Ask Onix
Unwitting courier exposes Russia's sabotage network in Europe
A Lithuanian man has described how he was tricked into shipping explosive-laden parcels to the UK and Poland as part of a Russian military intelligence operation, marking the first public account from someone involved in the plot.
The parcel plot
Aleksandr Suranovas, 53, was hired via Telegram to post four parcels containing sex toys, body lotion, and massage cushions from Vilnius in July 2024. Unbeknownst to him, the items concealed sophisticated incendiary devices filled with nitromethane, a liquid high explosive. Timers inside the parcels were already activated when he collected them in a Vilnius park.
Three of the four parcels ignited within 48 hours-one at Leipzig airport just before being loaded onto a cargo flight to London, another near Warsaw, and a third in a Birmingham warehouse. A fourth device malfunctioned. No injuries were reported, but the damage was extensive.
Recruitment and denial
Suranovas, who speaks Russian as his first language, claims he was contacted by an old acquaintance known only as HK, who offered €150 ($173) for the delivery job. HK, believed to be a Moldovan based in Krasnodar, Russia, assured him the parcels contained nothing illegal. Suranovas insists he repeatedly asked for confirmation and was told to avoid asking too many questions.
"I would never have agreed to that," Suranovas told The Meta Times. "I was used." He maintains he had no knowledge of the explosives, despite CCTV footage showing him at DHL and DPD offices in Vilnius. He was arrested in August 2024 and charged with terrorism on behalf of Russia's GRU, a charge Moscow denies.
"I think this is active aggression against our nations. It's a clear message that those who support Ukraine will be hit by the Russians."
Vilmantas Vitkauskas, Head of Lithuania's National Crisis Management Centre
Russia's evolving sabotage tactics
Investigators across Lithuania, Poland, and the UK have linked the parcel plot to a broader wave of sabotage attacks in Europe since Russia's full-scale invasion of Ukraine. These include arson, derailed trains, and other covert operations. Twenty-two people are now in custody in connection with the plot, with suspects identified in multiple countries.
A former European diplomat to Russia noted that using untrained proxies like Suranovas adds "a layer of unpredictability-and incompetence" to such operations. Lithuania's former Defence Minister, Dovile Sakaliene, described this as Russia's signature style, designed to create plausible deniability by distancing operatives from the plot's masterminds.
Elijah Glantz, a security analyst at the Royal United Services Institute (RUSI), said Russia has increasingly turned to criminal networks to carry out its operations. "There is a litany of online groups willing to do just about anything for the right price," he said, adding that many recruits are given limited information to avoid exposure.
Suranovas's role and motives
Suranovas, who describes himself as ethnically Russian, has a history of criminal activity, including a 2022 fraud charge in Poland linked to a pyramid scheme and a 2016 conviction in Denmark for credit card fraud. He claims he was merely a courier, unaware of the parcels' contents, and insists he would never knowingly handle explosives.
"Not for a million dollars," he said. "No sum can compensate for your freedom." His relatives expressed shock at his arrest, describing him as a "speculator" who buys and sells goods rather than a terrorist.
During the delivery, Suranovas grew suspicious after the courier took his photograph and failed to use the agreed codeword. He texted HK, his handler, calling the situation "dodgy shit." Despite his unease, he proceeded with the deliveries, using his own debit card and a fake sender name-claiming it was to avoid spam.
Broader implications
The White House reportedly contacted Russia at a high level to demand an end to such operations, warning of "consequences" if they continued. Meanwhile, Lithuanian police uncovered additional explosives buried in food cans at a cemetery, along with drone parts, suggesting the plot may have been part of a larger operation.
Sakaliene called the parcel plot a "wake-up call" for Lithuania's allies, highlighting the threat of hybrid attacks. Suranovas himself speculated that the operation was a test for something bigger. "It was to show that their arms can reach deep and far," he said. "That they can do many things, and you won't even know."
