Inside Ukraine's Hidden Telecommunications War
Thousands of Ukrainian mobile numbers, millions of pounds' worth of financial transactions, and commercial telecommunications equipment incorporated into Russian attack drones
An investigation that began with the arrest of two suspected agents in 2025 has since exposed the potential scale of a supply network operating across international borders. Meanwhile, Russian drone designs have evolved to incorporate increasingly sophisticated communications systems.
How did ordinary SIM cards become part of a modern weapons system, and what does the story reveal about the changing nature of warfare?
In modern warfare, some of the most consequential technologies are not necessarily designed for military use.
Mobile phone SIM cards, commercial computer components and ordinary telecommunications equipment can all find their way into weapons systems.
Their original purpose may be to connect a phone to a network, transmit data or provide access to the internet.
Once incorporated into military hardware, however, their function can become considerably more consequential.
Ukraine has been investigating an alleged operation in which Ukrainian SIM cards were purchased, activated and transferred to Russia for use in unmanned aerial vehicles attacking Ukrainian cities.
What initially appeared to be a relatively small intelligence operation has since developed into a much larger story.
In May 2026, Ukrainian financial investigators reported identifying more than 24,000 mobile numbers associated with one part of a suspected supply scheme, alongside more than 29,000 transactions involving mobile operators.
Meanwhile, technical research published in September 2026 documented how Russian Geran attack drones had evolved from carrying improvised communications equipment to incorporating more established telemetry and networking systems.
The two developments reveal different aspects of the same issue: the growing importance of civilian telecommunications technology in military operations.
The Investigation That Exposed the Supply Network
On 22 September 2025, Ukraine's Security Service, known as the SBU, announced the detention of two people suspected of working for Russia's Federal Security Service, or FSB.
According to the SBU, the suspects had allegedly been instructed to purchase Ukrainian SIM cards and arrange their transfer to Russia through intermediaries in European Union countries.
The cards were reportedly destined for Russian drone production facilities in Tatarstan, a republic in western Russia associated with the manufacture of military unmanned aircraft.
The SBU alleged that the equipment was intended to improve communications and navigation capabilities in Russian drones used against Ukraine.
Investigators also alleged that the suspects had attempted to recruit employees of Ukrainian mobile telecommunications companies to obtain information from within the industry.
One of the suspects was described as a former law-enforcement officer. The SBU said searches had uncovered smartphones containing communications with alleged Russian handlers and foreign intermediaries, as well as SIM cards prepared for shipment.
The suspects faced allegations of high treason under Ukrainian law during martial law.
These details came from the Ukrainian security service conducting the investigation. They should therefore be understood as official allegations rather than proof that every aspect of the alleged operation had been established by a court.
Nevertheless, the investigation raised an important question: why would a military organisation operating in Russia want telecommunications equipment associated with Ukrainian mobile networks?
The answer became clearer as further investigations and technical research emerged.
May 2026: The Scale of the Operation Becomes Clearer
On 14 May 2026, Ukraine's State Financial Monitoring Service announced that it had identified a scheme involving Ukrainian SIM cards allegedly supplied to Russia for use in military drones. The figures reported were substantially larger than those associated with the original arrests.
According to the service, financial investigators had identified more than 24,000 mobile numbers and over 29,000 transactions involving mobile operators in one part of the investigation.
More than 60 million Ukrainian hryvnias had reportedly passed through accounts associated with participants in the suspected scheme.
Ukrainian officials alleged that individuals organised the purchase and activation of SIM cards before transferring them to Russian recipients.
The money was reportedly moved through accounts belonging to individuals and businesses, including people suspected of acting as financial intermediaries.
Investigators also reported that one of the alleged coordinators was located in an EU country and that cooperation with European financial intelligence services had helped establish links between participants.
According to the Ukrainian authorities, the cards were intended for use in unmanned aerial vehicles involved in attacks on Ukrainian cities.
The reported purposes included communications, navigation and improving the accuracy of drone operations.
What do the numbers actually tell us?
The figure of 24,000 mobile numbers is striking, but it needs to be interpreted carefully.
It does not establish that 24,000 individual drones were equipped with Ukrainian SIM cards. A mobile number is not equivalent to a drone, and the public announcement did not establish that every number identified had been installed in a weapon.
Similarly, the reported 60 million hryvnias represents money that passed through accounts associated with participants in the suspected operation. It should not automatically be interpreted as the profit made by those involved or as the cost of the SIM cards themselves.
The figures nevertheless suggest that investigators were examining something considerably larger than a handful of isolated purchases.
