Turkey, the UAE, the Balkans, Central Asia, and Hong Kong as transit points to obscure the final Russian destination .
• Documentation fraud: Forged end-user certificates remain one of the most common evasion techniques, requiring customs authorities across multiple jurisdictions to cross-check documentation in real time .
• Scale and speed: The €3.3 million figure, while modest in absolute terms, points to a steady pipeline of precision industrial inputs that are critical for Russia's missile and aviation production — components that Russia cannot easily source domestically .
• Enforcement gaps: The scheme operated for roughly four years (since 2022) before being detected, highlighting the difficulty national authorities face in tracking complex multi-country corporate structures, especially when shell companies are registered in jurisdictions with limited beneficial-ownership transparency .
• Parallel cases: This Austrian investigation comes alongside other European sanctions-evasion prosecutions, such as the June 2026 Brussels court convictions of three individuals for exporting prohibited items to Russia via intermediary nations , underscoring that enforcement is accelerating but remains reactive.

How the network operated

The scheme relied on three core tactics: a deliberately formed hub company, a multi-country shell-company structure, and systematic documentation fraud.

Hub company and its director

The network was run through a Vienna-registered firm whose director is a 28-year-old Belarusian national . Austrian authorities arrested him in May 2026. He appeared before a judge in Vienna on August 12, 2026, on charges of violating the EU Sanctions Act and the Foreign Trade and Payments Act .

Shell companies across eight countries

The network operated through shell companies spanning at least eight countries, including Turkey, the United Arab Emirates, Spain, Hong Kong, Belarus, Kyrgyzstan, South Korea, Poland, and Lithuania . Goods were routed through intermediary firms in Spain and Hong Kong before reaching Russia .

Forged end-user certificates

The Vienna company falsified end-user certificates, declaring that the equipment was destined for civilian customers in non-sanctioned countries, when it was actually being re-exported to Russian defense firms linked to Rostec . European manufacturers were led to believe the goods would remain in the transit countries .

End users and military applications

The equipment was used to manufacture engines for cruise missiles (Marschflugkörper) and fighter jets, as well as other military hardware, for Rostec-affiliated Russian arms manufacturers .

Financial scale and seizures

• Investigators estimate that more than €3.3 million (approximately $3.82 million) worth of industrial goods were funneled through the network since 2022 .
• Authorities seized €140,000 worth of tools and machinery during the operation .
• The investigation is ongoing, with further arrests and charges possible .

Broader significance for EU export controls

This case illustrates a pattern that has become a central challenge for European enforcement agencies:

• Proliferation of intermediary hubs: Evasion networks increasingly use shell companies in Turkey, the UAE, the Balkans, Central Asia, and Hong Kong as transit points to obscure the final Russian destination .
• Documentation fraud: Forged end-user certificates remain one of the most common evasion techniques, requiring customs authorities across multiple jurisdictions to cross-check documentation in real time .
• Scale and speed: The €3.3 million figure, while modest in absolute terms, points to a steady pipeline of precision industrial inputs that are critical for Russia's missile and aviation production — components that Russia cannot easily source domestically .
• Enforcement gaps: The scheme operated for roughly four years (since 2022) before being detected, highlighting the difficulty national authorities face in tracking complex multi-country corporate structures, especially when shell companies are registered in jurisdictions with limited beneficial-ownership transparency .
• Parallel cases: This Austrian investigation comes alongside other European sanctions-evasion prosecutions, such as the June 2026 Brussels court convictions of three individuals for exporting prohibited items to Russia via intermediary nations , underscoring that enforcement is accelerating but remains reactive.