Counter-terrorism officers have arrested three people in Essex on suspicion of assisting Russian intelligence services, as senior police warned of an increasing threat from foreign states recruiting British citizens as “proxies” to carry out hostile activities.
A 41-year-old man and a 35-year-old woman were detained at an address in Grays, Essex, whilst a 46-year-old man was arrested at a separate location in the same area. All three were taken to a London police station for questioning before being released on conditional bail.
The Metropolitan Police confirmed the arrests were made under Section 3 of the National Security Act 2023, which makes it illegal to assist a foreign intelligence service. The maximum penalty for the offence is life imprisonment, marking a significant escalation from the 14-year maximum sentence under previous legislation.
Commander Dominic Murphy, head of the Met’s Counter Terrorism Command, issued a stark warning about the evolving nature of state-sponsored threats. “Through our recent national security casework, we’re seeing an increasing number of who we would describe as ‘proxies’ being recruited by foreign intelligence services,” he stated.
Wagner Group Arson Case Highlighted
The arrests come as two young British men await sentencing after being recruited by the Wagner Group to carry out an arson attack on a Ukrainian-linked warehouse in east London. The case represents the first convictions under the new National Security Act.
“Indeed, two young British men are awaiting sentencing after they were recruited by the Wagner Group – effectively the Russian state – to carry out an arson at Ukrainian-linked warehouse,” Commander Murphy confirmed. “They are facing potentially lengthy custodial sentences, although, to be clear, today’s arrests are in no way connected to that investigation.”
The Wagner Group case involved Dylan Earl, 21, who established contact with the Russian mercenary organisation through encrypted messaging platform Telegram in 2023. Earl and accomplice Jake Reeves, 23, orchestrated an attack on a Leyton warehouse storing generators and Starlink satellite equipment destined for Ukraine, causing approximately £1 million in damage.
National Security Act Powers
The arrests mark the latest deployment of powers under the National Security Act 2023, which came into force on 20 December 2023. The legislation represents what the government has called “the most significant reform of espionage law in a century,” replacing the Official Secrets Acts of 1911, 1920 and 1939.
Section 3 of the Act specifically targets those who engage in conduct intended to materially assist a foreign intelligence service. The offence covers activities ranging from providing information and access to goods, services, or financial benefits originating from hostile states.
The Act introduces enhanced penalties for espionage-related offences, with life imprisonment now possible for obtaining or disclosing protected information – up from the previous 14-year maximum. It also creates new offences including obtaining trade secrets and sabotage, both aimed at countering modern state threats.
Growing State Threat Landscape
Security services have identified Russia, China and Iran as the primary state threats to UK national security, though the legislation applies to any foreign power whose activities damage British interests. The National Protective Security Authority has warned that UK security professionals are particularly vulnerable to approaches from hostile states due to their access to valuable information.
Anyone who might be contacted by and tempted into carrying out criminal activity on behalf of a foreign state here in the UK should think again,” Commander Murphy warned. “This kind of activity will be investigated and anyone found to be involved can expect to be prosecuted and there are potentially very serious consequences for those who are convicted.”
The Met’s Counter Terrorism Command took over the investigation following intelligence suggesting potential National Security Act offences. Officers conducted searches at both Essex addresses, though Scotland Yard declined to reveal the nationalities of those arrested or provide further operational details.
Proxy Networks and the ‘Gig Economy’ of Espionage
Intelligence officials have observed a shift in Russian tactics towards recruiting low-level operatives through encrypted messaging apps and online forums. Rather than relying on trained agents, hostile states are increasingly using what analysts describe as a “gig economy” approach – recruiting temporary, flexible workers for on-demand operations.
The Wagner Group case exemplified this trend, with operatives recruited through a Telegram bot called “Privet Bot” that promised payment for “resistance” activities against Ukraine’s allies. Earl received instructions to watch the Cold War drama “The Americans” to understand the nature of his work, before being directed to target the Leyton warehouse just five days after initial contact.
Prosecutors revealed that Wagner operatives encouraged Earl to build relationships with football hooligans, criminal organisations and Irish republican militants. The plot extended beyond the warehouse attack to include planned arson at Mayfair businesses owned by Russian dissident Evgeny Chichvarkin, with discussions about potentially kidnapping him and “exiling him back to Russia to face prison.”
Legislative Response and Enforcement
The National Security Act also introduces State Threats Prevention and Investigation Measures (STPIMs), modelled on existing counter-terrorism powers, allowing authorities to impose restrictive measures on individuals involved in foreign power threat activity.
Under the Act, police gained enhanced powers including the ability to arrest suspects at an earlier stage of investigations and detain them for longer periods given the complexity of state threat cases. Officers can also move quickly to search and seize material, reflecting what authorities describe as the “high harm” nature of such activities.
The legislation requires the Attorney General’s consent for prosecutions under the espionage provisions, ensuring high-level oversight of cases. Biometric data collected during detention can be retained for up to five years, regardless of whether charges are brought or the individual is acquitted.
Wider European Context
The Essex arrests form part of a broader pattern of Russian intelligence activities across Europe. Similar warehouse attacks linked to Wagner occurred in Madrid, whilst German authorities recently arrested two German-Russian nationals suspected of scouting targets including US military facilities.
Western officials have blamed Moscow for orchestrating a campaign of disruption across the continent, using proxies to conduct sabotage, arson and surveillance operations. The use of British criminals as intermediaries represents what security services call an evolution in hostile state tactics, exploiting encrypted communications to recruit operatives remotely.
The Foreign Influence Registration Scheme, another component of the National Security Act, is set to launch in 2025, requiring individuals working on behalf of foreign powers to register their activities. Officials hope this will increase transparency around foreign influence operations and provide additional tools to counter state threats.
As the three Essex suspects remain on bail, the investigation continues under the direction of Counter Terrorism Policing. The arrests serve as a reminder of what MI5 Director General Ken McCallum has called a “game changing update” to Britain’s counter-espionage capabilities, as authorities grapple with an increasingly complex threat landscape.
Follow for more updates on Britannia Daily