The May announcement indicated a potentially extensive procurement and financial network, with transactions, intermediaries and international connections requiring further investigation.
It remains unclear from the publicly available information how much of this operation was directly connected to the two suspects detained in September 2025, or whether the later investigation concerned a separate but similar network.
Why Would a Russian Drone Need a Ukrainian SIM Card?
To understand the significance of the case, it is necessary to separate the SIM card from the technology in which it is used. A SIM card identifies a subscriber to a mobile network and allows a compatible device to authenticate with a mobile operator.
It is not, by itself, a transmitter, navigation system or flight controller. Those functions require additional electronic hardware and software.
However, SIM cards can be used in cellular modems installed in many types of equipment, including vehicles, industrial machinery, surveillance devices and unmanned aircraft.
When a suitable modem is installed in a drone, it may be possible to establish a connection through a compatible mobile network.
Depending on the system's design and available coverage, that connection could support the transmission of telemetry, location information, images or other data.
The equipment may therefore provide a communications channel alongside the drone's other electronic systems.
This distinction is crucial. A drone equipped with cellular communications is not necessarily controlled entirely through a mobile network, and the presence of a SIM card does not automatically mean the aircraft can be redirected from anywhere.
Its actual capabilities depend on the modem, antennas, software, network access and wider architecture of the aircraft.
Why use a foreign SIM card?
A SIM card associated with a foreign operator may behave differently from one issued by a domestic operator because of differences in roaming arrangements, network access and other technical factors.
Multiple cellular connections can also provide alternative communications options. However, a Ukrainian SIM card does not automatically connect to a Ukrainian network when a drone is operating in Russia. Connectivity depends on the networks available and the relevant technical and commercial arrangements.
The public evidence does not establish every reason Russian drone manufacturers sought Ukrainian SIM cards.
What the investigations and technical research indicate is that these cards formed part of a broader communications arrangement rather than functioning as independent navigation devices.
From Improvised Modification to Standardised Equipment
One of the most revealing developments comes from research published by the Center for Strategic and International Studies (CSIS) on 4 September 2026.
Researchers Kateryna Bondar and Nicole Errera examined the evolution of Russia's Geran drone programme, which uses Russian-produced versions of the Iranian-designed Shahed family of unmanned aircraft.
Their analysis described how Russia has repeatedly modified these drones in response to Ukrainian defensive measures. The changes have included developments in navigation, communications, propulsion and other onboard systems.
The report also documented the evolution of cellular communications equipment.
The early experiments
In November 2023, a Geran drone was reportedly recovered with a 4G modem housed in a 3D-printed enclosure attached to its airframe.
The modification appeared improvised rather than integrated into the original production design. Further examples reportedly combined cellular modems with cameras, suggesting experiments with transmitting information from drones during flight.
Such equipment could potentially allow operators to receive information about a drone's location or surroundings, although the precise capabilities of individual recovered systems varied.
The important development was the move away from treating the drone exclusively as a device that followed a pre-programmed route without communicating information back to its operator.
The telemetry module
By early 2025, according to the CSIS analysis, certain Geran-2 variants were equipped with a more standardised telemetry module.
The researchers identified a system incorporating a Raspberry Pi minicomputer and two 3G/LTE modems manufactured by Chinese telecommunications company ZTE.
The module used Russian and Ukrainian SIM cards. The report described this as an evolution from an earlier arrangement that used a Ukrainian Kyivstar SIM card.
By June 2025, the equipment was reportedly appearing widely on Geran drones. By the end of that year, it appeared to have been integrated inside the airframe rather than simply attached externally.
The progression is significant. A component that began as an improvised modification had apparently become part of a more established production configuration.
This is one of the clearest illustrations of how military technology can develop through rapid experimentation: equipment is tested in the field, modifications are assessed, and those considered useful can be incorporated into subsequent production.
The precise configuration varies between drone models, and the CSIS findings should not be interpreted as evidence that every Russian attack drone carries identical equipment.
Nevertheless, the research provides a more detailed technical context for the earlier reports about Ukrainian SIM cards.
What Can Cellular Communications Actually Do?
The presence of SIM cards in a drone raises questions about what the technology enables.
Cellular communications can provide a route for transferring digital information between compatible devices and network-connected systems.
Depending on the equipment, this may include telemetry, position-related information, images or other data.
Such information can be useful in military operations, where understanding what is happening during a mission may be as important as knowing whether an aircraft has reached its destination.
However, it is important not to confuse several separate functions.
