Russian spies caught in the United States tend to fall into four recognizable patterns: deep-cover “illegals” living under false American identities, procurement agents smuggling controlled microelectronics to Russian defense manufacturers, GRU military intelligence officers indicted for hacking, and operatives running covert political influence campaigns. Federal prosecutors charge them under a stack of statutes ranging from the Espionage Act, which can carry a life sentence, to the Foreign Agents Registration Act, which treats the offense as a transparency failure. In practice, the highest-profile cases often end not in long prison terms but in prisoner exchanges with Moscow.
The 2010 SVR Illegals
The most dramatic Russian espionage case in recent American history surfaced on June 27, 2010, when the FBI arrested ten deep-cover agents of Russia’s Foreign Intelligence Service, the SVR. They had been living under false identities across the eastern United States for years, some for over a decade. The FBI had been watching the entire time in a counterintelligence operation codenamed “Ghost Stories.”1Federal Bureau of Investigation. Operation Ghost Stories: Inside the Russian Spy Case
The network operated in New Jersey, Virginia, Massachusetts, and New York. Anna Chapman worked as a real estate agent in New York City. Richard and Cynthia Murphy lived in Montclair, New Jersey, raising two children while she worked at an accounting firm serving a venture capitalist with ties to major political figures. Donald Howard Heathfield and Tracey Lee Ann Foley lived in Cambridge, Massachusetts, where he sold strategic planning software to American companies. Their assignment from Moscow was not to crack safes but to burrow into American life and cultivate people with access to useful policy and defense information.
Their tradecraft blended old and new. Agents hid messages inside ordinary digital image files using steganography, received coded instructions over shortwave radio, and used short-range wireless networks to exchange encrypted data during brief in-person meetings. The case’s linchpin was a high-ranking American mole inside Russian intelligence who tipped off the FBI, then fled Russia just ahead of the arrests.
All ten pleaded guilty to conspiracy to act as unregistered agents of a foreign government. A federal judge sentenced them to time served and ordered immediate deportation. Within days they were flown to Vienna and exchanged for four Russians imprisoned for spying for Western intelligence services. An eleventh defendant who had served as a courier disappeared after a court in Cyprus released him on bail.
Technology Procurement Networks
A different kind of Russian intelligence operation targets American technology instead of American contacts. These networks funnel controlled electronic components, dual-use materials, and other military-applicable goods through shell companies and intermediary countries, moving them past U.S. export controls and sanctions and into Russian defense manufacturing.
A federal indictment out of the Southern District of New York shows the pattern. Three Russian nationals connected to Electrocom VPK, a supplier of electronic components to Russian weapons manufacturers, were charged with using shell companies and deceptive purchasing to procure more than $225,000 worth of controlled microelectronics from American distributors. The components included microcontrollers and integrated circuits on the Commerce Department’s Commerce Control List. The defendants faced charges of conspiring to violate the Export Control Reform Act, smuggling, wire fraud, and money laundering, with the export control counts each carrying up to 20 years in prison.2U.S. Department of Justice. Two Russian Nationals Charged for Their Participation in an Illicit Procurement Network That Exported Controlled Microelectronics
Cases like this have grown more common since 2022, as Western sanctions tightened and Moscow’s need for controlled technology for its defense sector became more urgent. The parts themselves are not exotic. Many are off-the-shelf chips. But their potential use in missile guidance, radar, or drones is what makes their unauthorized export a serious federal crime.
Indicted GRU Hackers
Russian military intelligence, the GRU, has been repeatedly indicted in American federal court for hacking targeting companies, government agencies, and critical infrastructure. These are not consumer data breaches. GRU officers have targeted defense contractors, nuclear energy companies, and anti-doping organizations as part of state-directed intelligence campaigns.
