Imagine checking your phone in the middle of the night because you heard two massive bangs outside your door, only to find thick smoke rising and an orange glow consuming your hallway. That is exactly what happened to Judith Alexander, the sister-in-law of UK Prime Minister Keir Starmer, during an early morning in May 2025. Her daughter’s bedroom was right above the flames.
The Old Bailey just handed down guilty verdicts for the two men who lit those fires. Roman Lavrynovych, a 22-year-old Ukrainian national, and Stanislav Carpiuc, a 27-year-old Romanian, were convicted of a dangerous conspiracy to commit arson targeting properties and a car linked to the prime minister. For a different look, read: this related article.
But the real story isn't just about the guys holding the match. It's about how they got the job. This case exposes a terrifying shift in modern warfare, where hostile foreign interests can hire local freelancers on popular chat apps to do their dirty work.
http://googleusercontent.com/lmdx_content/WjwbUCeZxXdiUnrqdEllaQOZphABadEsecHyQwLtnMuEeiOKdMeQyXHOrDaockYDJuQfjPMFfQrLqojBwfApCWpbeRNkqonkFmpvFvTKXZComNTnBDqrnWZynRvFwUlsYZWiSnjQCNMKzwKcWfqFUZHAfNOztcXlcIttqUnTTKBD494 Related reporting on the subject has been provided by USA Today.
The Mastermind in the App
The entire operation was directed by an anonymous, Russian-speaking Telegram handler operating under the moniker "El Money" (translated from the Ukrainian word "Hroshi"). Police recovered more than 320 messages between El Money and Lavrynovych.
The recruitment strategy was disturbingly basic. Lavrynovych wasn't a trained spy; he was a broke 22-year-old looking for quick cash in a "London jobs" Telegram group to help pay for his sick father’s medical care.
El Money first tried to hire him to post street advertisements. Then came a more sinister task: scout out specific properties for CCTV presence for £1,500. Finally, the big job landed. El Money offered £3,000 in cryptocurrency to burn down specific targets, film the destruction, and ensure it made the evening news.
The targets hit over a five-day stretch in May 2025 included:
- A Toyota RAV4: Formerly owned by Keir Starmer before he sold it to a neighbor.
- A North London house: Managed by a company where Starmer previously served as a director.
- Starmer's former home: The residence where his sister-in-law was sleeping when the front door was torched.
When police interrogated Lavrynovych, he claimed he had absolutely no idea who Keir Starmer even was. He didn't care about British politics. He just wanted the crypto payload.
Cheap Sabotage and the Problem of Proof
This is the new playbook for global destabilization. In the past, foreign intelligence agencies had to deploy highly trained agents into a country to execute sabotage, risking massive diplomatic fallout if they got caught.
Now, they use what security experts call "gig economy sabotage." They put a call out on standard messaging platforms, find a vulnerable local, and promise them Bitcoin.
This model gives the ultimate instigators plausible deniability. Helen Flanagan, the head of London's counter-terrorism policing unit, noted that investigators found no definitive proof directly tying the "El Money" account to the Kremlin. "Obviously, it was a Russian-speaking entity that created those taskings, but we have seen no evidence to link this back to any Russian-backed tasking," she stated.
Financial Times investigations have linked the "El Money" persona to pro-Kremlin hacktivist networks like NoName057(16). Yet because the digital tracks lead into a maze of encrypted messages and anonymous crypto wallets, prosecutors couldn't charge the defendants with national security or espionage offenses. Instead, they had to stick to standard arson charges.
Frank Ferguson, head of the Crown Prosecution Service's Special Crime and Counter Terrorism Division, made it clear that these crimes go far beyond simple property damage. They are calculated acts of intimidation meant to erode public safety and rattle the highest levels of government.
Tech Platforms Face the Heat
The trial has reignited a massive row over how much responsibility tech companies bear for the criminal markets flourishing on their platforms. Government officials are furious that open job boards on secure apps are actively used to recruit arsonists and saboteurs.
While the tech firms frequently hit back at these accusations, arguing that they cannot police every private message or public group without destroying user privacy, the political patience in London has completely run out. Prime Minister Keir Starmer previously labeled the arson spree "an attack on democracy itself."
Behind the scenes, security officials are demanding that platforms implement stricter moderation on public recruitment channels and cooperate faster when local police track handles coordinating physical violence.
What Happens Next
The Old Bailey trial has concluded, but the broader security threat is just getting started. If you want to understand where corporate safety and national security go from here, watch these immediate developments:
- The Sentencing: Mr Justice Garnham remanded Lavrynovych and Carpiuc into custody. Their formal sentencing is scheduled at the Old Bailey for Friday, June 19, 2026. Expect the prosecution to push for maximum terms to send a deterrent message to other digital mercenaries.
- Pressure on Chat Apps: Watch for new legislative pushes in the UK and Europe aimed at holding messaging platforms legally liable if they fail to dismantle public forums used for illegal gig recruitment.
- Enhanced Security for Public Figures: Intelligence services are rapidly shifting how they protect politicians. It is no longer enough to guard a politician’s current home; security teams must now monitor historical properties, family members, and even past assets like old vehicles that remain listed in compromised databases.