Navigation determines or estimates where an aircraft is and how it should travel. Telemetry communicates information about the aircraft or its operation. Remote control allows an operator to issue commands to a system. Targeting involves identifying and selecting an object or location for an attack.
These functions can interact, but they are not interchangeable.
A SIM card does not independently perform any of them. It may provide a communications connection through which relevant information can be exchanged, while other hardware and software perform the underlying tasks.
The Ukrainian authorities' statements about improving communications, navigation and targeting should therefore be understood as descriptions of the alleged intended use of the equipment, not proof that a SIM card alone provides those capabilities.
The public evidence also does not establish the contribution made by each component in every drone recovered from the battlefield.
The Wider Evolution of Russia's Geran Drones
The significance of the SIM-card investigation becomes clearer when placed within the broader development of the Geran programme.
According to CSIS, Russia has repeatedly modified the original Shahed-derived design, adapting its systems in response to Ukrainian defences. These developments have included changes to satellite-navigation equipment, electronic-warfare resistance, communications systems and onboard cameras.
The researchers describe a development process in which battlefield experience influences subsequent production decisions, allowing successful modifications to be adopted and less useful experiments to be abandoned.
Commercial components have played an important role in this process.
Computers, modems and cameras designed for civilian markets can provide functions that would otherwise require more specialised equipment. They can also be relatively accessible and adaptable, although their suitability depends on the intended application.
The result is not necessarily a sophisticated weapon in every individual component. Rather, it is a system whose capabilities can change as new components and configurations are introduced.
Communications beyond a single cellular connection
The CSIS report also describes the introduction of mesh-radio equipment into some Russian Geran drones.
Mesh networking allows compatible devices to relay information between one another, potentially extending communications through a network of connected nodes.
In suitable configurations, such a system can provide alternative paths for information if an individual connection becomes unavailable.
The researchers reported that these systems were being used to support communications between drones and operators, with some aircraft serving as relays for others.
This is a separate technology from the use of SIM cards, although the two can form part of a wider communications architecture. The distinction matters because the evolution of Russian drone communications cannot be explained by SIM cards alone.
The broader development involves several technologies being combined and adapted for different operational purposes.
Why Russia's Use of Commercial Technology Matters
Military organisations have long used equipment originally developed for civilian markets. What has changed is the speed and breadth with which commercial electronics can be incorporated into relatively inexpensive unmanned systems.
Commercial hardware can offer several advantages. It may be available in large quantities, cost less than specialised military equipment and be easier to replace when damaged or lost. Its software and interfaces may also be familiar to engineers working across civilian and military applications.
But these advantages come with limitations.
Civilian equipment may not be designed for extreme temperatures, vibration or other conditions encountered during military operations. Mobile connectivity depends on network availability, and communications can be disrupted or lost.
The presence of a cellular modem does not make a drone immune to electronic warfare, nor does it guarantee that information will reach its intended recipient.
The military value lies in how the equipment is incorporated into a complete system.
For manufacturers, this can mean combining relatively ordinary components with specialised navigation, flight-control and communications equipment.
For governments and telecommunications companies, it raises questions about supply-chain oversight, suspicious procurement and the possible military uses of products sold into civilian markets.
Russia's Response: Restrictions on Foreign SIM Cards
The use of foreign SIM cards in drones has also become part of a wider debate about telecommunications security in Russia. In July 2026, Ukrainian media reported that Russia had tightened restrictions affecting internet connectivity through foreign SIM cards.
Reporting described additional filtering arrangements for roaming traffic and Russian authorities' stated concerns about the potential use of foreign SIM cards in Ukrainian drone operations.
The measures were presented within a broader security and internet-control context.
Restrictions on foreign SIM cards could affect the availability of particular communications channels. However, their practical impact would depend on the networks affected, the equipment involved and the ability of users to adapt.
Such measures also affect ordinary people using foreign SIM cards, not just military equipment.
A foreign SIM card in a person's phone is not evidence that the person is involved in drone operations. Nor does the existence of a military application establish that every foreign SIM card presents the same security risk.
The wider issue is how governments respond when ordinary communications infrastructure may also be used in military systems.
Could Someone Be Shot Simply for Carrying a Ukrainian SIM Card?
The story has prompted a more alarming question: could a Ukrainian SIM card place an ordinary person in danger while travelling in Russia?
The available evidence does not establish that simply possessing a Ukrainian SIM card is grounds for being shot.
The reported cases concern allegations of organised procurement and the use of telecommunications equipment in military drones. They do not establish that ordinary travellers carrying Ukrainian SIM cards are routinely targeted.
