£3,000 crypto bribe for arson: Two guilty in proxy attack on PM-linked property
The Old Bailey convicted two men recruited via Telegram to torch property linked to PM Keir Starmer for a £3,000 cryptocurrency payment, highlighting the legal challenges of prosecuting remotely instigated crimes and the emergence of 'criminal proxies.' The case clarifies charging strategies for mercenary attacks and underscores the evidential value of digital forensics.
Key Takeaways
- The Old Bailey convicted two men recruited via Telegram to torch property linked to PM Keir Starmer for a £3,000 cryptocurrency payment, highlighting the legal challenges of prosecuting remotely instigated crimes and the emergence of 'criminal proxies.' The case clarifies charging strategies for mercenary attacks and underscores the evidential value of digital forensics.
Mentioned
Key Intelligence
Key Facts
- 1Roman Lavrynovych (22) found guilty of damaging two properties by fire with recklessness as to life endangerment, plus conspiracy to damage property; Stanislav Carpiuc (27) convicted of conspiracy to damage property.
- 2Attacks included arson on a Toyota Rav4 once owned by PM Sir Keir Starmer, and on two houses — one occupied by the PM's sister-in-law — on May 11-12, 2025.
- 3The anonymous Russian-speaking Telegram contact 'El Money' offered £3,000 in cryptocurrency for the attacks, requiring them to be filmed and make the news.
- 4Jury deliberated for 7.5 hours at the Old Bailey before returning guilty verdicts on June 15, 2026; co-defendant Petro Pochynok was acquitted.
- 5Counter Terrorism Policing London Commander Helen Flanagan stated there was no evidence of state threat or ideological motivation — the defendants were purely 'criminal proxies' acting for payment.
- 6All defendants were arrested within a week of the May 2025 attacks, highlighting rapid digital forensics and intelligence-led policing.
I think the intentions of the defendants was clearly to take payment, and to carry out a crime for money. There was no ideological motivation around that, and there's no evidence to suggest that they knew who they were targeting, and that that was the Prime Minister or properties linked to the Prime Minister.
Following the convictions at the Old Bailey on June 15, 2026
Analysis
- Robust digital evidence led to swift convictions of the physical perpetrators
- Clear distinction drawn between paid proxies and ideological actors aids in framing charges under existing criminal damage laws
- Jury's 7.5-hour deliberation reflects careful weighing of intent and knowledge without prejudicing the PM's status
- Mastermind 'El Money' remains unidentified and beyond jurisdictional reach, leaving the criminal proxy model intact
- The £3,000 crypto payment illustrates how low-cost recruitment can bypass traditional money-laundering controls
- No new legal doctrine has emerged; reliance on existing conspiracy laws may be strained as remote instigation evolves
Analysis
For legal practitioners, this verdict is a milestone in defining liability for cyber-recruited mercenaries. The prosecution successfully convicted the foot soldiers while a shadowy Russian-speaking handler remains at large, forcing courts to grapple with how to deter anonymous remote instigation without eroding due process. The case will resonate in boardrooms and barristers' chambers alike as a blueprint for linking encrypted commands to physical crimes.
The Old Bailey has delivered a stark verdict on the growing phenomenon of criminal proxies: two men recruited via Telegram to torch property linked to the Prime Minister were found guilty on June 15, 2026, after a seven-and-a-half-hour jury deliberation. Ukrainian Roman Lavrynovych (22) was convicted of damaging two properties by fire with recklessness as to life endangerment, while Romanian Stanislav Carpiuc (27) was found guilty of conspiracy to damage property; a third defendant, Petro Pochynok, was cleared of all charges. The attacks, which took place over a few days in May 2025, targeted a Toyota Rav4 once owned by Sir Keir Starmer, then two houses — including a north London home still owned by the PM and occupied by his sister-in-law’s family — as residents slept. The plot was orchestrated by an anonymous Russian-speaking Telegram user known as 'El Money,' who offered Lavrynovych £3,000 in cryptocurrency, stipulating that the blazes be filmed and attract news coverage.
The plot was orchestrated by an anonymous Russian-speaking Telegram user known as 'El Money,' who offered Lavrynovych £3,000 in cryptocurrency, stipulating that the blazes be filmed and attract news coverage.
The case illuminates the operational model of 'crime-as-a-service,' in which handlers like El Money leverage encrypted platforms and digital currencies to convert vulnerable individuals into front-line offenders while maintaining anonymity and distance. Despite the involvement of Counter Terrorism Policing (CTP) London, Commander Helen Flanagan stressed there was no evidence of a state threat or ideological motivation; the two convicted men were purely mercenary actors. This distinction has profound legal implications. It separates the prosecution of proxy attacks from counterterrorism statutes, which carry different evidentiary hurdles and sentencing regimes, and puts the focus on conspiracy, arson, and reckless endangerment under the Offences Against the Person Act 1861 and the Criminal Damage Act 1971.
