USDT in the background of a UK arson case
A Russian-linked sabotage network reportedly used tether (USDT) as payment bait in an arson plot against UK Prime Minister Sir Keir Starmer. Multiple UK and European outlets report that the offer targeted a 22-year-old Ukrainian man with “thousands of dollars worth of tether,” according to coverage from the BBC, Financial Times (FT), and The Guardian.
The plot did not stay hypothetical. Roman Lavrynovych was convicted on Monday alongside Stanislav Carpiuc, 27, for conspiracy to commit arson. The case involved setting fire to Starmer’s old car and a previously held Islington flat, plus a property that Lavrynovych rents out to his sister, per Protos’ summary of those reports.
The Telegram “handler” and a far-right signaling trail
Protos reports that the arsonists acted at the behest of a Russian-based Telegram user known as “El Money.” Before the firebombing, El Money allegedly paid Lavrynovych to post posters advertising Direct Action, described in the reports as a Russian-manufactured far-right group.
The BBC suspects “El Money” is 23-year-old Russian diplomat Evgeny Lyukshin, the son of a senior Russian official, Protos says. The FT reportedly connected El Money to the Russian hacktivist group NoName057(16), which the US has labeled a “state-sanctioned project.”
How USDT helped the money move
A key detail in the laundering mechanics: Lavrynovych’s crypto address, which Protos says was sent to his Russian handler, received funds from wallets traced to Garantex. Protos notes that Garantex is a crypto exchange that has faced US and UK sanctions and is widely suspected of supporting efforts by Russia to avoid them.
Protos adds that criminals often use USDT when converting illicit proceeds into cash, skirting sanctions, or funding criminal activity. In this case, USDT was reportedly offered as the payment instrument for arson on the condition that the attacks made it into national news.
Protos also cites Garantex’s track record. The exchange has long been suspected of aiding Russia’s government to evade sanctions and, according to Protos, has processed up to $20 billion worth of USDT transactions despite US and UK sanctions.
What the court record did not spell out
Lavrynovych told the court he did not know the targets were connected to Starmer, according to Protos. That matters because it reframes culpability around intent and awareness.
But Protos flags a second issue: the Russian side of the case reportedly was not explored in the way many readers might expect, and the arsonists’ handler is not mentioned in the Crown Prosecution Service’s press release. In other words, the “crypto-to-arson” story has reporting on the payment and the Telegram chain, but not the same level of prosecutorial detail for every link.
Timeline and sentencing
The sentencing date is Friday for the two convicted men, Protos reports.
Key facts reported across outlets
| Item | What reports say | Source named in Protos |
|---|---|---|
| Payment instrument | USDT offered to Lavrynovych, “thousands of dollars worth” | BBC, FT, The Guardian |
| Payment condition | Arson attacks must reach national news | FT, The Guardian |
| Conviction | Lavrynovych convicted Monday with Stanislav Carpiuc for conspiracy to commit arson | Protos’ summary of reports |
| Targets | PM’s old car, old Islington flat, and another property Lavrynovych rents to his sister | Protos’ summary of reports |
| Alleged handler | Telegram user “El Money,” Russian-based | FT, The Guardian, BBC (as summarized by Protos) |
| Suspected identity | BBC suspects “El Money” is Evgeny Lyukshin | BBC (as summarized by Protos) |
| Links to hacktivism | FT links El Money to NoName057(16) | FT (as summarized by Protos) |
| Crypto tracing | Lavrynovych’s crypto address received funds traced to Garantex | Protos |
| Exchange risk | Garantex suspected of aiding Russia to avoid sanctions and processed up to $20B USDT transactions | Protos |
| Sentencing | Both men to be sentenced Friday | Protos |
Why this matters beyond one case
This is not just a story about arson. It’s a story about how criminal networks try to turn crypto rails into deniable payments. Protos’ recap leans on the same pattern law enforcement and investigators keep describing: USDT as a friction-reducer, especially when people want to move value while keeping borders and compliance screens in the blind spot.
If the handler’s identity and the sanction-avoidance path remain underdeveloped in official release material, that gap can still shape how cases get understood publicly. The sentencing later this week will close one chapter for the convicted defendants. The bigger question is whether the reporting chain Protos summarizes becomes a model for the next case, or stays a rare instance where the crypto wiring gets spelled out.