Russian intelligence services allegedly attempted to recruit people inside the United States to surveil and assassinate political opponents, according to a sweeping federal indictment that places foreign-directed political violence unusually close to the centre of Washington.
The Department of Justice announced this week that five people had been charged over what prosecutors describe as an international network conducting surveillance, attempted killings and attacks on behalf of Russian intelligence. All five defendants are believed to be outside the United States and remain at large.
The most immediate allegation concerns a prominent Russian dissident whom the network believed was living in the Washington, D.C., area. Prosecutors say members of the network recruited a Venezuelan citizen living in the United States, paid or offered to pay him for surveillance and ultimately proposed $40,000 to “eliminate” or “disappear” the target.
The FBI says it disrupted the operation before the alleged assassination could be carried out. Authorities have not publicly identified the intended victim, nor have they explained in detail how investigators uncovered and neutralised the plot.
What has emerged from the indictment, however, suggests something broader than an isolated murder conspiracy.
Five defendants and an alleged international network
The defendants are Russian nationals Yuri Khrameev, 63, and his son Kirill Khrameev, 27; Cuban nationals Oemis Romagoza Durruthy and Yaidel Delgado Suarez, both 35; and Venezuelan national Angel Eduardo Castro, 22.
The Justice Department describes Yuri Khrameev as a former colonel in Russian intelligence and Kirill Khrameev as an officer of Russia’s Federal Security Service, the FSB. Durruthy is alleged to have coordinated attacks and logistics, while Suarez and Castro are accused of functioning as recruiters, including within the United States.
All five face a charge of conspiracy to finance terrorism. Yuri Khrameev, Suarez and Castro also face a murder-for-hire conspiracy charge.
The defendants have not been convicted, and the allegations remain to be tested in court.
Federal prosecutors refer to the organisation as the “RIS Network”, short for Russian Intelligence Services Network. According to the indictment, it has operated since at least 2024 and formed part of a broader effort aimed at dissidents, defectors and individuals in countries viewed by Moscow as supporting Ukraine.
The Washington plot allegedly began with surveillance
The mechanics of the alleged American operation are particularly revealing.
According to prosecutors, Castro contacted a Venezuelan citizen living in Brooklyn and asked whether he knew somebody trustworthy in Washington. Communications described in the indictment allegedly used coded terminology, with surveillance disguised as ordinary work and the intended killing referred to indirectly.
Suarez allegedly provided addresses connected to the dissident and instructions for photographing and filming locations associated with the target. The recruit was promised between $1,000 and $1,500 for surveillance work and, according to prosecutors, provided photographs and videos.
The request then allegedly escalated.
Prosecutors say Suarez and Castro offered $40,000 to have the dissident killed. When the recruit reportedly said he would conduct surveillance but would not personally carry out the killing, members of the network allegedly asked whether he could find somebody else willing to do so.
The allegation is significant because it describes an operational model that does not require Russian intelligence officers themselves to enter the United States or personally conduct an attack.
Instead, prosecutors say intermediaries operating abroad attempted to recruit individuals already inside the country.
If proven, such a structure would reduce many of the logistical risks associated with conventional foreign intelligence operations. It would also create additional layers between the alleged state sponsor, the recruiters and the individual ultimately responsible for carrying out an attack.
The United States was allegedly a recruiting ground as well as a target
The Washington case was apparently not the network’s first attempt to recruit people based in the United States.
According to prosecutors, members of the same alleged network recruited a U.S. citizen in 2025 to conduct surveillance on a person in Lithuania whom they accused of spreading false information about Russia.
The individual allegedly accepted a small payment to photograph the target but rejected a subsequent offer of approximately $25,000 to kill the person.
Prosecutors say the network then discussed other forms of violence, including arson against warehouses or electrical infrastructure, with targets allegedly linked to countries supporting Ukraine.
That allegation substantially broadens the significance of the case.
Federal authorities are not describing a network interested solely in eliminating one Russian dissident. They portray an organisation capable of identifying targets across several countries, recruiting intermediaries remotely, organising surveillance and offering money for assassinations and sabotage.
Political assassination and sabotage increasingly overlap
The case illustrates a wider concern among Western security services: the increasingly blurred line between espionage, organised crime, sabotage and political violence.
Traditional intelligence operations historically relied heavily on trained officers, diplomatic cover and established agents.
The model described in the indictment is more decentralised.
A state intelligence structure can theoretically identify an objective while outsourcing portions of the operation to people with only indirect links to the sponsoring government. Surveillance can be performed by one individual, logistics handled by another and the final act of violence entrusted to a criminal recruit.
Such a model offers several advantages to the state allegedly directing it.
It creates plausible distance from the attack, complicates attribution and makes it harder for law enforcement to identify the chain connecting the person committing the crime to those who originally ordered it.
The Justice Department portrays the alleged network as part of a broader pattern of Russian external operations against political opponents and states supporting Ukraine.
The wider historical context includes a series of attacks that Western authorities have attributed to Russian state actors, including the killing of former FSB officer Alexander Litvinenko in Britain in 2006, the poisoning of Sergei Skripal and his daughter in Salisbury in 2018 and the assassination of Zelimkhan Khangoshvili in Berlin in 2019.
