We haven't been able to take payment
You must update your payment details via My Account or by clicking update payment details to keep your subscription.
Act now to keep your subscription
We've tried to contact you several times as we haven't been able to take payment. You must update your payment details via My Account or by clicking update payment details to keep your subscription.
Your subscription is due to terminate
We've tried to contact you several times as we haven't been able to take payment. You must update your payment details via My Account, otherwise your subscription will terminate.

How a maverick Wirecard boss built a network of agents

Jan Marsalek contacted Orlin Roussev ten years ago and asked him to put together a network of London-based agents

Wanted poster for Jan Marsalek on a digital billboard.
A wanted poster for Jan Marsalek in Germany in 2019
SASCHA STEINBACH/EPA
David Brown
The Times

A Russian spy ring run from a Norfolk seaside hotel was part of an intelligence network stretching across Europe, orchestrated by a maverick businessman with access to the secrets of the West’s leading intelligence agencies.

Extraordinary details of the operation can be revealed after the Old Bailey trial of three of the spies.

The espionage network dates back to 2015 when the financial company boss, Jan Marsalek, contacted Orlin Roussev, a Bulgarian IT expert based in the City of London who specialised in signals intelligence — the interception of communications.

Spies found guilty of doing Putin’s bidding in Britain

Marsalek, 44, was at the time chief the operating officer of Wirecard, an international payment company with headquarters in Bavaria, which initially serviced pornography and gambling websites.

Advertisement

Marsalek, whose grandfather was in the KGB, had been introduced to Russia’s military secret service agency, the GRU, in 2014 by an alleged “honeytrap”, Natasha Zlobina, 40. The actress played a Russian agent in the erotic horror film Red Lips: Bloodlust. She could not be reached for comment.

Movie poster for Red Lips Bloodlust.
An actress in Red Lips: Bloodlust introduced Marsalek to a Russian secret service agency

Marsalek contacted Roussev soon after and asked him to put together a network of London-based agents who could carry out surveillance operations on the ground.

The first hire was Biser Dzhambazov, 43, a fellow Bulgarian who moved to London in 2012. He had close links with leading politicians in Bulgaria and the country’s embassy in London.

Headshot of Biser Dzhambazov, who pleaded guilty to being part of a Russian spy ring.
Biser Dzhambazov recruited two women into the operation
METROPOLITAN POLICE/REUTERS

Dzhambazov was made “operations controller” and recruited his girlfriend Katrin Ivanova, 32, who showed an expertise in using the technical spy equipment which had been built or bought by Roussev.

He then recruited his friend Ivan Stoyanov, 32, a martial arts cage fighter known as “The Destroyer”, from Greenford, west London.

Advertisement
Mugshot of a man in a gray shirt.
Ivan Stoyanov was convicted of spying for Russia on Friday

Dzhambazov then met Vanya Gaberova, who owned a beauty parlour in Acton, also in west London, while helping arrange polling stations in London for Bulgarian elections. Gaberova was swiftly recruited by Dzhambazov and subsequently became his lover as well.

She in turn recruited her former boyfriend, Tihomir Ivanchev, 39, a former champion open water swimmer from Enfield, north London,

Dzhambazov, Ivanova and Stoyanov all got jobs at the Doctors Laboratory in central London while Ivanchev worked as a painter and decorator. Ivanova, Gaberova and Ivanchev have since claimed they believed they were working for Interpol. On Friday, they were convicted of spying for Russia.

To assist the growing funding of their operation, Marsalek sent hundreds of thousands of pounds to a business registered by Roussev under an alias.

Investigators in Germany and Austria claim that in addition to the UK operation, Marsalek used his position at Wirecard to organise and pay for other clandestine operations across Europe and in Africa.

Advertisement

In 2015 he hired Martin Weiss — then the head of operations for BVT, Austria’s domestic intelligence service — as a consultant. All intelligence information collected by the agency, including that shared by the CIA, MI6, Mossad and Germany’s Bundesnachrichtendienst, went through Weiss’s department.

Weiss and another senior BVT official, Egisto Ott, are accused by prosecutors in Austria of providing information to Marsalek which was forwarded to Moscow. The investigators claimed some of the information was used for assassinations by Russian hit squads.

Egisto Ott, former BVT chief inspector, at his trial.
Egisto Ott was arrested last year on suspicion of spying for Russia. He denies wrongdoing.
ALAMY

Marsalek also allegedly obtained a Nato cryptography machine and information from the mobile phones of three senior officials in Austria’s interior ministry which was sent to Russia.

After Weiss was arrested in 2021, Marsalek boasted of helping him escape, telling Roussev: “I just managed to evacuate my Austrian guy to Dubai.” Weiss is believed to be in Dubai and could not be reached for comment.

Ott was arrested last year on suspicion of spying for Russia at Marsalek’s behest following information from British intelligence. He denies wrongdoing.

Advertisement

Marsalek was also drawn into the Russian intelligence agencies’ work in the Middle East. In 2017, he travelled to Syria with Anatoly Karazi, the head of intelligence for Wagner, the Russian mercenary group. He also offered to pay a former senior United Nations official €200,000 (£165,000) to prepare a report for the “Russian-Libyan Cultural Institute” based in Moscow, and discussed plans to recruit a private army of 20,000 Libyan militia fighters.

Wirecard collapsed in June 2020 with the loss of 6,000 jobs when £1.6 billion appeared to be missing from its accounts. Marsalek fled to Russia, where he assumed the identity of Vitaly Malkin, an Orthodox priest. He did not respond to requests for comment.

Some of the information passed to Marsalek from the files of the Austrian intelligence agency was forwarded to the spies in Britain for use in their operations, including details about the investigative journalist Christo Grozev who lived in Vienna.

Ott is also accused of giving the UK-based agents a highly-encrypted Sina laptop used by German intelligence which was subsequently delivered to the Lubyanka, the headquarters of Russia’s federal intelligence service, the FSB, in Moscow.

Scotland Yard believes the “lifestyle” information gathered by the British spies on investigative journalists and opponents of President Putin of Russia could be used for assassination attempts.

Advertisement

Roussev bought the three-star Haydee Hotel in Great Yarmouth, Norfolk, to act as his headquarters as the espionage operation expanded after Russia’s invasion of Ukraine in February 2022.

Photo of The Haydee, a building in Great Yarmouth, Norfolk, where a Russian spy was arrested.
The Haydee Hotel in Great Yarmouth
METROPOLITAN POLICE/PA
A cluttered desk with multiple computer monitors, laptops, and electronic devices.
Inside the hotel
METROPOLITAN POLICE/PA

The 33-room hotel was packed with spy equipment including a £120,000 Imsi recorder which could identify mobile telephones being used in the surrounding area. There is no record of where the highly-technical Imsi came from and it is believed to have been supplied by the Russian intelligence service.

Police raided the hotel in February 2023 on the day the gang planned to take the Imsi to a US military base in Germany where Ukrainian soldiers were being trained in the use of surface-to-air missiles.

Information from the device would enable Russian forces to target the soldiers on the battlefield.

Ukrainian soldiers are also being trained at UK military bases. A month before the police raid, Marsalek told Roussev that “after using the Imsi’s in Germany we might want to do the same in the UK”.

PROMOTED CONTENT