Friday-night drug deals helping Russian war machine, UK crime agency warns

The UK’s National Crime Agency's Operation Destabilise has uncovered Russian-led money‑laundering networks (TGR and Smart) operating in at least 28 UK towns that processed “billions of pounds” through cash‑rich businesses, stash houses and smuggling, converted proceeds into cryptocurrency and—via a Kyrgyz lender (Keremet Bank), 75% acquired by George Rossi’s Altair Holding—facilitated payments for Russian state bank Promsvyazbank, which the NCA says helped fund Russia’s military‑industrial base. Originating from a probe of the Evil Corp ransomware gang, the investigation has produced arrests and convictions, exposed links between UK street‑level drug cash and geopolitical arms funding, and prompted stepped‑up disruption efforts and public warnings to couriers, increasing enforcement, compliance and reputational risks for cash‑intensive UK sectors and cross‑border payment channels used to evade sanctions.

Analysis

The UK National Crime Agency's Operation Destabilise has mapped a large, vertically integrated money‑laundering ecosystem in which the TGR and Smart networks operated across at least 28 UK towns, processing “billions of pounds” through cash‑rich businesses, stash houses and crypto conversion. Investigators found that George Rossi’s Altair Holding SA acquired a 75% stake in Kyrgyzstan’s Keremet Bank on 25 December 2024, and that the bank was used to facilitate payments for Russian state bank Promsvyazbank (PSB), which the US Treasury has labelled a “sanctions evasion hub” and which the NCA says supported Russia’s military‑industrial base.

Operation Destabilise originated in a probe of Evil Corp ransomware and produced arrests, convictions and active prosecutions (including Ekaterina Zhdanova in custody) alongside public outreach to couriers; one spreadsheet indicated £6.63m laundered between August 2022 and June 2023 and couriers typically take a 0.5% commission. The evidence of cross‑border bank purchases, cash smuggling and conversion into crypto demonstrates systemic counterparty and jurisdictional risk rather than isolated street‑level activity.

Market implications include heightened AML enforcement and reputational risk for UK cash‑intensive sectors (construction, used‑vehicle trade), increased scrutiny on correspondent banking links to Central Asian banks, and direct negative pressure on PSB‑linked exposures (per‑ticker sentiment strongly negative), which could raise compliance costs and operational disruption for firms with related counterparties.

Key Decisions for Investors

• Reduce or hedge direct exposure to Promsvyazbank (PSB) and instruments tied to banks identified as sanctions‑evasion conduits until enforcement and sanction risk subsides
• Perform immediate enhanced due diligence on portfolio companies with material revenue from cash‑intensive UK sectors (construction, used car dealers, cash logistics) and stress test for higher AML compliance costs and potential asset seizures
• Avoid new counterparty relationships with opaque Central Asian retail banks or entities showing recent unusual ownership changes (eg, rapid stake acquisitions), and require tightened correspondent‑bank controls where such links exist
• Monitor NCA prosecutions, UK and US regulatory actions and public guidance as potential catalysts; favor short‑duration or hedged positions in regional financials and payment processors until clarity on enforcement scope and systemic contagion emerges