In one prominent case, a grand jury in the Western District of Pennsylvania indicted seven GRU officers for computer hacking, wire fraud, identity theft, and money laundering. The targets included Westinghouse Electric Company, a major nuclear energy firm near Pittsburgh, whose networks were probed as early as 2014. The same group was charged with hacking international anti-doping agencies and leaking the personal information of hundreds of athletes.3Department of Justice. U.S. Charges Russian GRU Officers with International Hacking and Related Influence and Disinformation Operations
The defendants in these cases are almost never in American custody. The indictments publicly identify the officers and their units within Russian military intelligence, which constrains their travel, complicates future operations, and alerts cooperating foreign services to specific individuals.
Covert Political Influence
Not every Russian intelligence operation chases secrets or technology. One category targets American political discourse itself, by funding domestic political groups, cultivating relationships with American political figures, and running covert propaganda, all without disclosing a Russian government hand.
Maria Butina is the best-known defendant in this category. A Russian national on a student visa, she cultivated ties inside American political organizations, particularly gun rights groups, while secretly working at the direction of a Russian government official. A federal judge described her activities as “sophisticated” and said they “penetrated deep into political organizations” at a time when Russia was actively trying to interfere in the American democratic process. She pleaded guilty to conspiracy to act as an unregistered agent of a foreign government and was sentenced to 18 months in prison, with credit for nine months already served, then deported.
Online, the St. Petersburg–based Internet Research Agency ran a large-scale influence operation on American social media. Operatives rented server space inside the United States and used virtual private networks to post while appearing to be in America, posing as American activists on both sides of contentious issues. Federal prosecutors indicted the organization and its principals, though the defendants stayed outside U.S. jurisdiction.
What Russian Spies Are Charged With
Prosecutors draw from a toolkit of federal statutes, and the choice depends on what the agent was actually doing. Handing over classified defense information triggers the harshest penalties. Failing to register as a foreign agent is treated as a transparency violation. Most multi-defendant cases stack charges from several statutes.
The Espionage Act
The heaviest penalties come under the Espionage Act. Under 18 U.S.C. § 794, anyone who delivers national defense information to a foreign government with intent or reason to believe it will injure the United States or benefit the foreign nation faces imprisonment for any term of years up to life. The death penalty is available only in narrow circumstances: where the offense exposed an American intelligence agent who was then killed, or where the information involved nuclear weapons, military satellites, early warning systems, war plans, or communications intelligence.4Office of the Law Revision Counsel. United States Code Title 18 Section 794 – Gathering or Delivering Defense Information to Aid Foreign Government A related provision, 18 U.S.C. § 793, covers gathering or mishandling defense information and carries up to ten years. It reaches more conduct, including unauthorized retention of classified material, and does not require proof that information actually reached a foreign power.5Office of the Law Revision Counsel. 18 U.S. Code Section 793 – Gathering, Transmitting or Losing Defense Information
Acting as an Unregistered Foreign Agent
Under 18 U.S.C. § 951, anyone operating inside the United States under the direction or control of a foreign government must notify the Attorney General before beginning that work. Failure to do so carries up to ten years in prison.6Office of the Law Revision Counsel. United States Code Title 18 Section 951 – Agents of Foreign Governments This is the statute used against both the 2010 illegals and Butina. Diplomats, publicly acknowledged government representatives, and people engaged in lawful commercial transactions are exempt.
FARA
The Foreign Agents Registration Act requires anyone acting on behalf of a foreign principal in a political capacity to register with the Department of Justice and periodically disclose their activities, income, and expenditures.7U.S. Department of Justice. Foreign Agents Registration Act FARA is a transparency law. It does not forbid working for a foreign government, only doing so secretly. Willful violations carry up to five years in prison and a fine of up to $10,000.8Office of the Law Revision Counsel. 22 U.S. Code Section 618 – Enforcement and Penalties FARA targets political activities and propaganda like lobbying, public relations, and fundraising. Section 951 targets covert operatives working under a foreign government’s direction in any capacity. A lobbyist who failed to register gets charged under FARA; a covert agent who never registered at all gets charged under § 951.