Russia has consistently rejected accusations that it conducts assassination operations abroad.
Why an alleged plot in Washington matters
An operation aimed at killing a political dissident in the Washington area carries implications far beyond the individual criminal charges.
Foreign governments have previously been accused of intimidating, surveilling and threatening dissidents living in the United States, a phenomenon commonly described as transnational repression.
That can include online harassment, threats against relatives, covert monitoring, forced repatriation and physical attacks.
Murder-for-hire represents the most extreme end of that spectrum.
It directly challenges the ability of the United States to protect people living on its own territory from violence allegedly organised by foreign governments.
It can also have a chilling effect far beyond the intended target. Political exiles, journalists and activists may begin to question whether leaving an authoritarian country genuinely places them beyond the reach of the government they fled.
That is precisely why such cases carry national-security significance even when the intended attack never occurs.
Major questions remain unanswered
Federal authorities have been unusually explicit about the alleged organisation but considerably less forthcoming about how the plot was stopped.
The Justice Department says the FBI and partner agencies disrupted the operation and neutralised the threat.
But several major questions remain open.
It is not publicly known when investigators first became aware of the recruitment effort, whether any of the alleged recruits subsequently cooperated with authorities, how close the organisers came to locating the intended target or whether additional members of the network remain unidentified.
The identity of the dissident has also been withheld.
Nor does the indictment fully resolve the question of command responsibility.
The Justice Department alleges that the defendants operated on behalf of Russian intelligence, and one defendant is identified as an FSB officer. But determining whether particular operations were authorised by more senior officials — and at what level — would require evidence beyond the existence of the alleged network itself.
The Kremlin has rejected requests for comment on the substance of the case without what it considers credible evidence.
Indictments can disrupt networks even without arrests
Because all five defendants are believed to be abroad, the United States also faces an obvious enforcement problem.
An indictment does not guarantee that any of them will ever appear in a U.S. courtroom.
However, public charges can still have operational consequences.
Named suspects face greater difficulty travelling internationally without risking arrest in jurisdictions willing to cooperate with American authorities. Financial transactions become more complicated, contacts may distance themselves and intelligence services can no longer rely on the same operatives without knowing that their identities are exposed.
Public attribution can therefore function as a form of disruption even when prosecution is not immediately possible.
It can also reveal operational methods.
Potential recruits now know the kinds of approaches prosecutors say were used. Law-enforcement agencies in allied countries can compare suspicious cases with the network described in the indictment. Political dissidents may recognise surveillance or recruitment patterns earlier.
The challenge is that such networks can also adapt.
If the structure is broader than the five defendants currently charged, compromised operatives can potentially be replaced.
A modern model of political violence
It is tempting to describe the case through the language of Cold War espionage, but the alleged mechanics are distinctly contemporary.
Encrypted communications, remote recruitment, small surveillance payments, multinational criminal intermediaries and substantial cash offers allow an operation to cross borders without requiring a conventional intelligence officer to personally approach the intended killer.
That makes the alleged Washington plot less a return to an old model than an adaptation of political assassination to a highly connected world.
The same infrastructure that allows legitimate businesses and individuals to coordinate instantly across continents can also be exploited by intelligence services and criminal networks.
Political violence no longer requires a large clandestine apparatus inside the target country.
A recruiter can sit thousands of kilometres away, identify a vulnerable or willing individual through personal contacts or digital communications, provide a photograph and an address, transfer money and attempt to build an operation piece by piece.
That possibility creates a difficult challenge for counter-intelligence agencies.
The wider issue is deterrence
The significance of this case therefore extends beyond whether the five defendants are ultimately arrested.
The broader question is whether the United States and its allies can make outsourced assassination and sabotage operations sufficiently difficult, risky and costly that foreign intelligence services hesitate to use them.
That requires more than individual criminal prosecutions.
It requires cooperation between intelligence agencies, federal law enforcement, local police, financial investigators and foreign partners. It also requires effective protection for political exiles and dissidents who may face threats from governments thousands of kilometres away.
Congressional and intelligence oversight will inevitably matter as well.
If prosecutors’ allegations are substantiated, the case would demonstrate that a foreign intelligence network was not merely collecting information in the United States but actively attempting to recruit participants for lethal political violence.
That represents a substantially different category of threat.
A significant case, but an unfinished one
The FBI says it stopped the alleged plot before anyone was killed.
Prosecutors have now publicly described the architecture they believe was behind it.
But the five defendants remain fugitives, the intended victim remains unidentified and the allegations have not yet been tested at trial.
That combination makes the case both significant and unfinished.
It provides an unusually detailed picture of what U.S. prosecutors describe as a Russian-linked system of transnational repression escalating toward murder-for-hire on American soil.
At the same time, the evidence will still need to withstand judicial scrutiny, and the precise chain of command behind the alleged operation remains to be established.
What is already clear is that political assassination cannot simply be treated as a relic of Cold War history.
In an era of remote recruitment, encrypted communications and outsourced violence, the tools have changed.
The underlying objective has not: silencing political opponents by convincing them that distance from their former government does not necessarily mean safety from it.