Montenegro Arrests then Expels Russian 'Rybar' Network Leader, Associates

Montenegrin authorities detained on Friday five persons believed to be the leaders of the Russian media and influence network "Rybar," which Western security agencies view as a sophisticated tool for Kremlin influence operations.

Prime Minister Milojko Spajić framed the action in a post on X as a national security and foreign interference operation.

Spajić noted his government had previously warned of "attempts at hybrid action and destabilization of Montenegro" as the nation pursues European Union integration. Cautioning against "hasty statements," the Prime Minister stated that "serious indications" require every lead to be thoroughly investigated within a broader security context.

"Institutions are doing their job, Montenegro is protecting its interests, and no one will endanger our European future," Spajić wrote.

Montenegrin daily Vijesti cited the Montenegrin Police Directorate as stating the arrests were carried out with the support of "international partners" in order to neutralize illegal activities.

The five Russian citizens were identified as Rybar founder Mikhail Zvinchuk (35), his wife Valeriya Zvinchuk (37), Sergey Belous (35), Pavel Lekatorchuk (43), and Kira Doroshenko (21). Both Mikhail and Valeriya Zvinchuk have been blacklisted by Western governments as key figures in malign hybrid activities and foreign information influence operations.

Police said the group had entered Montenegro less than two days prior and was staying at a hotel in Risan. Following a joint intelligence operation, authorities revoked their residency and issued formal expulsion orders under the Law on Foreigners, citing direct threats to "national and internal security."

During the raid, officers confiscated what they described as "sophisticated digital equipment," including a drone, high-resolution cameras, GoPros, and multiple mobile phones. The seized gear has been handed over to state prosecutors in Podgorica and Kotor for forensic analysis to determine its intended use.

Responding to the raid, Rybar confirmed on Telegram that Zvinchuk and his team had been detained but rejected any allegations of wrongdoing. The group stated its team was residing in Montenegro legally to film content at the historic Cetinje Monastery after submitting an official request to local authorities—a claim that aligns with the confiscated camera equipment but which authorities view as a cover for malign operations.

However, despite claims that the visit was strictly focused on documentary production, Rybar's own recent activity demonstrated active engagement with the region's geopolitical shifts from inside the country. On September 28, the channel published a post from Montenegro addressing Podgorica's decision to introduce a visa regime for Russian and Belarusian citizens to align with EU policies. The post also wove in regional and international commentary, including domestic political shifts in Serbia, defense cooperation between Turkey and Kosovo, and military developments in Ukraine.

This mirrors an operational pattern previously utilized by the network across the region. According to a December 2025 investigation by the Balkan outlet Detektor, Zvinchuk similarly traveled unannounced to Banja Luka, Bosnia and Herzegovina, during the extraordinary elections for the presidency of Republika Srpska. The following day, Rybar published a video analysis featuring Zvinchuk standing in front of the local government building, broadcasting political commentary that the elections had been "imposed from outside."

The detentions drew a sharp reaction from Moscow. Rybar noted that Russian diplomats, backed by statements from presidential spokesperson Dmitry Peskov and Foreign Ministry spokesperson Maria Zakharova, are working to protect the detainees' rights. Meanwhile, Dmitry Medvedev, Deputy Chairman of Russia’s Security Council, warned Russians against traveling to European countries, claiming on Telegram that a "hunt" has been declared against citizens who speak the truth. Medvedev suggested that Russia may need to replenish its "exchange fund" with "European and American idiots" to secure the release of its citizens.

Founded in 2018, Rybar initially focused on military analysis before expanding into one of the most influential pro-war Telegram channels during the invasion of Ukraine.

The United Kingdom sanctioned Zvinchuk and Rybar LLC, alongside Russian ideologue Aleksandr Dugin and the Kremlin-backed foundation Pravfond. OCCRP and its partners previously revealed that Pravfond—created by Russia’s Foreign Ministry to ostensibly provide legal aid for "compatriots" abroad—has quietly funneled money to spies, propagandists, and a network of affiliated entities, which includes Rybar.

The network has also been heavily targeted by the United States. The U.S. State Department’s "Rewards for Justice" program is offering up to $10 million for information on foreign interference in U.S. elections, publicly identifying Rybar LLC and 19 individuals—including Rybar Director Mikhail Zvinchuk and Creative Director Valeriya Zvinchuk—who have carried out malign influence operations.

According to the official State Department notice, Rybar was previously funded by the late Russian mogul Yevgeny Prigozhin and currently receives funding from the sanctioned Russian state-owned defense corporation Rostec. The U.S. government noted that Rybar relies on Rostec funding to bolster Russia’s military capabilities and advance anti-Western narratives.

Ahead of the 2024 U.S. presidential election, Rybar specifically established the "TEXASvsUSA" channel on X alongside other propaganda channels like #HOLDTHELINE and #STANDWTHTEXAS. Through these platforms, the State Department states that Rybar exploited the politically sensitive issue of undocumented immigrants at the Texas border to "sow discord, promote social division, stoke partisan and racial discord, and encourage hate and violence in the United States."

The regional presence of Zvinchuk aligns with a November 2024 analysis by the Institute for the Study of War (ISW), which highlighted his public claims that Rybar oversaw a global network of over 250 channels operating in 28 languages, alongside plans to establish "media schools" in Serbia, Bosnia and Herzegovina, and Kyrgyzstan to project influence.