U.S. Charges Russians in Terror Financing Case Tied to Global RIS Network

U.S. prosecutors in the Southern District of New York have charged several Russian citizens and other alleged associates with financing terrorism and conspiring to carry out contract killings around the world, including on U.S. territory, in a case that underscores how national security threats increasingly intersect with global payment flows, identity networks and cross-border digital enforcement.

According to a Justice Department press release published on Tuesday, September 15, the defendants allegedly worked for Russian intelligence services through a structure identified as RIS Network. U.S. authorities say the network financed terrorist attacks against countries allied with Ukraine and prepared killings of Russian dissidents. The FBI participated in the investigation.

The indictment, as summarized by the Justice Department, alleges that the accused paid rewards to people in the United States and other countries for preliminary reconnaissance and targeted killings. Prosecutors also say the defendants instructed accomplices to commit and attempt terrorist attacks against civilian and military infrastructure in European countries that support Ukraine or are perceived as supporting it.

Payments at the Center of a Security Case

For FinPulse readers, the case is notable not only for the geopolitical allegations but also for the financial mechanics implied by the charges. Terror financing cases typically turn on how money, compensation and operational support move across borders, and this indictment places alleged payments for reconnaissance and killings at the heart of the U.S. government’s claims.

The Justice Department described RIS Network as a global assassination organization that also operated inside the United States. Assistant Attorney General for National Security John Eisenberg said the accused tried to recruit U.S. citizens and foreigners to carry out murders on behalf of the Kremlin.

They “attempted to recruit U.S. citizens and foreigners to commit murders on behalf of the Kremlin,” Eisenberg said, according to the Justice Department’s account.

ABC News, citing U.S. Attorney General Todd Blanche, reported that the charges also concern attempts to kill an unnamed Russian dissident whom the accused believed to be in Washington, D.C. The source article does not identify the dissident or provide details about whether any funds were transferred through banks, cash couriers, crypto assets or other payment channels.

Still, the allegations land in a regulatory environment where banks, payment processors, digital asset platforms and compliance technology providers face rising expectations to detect suspicious cross-border activity tied to sanctions, terrorism, organized crime and state-linked networks. The case adds another example of how financial intelligence can become central to investigations that begin as counterterrorism or counterintelligence matters.

Alleged Russian State-Linked Network

According to U.S. authorities, RIS Network is a unit of the Russian state apparatus engaged in overseas attacks, including assassinations. The Justice Department said the network focused on Russian dissidents and defectors and, more recently, on countries considered allies of Ukraine.

Three of the accused are described by U.S. officials as holding senior positions inside RIS Network. Yuri Khrameev, also known by the nickname “Colonel Yuri,” is identified as a former colonel in Russian intelligence services who allegedly participated in recruiting people to carry out killings of Russian dissidents. His son, Kirill Khrameev, is described by U.S. prosecutors as an FSB officer.

Another defendant is Oemis Romagoza Durruti, a Cuban citizen residing in Russia. U.S. authorities suspect him of coordinating attacks by the network. Also named among the suspects accused of recruiting people to carry out assignments for the network are Cuban citizen Yaidel Delgado Suarez, known by the nickname “Viking,” and Venezuelan citizen Angel Eduardo Castro.

The defendants named in the terrorism financing charge face up to 20 years in prison if convicted, according to the Justice Department account cited in the source article. Yuri Khrameev, Suarez and Castro are also accused of conspiracy to commit murder for hire, an allegation carrying a potential sentence of up to 10 years. The accused are currently wanted.

Compliance Pressure for Finance and Tech

The case arrives as governments continue to widen the scope of financial surveillance tied to war-related sanctions, terrorism financing, cyber operations and illicit networks. For digital banks, fintech firms and crypto platforms, the allegations reinforce the operational challenge of screening customers and transactions that may be connected to state-backed activity, proxy actors or recruitment networks spanning multiple jurisdictions.

The source article does not state which financial institutions, if any, were used, nor does it identify any cryptocurrency transactions. But the nature of the allegations — rewards, recruitment, reconnaissance and operational coordination across the United States, Europe and Russia — points to the kinds of patterns that compliance teams are increasingly asked to monitor: small or structured payments, international transfers, payments to intermediaries, identity mismatches and links to sanctioned or high-risk actors.

Cybersecurity and financial technology companies are also relevant to the broader enforcement landscape. Investigations of this type often depend on digital communications, device data, transaction monitoring, watchlist screening and interagency intelligence sharing. The FBI’s role in the case indicates that U.S. authorities treated the alleged network as a matter involving both domestic security and overseas operations.

For investors in technology and financial services, the broader signal is one of continued regulatory demand for anti-money laundering systems, sanctions compliance tools, identity verification, fraud analytics and blockchain intelligence. At the same time, cases involving alleged state-linked networks can raise risk exposure for banks, exchanges and platforms that operate internationally and must reconcile commercial growth with increasingly complex national security obligations.

The Justice Department’s allegations remain allegations unless proven in court. But the case illustrates the degree to which modern security threats are now tied to financial infrastructure. Whether payments move through conventional banking rails, informal networks or digital platforms, prosecutors are placing the financing of alleged operations at the center of their case against the accused members and associates of RIS Network.