Nevertheless, Russia presents serious security risks for foreign nationals. The UK Foreign, Commonwealth & Development Office advises against all travel to Russia and warns of the possibility of detention and other serious difficulties.
Electronic devices may attract scrutiny during security checks, and authorities may investigate communications or other material they consider relevant to suspected criminal or intelligence activity.
The context matters. A person suspected of participating in an organised supply network may face a different situation from an ordinary traveller carrying a phone.
The SIM-card investigations therefore provide a plausible reason why the technology might attract security attention, but they do not substantiate the claim that possession alone makes someone a legitimate target for lethal force.
What Has Been Established — and What Remains Unknown?
The story now rests on several strands of evidence, each with different strengths and limitations.
Established through public reporting
- In September 2025, the SBU announced the detention of two suspected Russian agents accused of arranging the supply of Ukrainian SIM cards to Russia.
- In May 2026, Ukraine's State Financial Monitoring Service reported identifying more than 24,000 mobile numbers and over 29,000 transactions in one part of a suspected supply scheme.
- The same financial investigation reported that more than 60 million Ukrainian hryvnias had passed through accounts associated with participants.
- In September 2026, CSIS published a detailed analysis of the evolution of Russian Geran drones, including their use of cellular modems and Russian and Ukrainian SIM cards in certain configurations.
Still uncertain
- Whether the September 2025 arrests and the May 2026 financial investigation involved the same network.
- How many of the mobile numbers identified were actually used in drones.
- The exact operational contribution of the Ukrainian SIM cards in each aircraft.
- The extent to which the reported financial transactions were directly connected to specific drone shipments.
- The final judicial outcomes of the original arrests and the later investigation.
These limitations are important. They prevent the article from presenting every official allegation as a proven fact.
They do not, however, remove the wider significance of the technical findings.
The CSIS analysis independently provides a detailed account of the evolution of communications equipment on Russian drones, while the Ukrainian investigation offers evidence of the alleged procurement and financial networks supporting the acquisition of SIM cards.
Taken together, the reports provide a more substantial picture than the original arrest announcement alone.
Conclusion: The Changing Boundary Between Civilian and Military Technology
The story of Ukrainian SIM cards allegedly supplied to Russia for use in attack drones is not simply a story about mobile phones.
It is a story about how commercial technology can be absorbed into military systems, how supply chains can cross international borders, and how relatively inexpensive components can acquire new significance when combined with other equipment.
The September 2025 arrests brought attention to an alleged supply network. The May 2026 financial investigation indicated that the procurement activity under examination could be extensive.
The September 2026 CSIS analysis then placed the story within the wider evolution of Russian drone technology, documenting the progression from improvised cellular modifications to more established communications systems.
The SIM cards themselves are not weapons. They do not independently navigate drones, identify targets or control aircraft.
Their significance lies in the communications capabilities they can provide when incorporated into a larger system.
That distinction illustrates a defining feature of contemporary warfare: the military importance of a component increasingly depends on how it is used, rather than what it was originally designed to do.
A device intended to connect a phone to a mobile network can become part of a system used to gather information or support an attack thousands of kilometres from the telecommunications infrastructure for which it was designed.
The result is a new kind of security challenge, one that extends beyond conventional weapons manufacturers to telecommunications operators, financial investigators, international logistics networks and governments.
In modern warfare, even the smallest components can become strategically significant.
The challenge is understanding what they actually do, who is supplying them and how they are being incorporated into the systems that shape the battlefield.
Sources and further reading
1. Security Service of Ukraine (SBU), 22 September 2025: Announcement concerning the detention of suspected agents accused of supplying Ukrainian SIM cards for Russian drones.
2. Interfax-Ukraine, 14 May 2026: Report on the State Financial Monitoring Service's investigation into the alleged SIM-card supply scheme, including the reported mobile numbers and financial transactions.
3. Center for Strategic and International Studies (CSIS), 4 September 2026: From Shahed to Geran: How Russia Continues to Reinvent the One-Way Attack Drone. Technical analysis of changes to Russian drone navigation, communications, electronics and other systems.
4. UK Foreign, Commonwealth & Development Office: Official travel advice for Russia, including security risks for foreign nationals.
Read more on:
Civil Wars or Planned Resource Extraction?
Will Data Centres Become Viable Targets During War? (2026 Guide)
The Quiet Tremor War: Manufactured Earthquakes
The International Stabilisation Force: The Covert Cover-up?
Comments
Post a Comment