A standard courtroom trial usually ends when the hammer drops and the guilty party heads to a prison cell. That is exactly what happened at the Old Bailey when Roman Lavrynovych and Stanislav Carpiuc were convicted for their roles in a series of targeted arson attacks. The Home Office released a statement saying justice had been done. British Prime Minister Keir Starmer expressed relief that the individuals who directly endangered lives were held accountable.
But if you look closely at the details of the six-week trial, it becomes obvious that this conviction only scratched the surface. The foot soldiers are going to jail, but the masterminds who pulled the strings from thousands of miles away remain entirely out of reach.
The investigation revealed that these attacks targeted property directly linked to the Prime Minister. It was not a random act of vandalism, and it was not a localized political protest. Instead, it was an operation orchestrated entirely through digital platforms by a shadowy coordinator operating under the Telegram handle El Money. The foot soldier was a 22-year-old Ukrainian construction worker living in London. The puppet master spoke Russian, sent payments online, and gave precise instructions on how to mix flammable liquids from a standard hardware store.
This case exposes a massive vulnerability in modern domestic security. Foreign entities do not need to slip agents through border control anymore. They can simply buy vulnerable people online to do their dirty work.
Inside the Target List
The arson campaign took place over several chaotic days in May 2025. It kicked off on May 8 when a Toyota RAV4 that used to belong to Starmer was set on fire. The escalation didn't stop there. By May 11, a fire was set in the doorway of an Islington residential property managed by a company where Starmer previously served as a director and shareholder.
The final and most dangerous attack hit a home in Islington owned by Starmer on May 12. The Prime Minister's sister-in-law, Judith Alexander, was staying at the residence with her family. In her court testimony, she described the terror of waking up to a house filling with smoke, leaving her struggling to breathe.
Counter Terrorism Policing London took over the case immediately after the third fire. Detectives under Commander Helen Flanagan moved fast. They pulled CCTV footage, traced digital footprints, and arrested Lavrynovych on May 13. They found a petrol can with his DNA on it. They tracked down security footage from a B&Q store showing him purchasing white spirit right before the blazes. His trainers even tested positive for the exact chemicals used at the scene.
Lavrynovych was convicted of conspiracy to commit arson and two counts of arson being reckless as to whether life would be endangered. Carpiuc, a 27-year-old Romanian national, was convicted alongside him for his role in the conspiracy. A third man, Petro Pochynok, was acquitted. The two convicted men face sentencing at the Old Bailey on June 19, 2026.
The Mystery of El Money
While the Met Police celebrated the quick arrests, the trial itself ignored the most alarming part of the entire plot. Jurors heard practically nothing about the handler behind the screen.
El Money spent seven months grooming Lavrynovych. The digital grooming started small. Lavrynovych was initially paid to post anti-Islam posters and spray graffiti in Muslim neighborhoods across London. The clear goal was to stoke local racial and religious unrest. Once the handler established control, the demands escalated to arson. Lavrynovych testified that he was offered larger sums of money for the fires and was explicitly threatened when he hesitated.
El Money Telegram Message to Attacker:
"It's all dead quiet so far — not a single article or announcement about the incident on this street."
The handler wanted public chaos and media coverage. He even ordered Lavrynovych to film the fires as proof. Ironically, the attacks stayed quiet initially because Lavrynovych was terrible at filming them. One video of the burning car lasted only a few seconds, and another video captured nothing but the sound of matches clicking in the dark.
James Scobie, the defense lawyer for Lavrynovych, argued that his client was merely a vulnerable, ignorant puppet used by a serious, sophisticated operator. Scobie openly expressed frustration that the trial failed to look into the true architect of the crime, calling the operation an assault on the institutions and fabric of the country.
Why the State Threat Remains Unaddressed
The elephant in the courtroom was Russia. The setup matches the exact profile of Russian state-backed sabotage operations that have flared up across Europe over the last few years. Experts note that these attacks targeted Starmer precisely because of his vocal and financial support for Ukraine.
Yet, the prosecution did not bring charges under Britain's National Security Act of 2023. Because those specific state-threat charges were left off the table, prosecutors did not present any formal evidence linking the plot to Moscow. Justice Neil Garnham went so far as to instruct the jury not to speculate about the handler's true identity.
This creates a massive disconnect between intelligence and evidence. British intelligence officials know that El Money spoke Russian and is highly likely hiding out inside Russia. But knowing something in an intelligence briefing is completely different from proving it beyond a reasonable doubt in front of a British jury.
By treating this strictly as a criminal arson case rather than a state-sponsored hostile act, the government secured quick convictions but missed the chance to publicly hold a foreign adversary accountable. The Home Office has repeatedly refused to comment on whether they officially blame the Kremlin.
The New Playbook for Foreign Interference
This case proves that the strategy for foreign disruption has completely shifted. Hiring local, vulnerable proxies provides hostile states with cheap execution and total deniability. If the proxy gets caught, they go to a British prison while the handler logs out of Telegram and finds a new target.
The UK is struggling to keep up with this proxy threat. Just a few months ago, Starmer himself voiced deep concern over foreign states using local criminals to launch arson attacks against Jewish community sites and synagogues in London. The government is floating ideas for new legislation to combat this trend, but passing laws takes time that security forces don't have.
If you want to protect your community or business from these types of modern security threats, you have to look past the physical perpetrators. Security teams need to focus heavily on digital hygiene, monitoring localized vandalism trends, and realizing that low-level property damage might actually be reconnaissance for something much larger. Watch for unusual digital recruitment targeting vulnerable young people in gig-economy spaces or online forums. The foot soldiers change, but the digital signatures of the handlers stay the same.
