Court Decisions Neutral 5

£3,000 crypto bribe for arson: Two guilty in proxy attack on PM-linked property

The Old Bailey convicted two men recruited via Telegram to torch property linked to PM Keir Starmer for a £3,000 cryptocurrency payment, highlighting the legal challenges of prosecuting remotely instigated crimes and the emergence of 'criminal proxies.' The case clarifies charging strategies for mercenary attacks and underscores the evidential value of digital forensics.

· 4 min read · Verified by 5 sources ·
Share

Key Takeaways

  • The Old Bailey convicted two men recruited via Telegram to torch property linked to PM Keir Starmer for a £3,000 cryptocurrency payment, highlighting the legal challenges of prosecuting remotely instigated crimes and the emergence of 'criminal proxies.' The case clarifies charging strategies for mercenary attacks and underscores the evidential value of digital forensics.

Mentioned

Roman Lavrynovych person Stanislav Carpiuc person Petro Pochynok person El Money person Sir Keir Starmer person Commander Helen Flanagan person Counter Terrorism Policing London company Old Bailey company Telegram technology

Key Intelligence

Key Facts

  1. 1Roman Lavrynovych (22) found guilty of damaging two properties by fire with recklessness as to life endangerment, plus conspiracy to damage property; Stanislav Carpiuc (27) convicted of conspiracy to damage property.
  2. 2Attacks included arson on a Toyota Rav4 once owned by PM Sir Keir Starmer, and on two houses — one occupied by the PM's sister-in-law — on May 11-12, 2025.
  3. 3The anonymous Russian-speaking Telegram contact 'El Money' offered £3,000 in cryptocurrency for the attacks, requiring them to be filmed and make the news.
  4. 4Jury deliberated for 7.5 hours at the Old Bailey before returning guilty verdicts on June 15, 2026; co-defendant Petro Pochynok was acquitted.
  5. 5Counter Terrorism Policing London Commander Helen Flanagan stated there was no evidence of state threat or ideological motivation — the defendants were purely 'criminal proxies' acting for payment.
  6. 6All defendants were arrested within a week of the May 2025 attacks, highlighting rapid digital forensics and intelligence-led policing.

I think the intentions of the defendants was clearly to take payment, and to carry out a crime for money. There was no ideological motivation around that, and there's no evidence to suggest that they knew who they were targeting, and that that was the Prime Minister or properties linked to the Prime Minister.

Helen Flanagan Commander, Head of Counter Terrorism Policing London

Following the convictions at the Old Bailey on June 15, 2026

Analysis

Prosecution Strengths
  • Robust digital evidence led to swift convictions of the physical perpetrators
  • Clear distinction drawn between paid proxies and ideological actors aids in framing charges under existing criminal damage laws
  • Jury's 7.5-hour deliberation reflects careful weighing of intent and knowledge without prejudicing the PM's status
Unresolved Risks
  • Mastermind 'El Money' remains unidentified and beyond jurisdictional reach, leaving the criminal proxy model intact
  • The £3,000 crypto payment illustrates how low-cost recruitment can bypass traditional money-laundering controls
  • No new legal doctrine has emerged; reliance on existing conspiracy laws may be strained as remote instigation evolves

Analysis

For legal practitioners, this verdict is a milestone in defining liability for cyber-recruited mercenaries. The prosecution successfully convicted the foot soldiers while a shadowy Russian-speaking handler remains at large, forcing courts to grapple with how to deter anonymous remote instigation without eroding due process. The case will resonate in boardrooms and barristers' chambers alike as a blueprint for linking encrypted commands to physical crimes.

The Old Bailey has delivered a stark verdict on the growing phenomenon of criminal proxies: two men recruited via Telegram to torch property linked to the Prime Minister were found guilty on June 15, 2026, after a seven-and-a-half-hour jury deliberation. Ukrainian Roman Lavrynovych (22) was convicted of damaging two properties by fire with recklessness as to life endangerment, while Romanian Stanislav Carpiuc (27) was found guilty of conspiracy to damage property; a third defendant, Petro Pochynok, was cleared of all charges. The attacks, which took place over a few days in May 2025, targeted a Toyota Rav4 once owned by Sir Keir Starmer, then two houses — including a north London home still owned by the PM and occupied by his sister-in-law’s family — as residents slept. The plot was orchestrated by an anonymous Russian-speaking Telegram user known as 'El Money,' who offered Lavrynovych £3,000 in cryptocurrency, stipulating that the blazes be filmed and attract news coverage.