Economic Espionage
When the target is trade secrets rather than classified defense information, prosecutors turn to the Economic Espionage Act, 18 U.S.C. § 1831. The element that elevates ordinary trade secret theft to economic espionage is intent: the defendant must have known or intended that the theft would benefit a foreign government. Individuals face up to 15 years in prison and a $5 million fine. Organizations face the greater of $10 million or three times the value of the stolen secret.9Office of the Law Revision Counsel. United States Code Title 18 Section 1831 – Economic Espionage
Export Controls and Sanctions
Procurement network cases typically land under the International Emergency Economic Powers Act and the Export Control Reform Act. Willfully violating IEEPA by exporting controlled goods to sanctioned countries carries up to 20 years in prison and a $1 million fine for individuals.10Office of the Law Revision Counsel. United States Code Title 50 Section 1705 – Penalties ECRA violations likewise carry up to 20 years. These are the charges that hit hardest in technology smuggling cases, where the defendants may never have touched classified material but funneled controlled commercial components to Russian military end-users.
Computer Hacking
Cyber cases typically include charges under the Computer Fraud and Abuse Act, 18 U.S.C. § 1030. Hacking a protected computer to obtain national defense information carries up to ten years for a first offense and up to twenty for a repeat offender. The FBI has primary investigative authority over § 1030 cases involving espionage or foreign counterintelligence.11Office of the Law Revision Counsel. 18 U.S. Code Section 1030 – Fraud and Related Activity in Connection with Computers Nearly every multi-defendant espionage case also carries a conspiracy count under 18 U.S.C. § 371.12Office of the Law Revision Counsel. United States Code Title 18 Section 371 – Conspiracy to Commit Offense or to Defraud United States
How These Cases Usually End: Spy Swaps
Convicted Russian agents rarely sit out long federal sentences in American prisons. For operatives Moscow wants back, the common ending is a prisoner exchange negotiated through diplomatic channels, trading convicted or accused foreign agents for Americans detained abroad, often on politically motivated charges.
The ten SVR illegals were out of the country within weeks of their arrest. Each pleaded guilty to a single conspiracy count, received a time-served sentence with a deportation order, and was flown to Vienna. On the airport tarmac they were exchanged for four Russians convicted of spying for Western intelligence services. From arrest to swap took less than a month, which suggests the deal had been negotiated before the arrests were made public.
The largest Russia exchange since the Cold War took place on August 1, 2024, involving 24 individuals held across multiple countries after months of negotiations that directly involved President Biden. The United States secured the release of Wall Street Journal reporter Evan Gershkovich, who had been sentenced in Russia to 16 years on espionage charges the U.S. government called baseless, and former Marine Paul Whelan, who had been serving a 16-year sentence since 2020 after a conviction the U.S. designated as wrongful detention. Russian-American journalist Alsu Kurmasheva and Russian opposition figure Vladimir Kara-Murza were also freed. In return, the United States released individuals including Vladislav Klyushin, an IT entrepreneur convicted of insider trading and serving a nine-year sentence, and Vadim Konoshchenok, a suspected intelligence agent accused of smuggling sanctioned microelectronics. Germany’s release of Vadim Krasikov, a former FSB officer serving a life sentence for assassinating a former Chechen commander in a Berlin park in 2019, was reportedly the concession that made the entire deal possible.
The legal mechanics vary. The 2010 swap worked through a time-served sentence and deportation order. The 2024 exchange, involving defendants partway through serious sentences, likely required presidential clemency to commute sentences before deportation. The practical effect is the same either way: accused or convicted agents leave the country and Americans come home, often at the cost of releasing someone convicted of a serious crime for an innocent journalist or political prisoner.
Reporting Suspected Foreign Intelligence Activity
Anyone who encounters something that looks like foreign intelligence activity, whether an unusual approach seeking sensitive information, a recruitment attempt aimed at an insider, or suspicious procurement of controlled technology, can report it to the FBI at tips.fbi.gov or through any local field office.13Federal Bureau of Investigation. FBI Cyber Division – Report a Threat The FBI has primary jurisdiction over counterintelligence inside the United States, and the bureau consistently cites early reporting as one of the most effective ways to disrupt espionage before the damage is done.