Belgium Targets Disposable Spy Network

The point of this kind of agent is that he can disappear. He is not a diplomat with a nameplate, a long posting and immunity. He is someone with a loose connection to a foreign power, brought in for one job, told as little as possible, and dropped the moment the operation starts to come apart. Intelligence services call him a "disposable agent."

Belgian prosecutors have detained a 46-year-old man on suspicion of passing state secrets. Belgian press reports have described it as the country’s first wegwerpagent case: literally, a throwaway agent. There is still very little in the public file. No charge sheet has been published, no handler named, no specific secret identified. For now, the arrest matters less as a Belgian legal story than as another sign of the way Russian-linked espionage has changed across Europe.

A Cruder Method Born of Expulsion

After Russia’s full-scale invasion of Ukraine, European governments expelled hundreds of Russian diplomats suspected of working for intelligence services. The old model of espionage relied heavily on officers under diplomatic cover, able to meet sources while protected by immunity. Once many of those officers were gone, Moscow had a practical problem.

What replaced that model, according to former intelligence officials, has been rougher and riskier: encrypted apps, recruitment through social media, and operatives used once and then abandoned (Telegraph). Belgian intelligence services, meanwhile, have expanded the use of special surveillance methods as espionage and organised crime increasingly bleed into each other (Belga).

Security services can recognise the pattern. Proving it in court is harder. Each state has its own criminal law, its own prosecutors and its own threshold for evidence. Disposable agents are chosen because they know little and leave little behind. The method lives in that space between what an intelligence service can see and what a prosecutor can prove.

Poland Shows How It Works

Poland has produced the clearest public picture so far. Last week, ABW, the country’s Internal Security Agency, detained eleven people accused of recruiting and paying participants in demonstrations within the Ukrainian refugee community (Rzeczpospolita, Interia). The alleged method is familiar: local intermediaries, politically sensitive themes, a small disruption, and very little trail.

The Polish file goes further. Three citizens face espionage charges, with prosecutors alleging intelligence work for Russia and reconnaissance of NATO deployments. ABW has also investigated alleged cross-border sabotage coordinated through Eurojust, the EU agency that links national prosecutors. The Russian chain of command has not been proven in court. But the range of allegations in one country is difficult to brush aside.

Germany shows the kind of targets involved. In April 2024, two German-Russian suspects were arrested for allegedly scouting US military facilities and transport infrastructure for sabotage (Reuters). German security reporting describes surveillance of military transports carried out by low-level helpers rather than trained officers (Tagesschau). Estonia’s security services have warned of proxy recruitment through Telegram and operations structured so investigators struggle to prove who gave the order (KAPO).

Who Can Actually Prosecute

The disposable-agent method crosses borders easily. The institutions pursuing it remain largely national. Security services investigate inside their own states. Prosecutors need evidence that will survive in court. Europol can coordinate police work across countries but cannot bring charges. The European Commission has proposed strengthening Europol and Eurojust to deal with cross-border threats from hostile states (European Commission). NATO can help allies build resilience against hybrid threats, but it has no role in prosecution (NATO).

For Ireland, the lesson is not that every small incident has a Kremlin signature. It is that open societies, including small EU states, are vulnerable to cheap disruption when the legal proof has to be assembled after the damage is done. The same problem sits behind wider European debates on sabotage, cyberattacks and hostile-state influence: everyone can see the pattern before anyone can always prove the chain of command.

Poland has prosecutor-level allegations. Germany has formal investigations. Belgium has one detention. Turning those cases into a single prosecutable picture requires cross-border cooperation that Europe is still trying to build.

The Belgian suspect may well vanish from the headlines. That is the point of a disposable agent. Until the gap narrows between the pattern intelligence services can detect and the proof courts require, the method keeps its advantage.