The plot was orchestrated by an anonymous Russian-speaking Telegram user known as 'El Money,' who offered Lavrynovych £3,000 in cryptocurrency, stipulating that the blazes be filmed and attract news coverage.

The case illuminates the operational model of 'crime-as-a-service,' in which handlers like El Money leverage encrypted platforms and digital currencies to convert vulnerable individuals into front-line offenders while maintaining anonymity and distance. Despite the involvement of Counter Terrorism Policing (CTP) London, Commander Helen Flanagan stressed there was no evidence of a state threat or ideological motivation; the two convicted men were purely mercenary actors. This distinction has profound legal implications. It separates the prosecution of proxy attacks from counterterrorism statutes, which carry different evidentiary hurdles and sentencing regimes, and puts the focus on conspiracy, arson, and reckless endangerment under the Offences Against the Person Act 1861 and the Criminal Damage Act 1971.

From an evidentiary standpoint, the swift arrests — within a week of the May 11-12 attacks — underscore the value of digital forensics. Telegram communications, cryptocurrency transaction trails, and cell-site data likely formed the backbone of the Crown's case. The 7.5-hour deliberation suggests the jury carefully weighed the intent and knowledge of the defendants, particularly whether they understood they were targeting the Prime Minister. The acquittal of Pochynok hints at the evidentiary difficulties of proving joint enterprise when criminal proxies act at different levels of awareness. The verdicts on Lavrynovych — who faced additional charges of reckless endangerment — demonstrate that courts can parse degrees of culpability even within a single conspiracy.

What to Watch

This trial sets a significant precedent for prosecuting remotely instigated property crimes. The concept of 'criminal proxy' is not yet codified in English law, but the case will influence charging strategies for similar operations where a shadowy taskmaster pays disposable recruits. The £3,000 payment, a relatively small sum, highlights how little it costs to cause serious public disruption and personal terror. The use of cryptocurrency complicates financial tracing, yet the case shows that where law enforcement acts rapidly, it can link the digital breadcrumbs to physical perpetrators.

Looking ahead, the sentencing of Lavrynovych and Carpiuc will be closely watched. Arson with recklessness as to life carries a maximum of life imprisonment; conspiracy to commit criminal damage has a statutory maximum of 10 years. The involvement of the Prime Minister as a victim, albeit indirect, may be cited as an aggravating factor. However, the prosecution’s emphasis on financial motivation over ideological intent could moderate sentences. This case also raises urgent policy questions: should the UK adopt new offenses for 'criminal proxy' recruitment, or can existing conspiracy and inchoate offense laws suffice? With El Money still at large and the Telegram handle offering a template for copycat operations, this trial is both a victory and a warning. The legal community must now consider how to deter recruitment on encrypted platforms and whether cryptocurrency intermediaries should face greater liability when their services facilitate paid criminality.

Timeline

Timeline

  1. Car arson attack

  2. First house arson attack

  3. Second house arson attack

  4. Arrests made

  5. Guilty verdicts delivered

Sources

Sources

Based on 5 source articles

Cite This Page

"£3,000 crypto bribe for arson: Two guilty in proxy attack on PM-linked property." Legal & RegTech Intelligence Brief, July 25, 2026. https://getlegalbrief.com/story/3000-crypto-arson-guilty-pm-proxy-verdict

How we covered this story

Every story in our legal coverage is assembled from multiple primary sources, cross-referenced for factual consistency, and scored along three independent dimensions: sentiment, operational impact, and source-cluster confidence. Single-source rumors and unverifiable claims do not pass our editorial gate. When a story shows "Verified by N sources" with N≥2, the development is independently corroborated; when N=1, we mark it explicitly so readers can weigh the signal accordingly.

Impact scoring uses a 1-10 scale weighted toward regulatory, financial, and operational consequence rather than coverage volume. A topic that runs in every outlet but moves no real decisions ranks lower than a niche regulatory filing that reshapes how operators in the legal space have to behave. Read our full methodology for the scoring rubric, our glossary for term definitions, and our trends index for the longitudinal view across the beat.

Sources are only linked to a story once they clear our classification pipeline at a minimum 35 percent relevance threshold. According to that methodology, reviewed July 2026, this follows multi-source corroboration standards recommended by journalism research bodies such as the Reuters Institute for the Study of Journalism.

See something wrong in this story — a wrong fact, a broken source link, a misattributed entity? Report a data issue.