Belgium Targets Disposable Spy Networks

The profile is built to disappear. Someone with loose links to a foreign power is recruited for one job, told little about the wider operation, and abandoned once something goes wrong. Intelligence officers call this a "disposable agent."

Belgian prosecutors have detained a 46-year-old man suspected of passing state secrets. Belgian media described the case as the country’s first wegwerpagent, or disposable agent, investigation. The public file remains thin: no charge sheet, no named handler, no identified secret. The arrest matters less for what Belgium has disclosed than for the pattern it fits across Europe.

A Cruder Method Born of Expulsion

After Russia’s full-scale invasion of Ukraine, European governments expelled hundreds of Russian diplomats suspected of intelligence work. Traditional espionage relied heavily on officers operating under diplomatic cover, able to recruit sources while protected by immunity. Once many of those officers were pushed out, Moscow had a practical problem.

Former intelligence officials describe the replacement as rougher and riskier: remote handling through encrypted apps, recruitment through social media, and one-use operatives discarded when exposed (Telegraph). Belgian intelligence services have also expanded their use of special surveillance methods as espionage and organised crime increasingly overlap (Belga).

For Malta, this is not a distant Belgian curiosity. A small EU state with ports, financial services, online gaming and a dense political network has less room for institutional failure when hostile actors look for weak points. The method works because it does not require a resident spy ring in Il-Belt. It needs a contact, a payment channel, an encrypted chat, and someone willing to do a small job without asking too many questions.

Security services across Europe can see the shift. Proving it in court is harder. Each country prosecutes under its own rules and evidence standards, while disposable agents are chosen precisely because they leave little trail. The gap between recognising a pattern and building a criminal case is where the method survives.

Poland Shows How It Works

Poland offers the strongest public evidence. Last week, ABW, Poland’s Internal Security Agency, detained eleven people accused of recruiting and paying participants in demonstrations within the Ukrainian refugee community (Rzeczpospolita, Interia). The alleged method fits the wider pattern: local intermediaries exploiting politically sensitive issues for limited disruption, with as little trace as possible.

The Polish file goes further. Three citizens face espionage charges, with prosecutors alleging intelligence work for Russia and reconnaissance of NATO deployments. ABW has also investigated alleged cross-border sabotage coordinated through Eurojust, the EU agency that links national prosecutors. The Russian command chain has not been proven in court. But the range of allegations in one country is difficult to treat as coincidence.

Germany shows what the targets look like. In April 2024, two German-Russian suspects were arrested for allegedly scouting US military facilities and transport infrastructure for sabotage (Reuters). German security reporting describes surveillance of military transports carried out by low-level helpers, not trained officers (Tagesschau). Estonia’s security services warn of proxy recruitment through Telegram and operations designed so investigators struggle to prove who gave the order (KAPO).

Who Can Actually Prosecute

The disposable-agent method crosses borders. The institutions that respond to it mostly stop at the border. National security services investigate. National prosecutors need evidence that will survive in court. Europol coordinates police work across countries but does not bring charges. The European Commission recently proposed strengthening both Europol and Eurojust to handle cross-border threats from hostile states (European Commission). NATO supports allied resilience through counter-hybrid teams but has no prosecutorial role (NATO).

This is where small states should pay attention. Malta often experiences EU security law as paperwork, compliance and coordination meetings. But the mechanism matters: if a hostile operation touches one member state’s port, another’s bank account, and a third country’s encrypted handler, no single police file is enough. The case only becomes prosecutable if national authorities can stitch the pieces together before the disposable agent disappears back into ordinary life.

Poland has prosecutor-level allegations. Germany has formal investigations. Belgium has one detention. Turning those into a single prosecutable picture requires cross-border cooperation Europe is still building.

The Belgian suspect will probably vanish from the news. Disposable agents are designed to be forgotten. Until the gap between intelligence pattern and courtroom proof narrows, the method keeps its advantage.