From an evidentiary standpoint, the swift arrests — within a week of the May 11-12 attacks — underscore the value of digital forensics. Telegram communications, cryptocurrency transaction trails, and cell-site data likely formed the backbone of the Crown's case. The 7.5-hour deliberation suggests the jury carefully weighed the intent and knowledge of the defendants, particularly whether they understood they were targeting the Prime Minister. The acquittal of Pochynok hints at the evidentiary difficulties of proving joint enterprise when criminal proxies act at different levels of awareness. The verdicts on Lavrynovych — who faced additional charges of reckless endangerment — demonstrate that courts can parse degrees of culpability even within a single conspiracy.
What to Watch
This trial sets a significant precedent for prosecuting remotely instigated property crimes. The concept of 'criminal proxy' is not yet codified in English law, but the case will influence charging strategies for similar operations where a shadowy taskmaster pays disposable recruits. The £3,000 payment, a relatively small sum, highlights how little it costs to cause serious public disruption and personal terror. The use of cryptocurrency complicates financial tracing, yet the case shows that where law enforcement acts rapidly, it can link the digital breadcrumbs to physical perpetrators.
Looking ahead, the sentencing of Lavrynovych and Carpiuc will be closely watched. Arson with recklessness as to life carries a maximum of life imprisonment; conspiracy to commit criminal damage has a statutory maximum of 10 years. The involvement of the Prime Minister as a victim, albeit indirect, may be cited as an aggravating factor. However, the prosecution’s emphasis on financial motivation over ideological intent could moderate sentences. This case also raises urgent policy questions: should the UK adopt new offenses for 'criminal proxy' recruitment, or can existing conspiracy and inchoate offense laws suffice? With El Money still at large and the Telegram handle offering a template for copycat operations, this trial is both a victory and a warning. The legal community must now consider how to deter recruitment on encrypted platforms and whether cryptocurrency intermediaries should face greater liability when their services facilitate paid criminality.
Timeline
Timeline
Car arson attack
A Toyota Rav4 once owned by PM Sir Keir Starmer is set alight in Kentish Town, north London, days before the house fires.
First house arson attack
A house occupied by the Prime Minister's sister-in-law — still owned by Sir Keir Starmer — is set ablaze in north London during the night, endangering sleeping residents.
Second house arson attack
Another property linked to the PM is targeted in a second arson attack, following the pattern ordered by El Money.
Arrests made
Police arrest the defendants within a week of the attacks, aided by digital evidence from Telegram and cryptocurrency payments.
Guilty verdicts delivered
After a 7.5-hour deliberation, a jury at the Old Bailey convicts Lavrynovych and Carpiuc; Pochynok is cleared. Commander Flanagan comments on the 'criminal proxy' model.
Sources
Sources
Based on 5 source articles- barryanddistrictnews.co.ukCriminal proxies found guilty over arson attacks on property linked to PMJun 15, 2026
- cotswoldjournal.co.ukCriminal proxies found guilty over arson attacks on property linked to PMJun 15, 2026
- dunfermlinepress.comCriminal proxies found guilty over arson attacks on property linked to PMJun 15, 2026
- salisburyjournal.co.ukCriminal proxies found guilty over arson attacks on property linked to PMJun 15, 2026
- halsteadgazette.co.ukCriminal proxies found guilty over arson attacks on property linked to PMJun 15, 2026
Cite This Page
"£3,000 crypto bribe for arson: Two guilty in proxy attack on PM-linked property." Legal & RegTech Intelligence Brief, July 25, 2026. https://getlegalbrief.com/story/3000-crypto-arson-guilty-pm-proxy-verdict
How we covered this story
Every story in our legal coverage is assembled from multiple primary sources, cross-referenced for factual consistency, and scored along three independent dimensions: sentiment, operational impact, and source-cluster confidence. Single-source rumors and unverifiable claims do not pass our editorial gate. When a story shows "Verified by N sources" with N≥2, the development is independently corroborated; when N=1, we mark it explicitly so readers can weigh the signal accordingly.
Impact scoring uses a 1-10 scale weighted toward regulatory, financial, and operational consequence rather than coverage volume. A topic that runs in every outlet but moves no real decisions ranks lower than a niche regulatory filing that reshapes how operators in the legal space have to behave. Read our full methodology for the scoring rubric, our glossary for term definitions, and our trends index for the longitudinal view across the beat.
Sources are only linked to a story once they clear our classification pipeline at a minimum 35 percent relevance threshold. According to that methodology, reviewed July 2026, this follows multi-source corroboration standards recommended by journalism research bodies such as the Reuters Institute for the Study of Journalism.
See something wrong in this story — a wrong fact, a broken source link, a misattributed entity? Report a data issue.
| Signal on this page | What it tells you |
|---|---|
| Verified by N sources | Independent corroboration count. N≥2 is our confidence floor; N=1 is marked explicitly. |
| Impact score (1-10) | Regulatory + financial + operational weight. 8+ signals an experienced-operator action item. |
| Sentiment | Five-tier classification trained on labeled legal-specific corpora. |
| Timeline | Where applicable, the related-events sequence that contextualizes today's development. |