From a $1 million bribe to “Carthage”: how recidivist Osipov’s phone, nicknamed “Criminal,” helped expose a new crime clan

In the summer of 2026, NABU and the SAP notified Andriy Osipov of suspicion of extorting $1 million from a Russian in exchange for help avoiding extradition from Ukraine. During the investigation, authorities seized his phone, which, officials say, contained his sort of “insurance” — records of money, services, and agreements with his acquaintances in law enforcement.

Those materials, in particular, helped the anti-corruption agencies expose a new criminal organization that specialized in fraudulent call centers, drug distribution, and producing counterfeit euros.

Slidstvo.Info explains how Osipov’s “insurance” became evidence in the case of the new “Carthage.”

At the end of July, the High Anti-Corruption Court was considering the case of Andriy Osipov, a repeat offender convicted previously of robbery, assault, and hooliganism. According to the investigation, in 2022 he demanded a $1 million bribe from Russian national Oleksandr Kuznetsov to save him from extradition from Ukraine. NABU and the SAP handled this case, in part because the sum was allegedly coordinated with then First Deputy Head of the SBU Vasyl Malyuk.

In conversations read aloud in court at the end of July by SAP prosecutor Andriy Ponomarenko, Osipov referred to himself as part of Malyuk’s “team” and used the phrase: “I’m with VV” (using the initials of Vasyl Vasyliovych Malyuk).

Additionally, according to the investigation, on the recordings Osipov discussed Malyuk’s wife, Yuliia, and mentioned a shared past: “She couldn’t imagine that this hooligan from Korostyshiv would be at that level.”

That same quote appears on the new tapes from the NABU and SAP operation “Carthage.” Using it as an example, a detective explains that Osipov maintains close ties with law enforcement officers who, like him, were born, raised, and began their careers in the Zhytomyr region.

Osipov’s “old acquaintances” in “Carthage”

From the July anti-corruption investigation it is also known that Andriy Osipov had links with Vitalii Rybalko, who appears on the new tapes under the nicknames “Boxer” or “Klitschko.” According to NABU, within the criminal organization exposed in operation “Carthage,” he carried out commissioned attacks and tortures.

Screenshot from NABU “tapes”

Since 2011, Rybalko repeatedly drew law enforcement attention, including for possible fraud, extortion, and kidnapping. The investigation indicates he was long part of a criminal group operating in the city of Korosten in the Zhytomyr region.

SAP prosecutor Andriy Ponomarenko emphasized that during searches at Osipov’s residence in the extortion case of $1 million, Rybalko acted as his representative.

Vitalii Rybalko at the High Anti-Corruption Court

During the July session at the HACC, conversations with current Deputy Head of the Main Directorate “D” of the Department for the Protection of National Statehood of the SBU, Oleksandr Kovalchuk, were also mentioned. The men discussed how to arrange the procedure for returning Kuznetsov’s phones without his appearing before the pretrial investigation authority and without real interrogations:

Osipov: Sanya, hi. Listen? Tell me quickly one more time, please. About Sashko [ed. — Kuznetsov], you know… He just needs to come formally, as if they’ll question him, take his phones back, right, or what?

Kovalchuk: Well, you need to question him… [ed. — formally] Just, when he’s coming, warn me.

Osipov: So I can control this case and everything.

Kovalchuk: So I can control this case and everything. Drop by, we need to discuss a few matters with you.

According to Ukrainska Pravda sources, searches were carried out at Kovalchuk’s place in the “Carthage” case in 4 November. How exactly he is implicated in it is still unknown. Slidstvo.Info found out that he was neither detained nor dismissed from his SBU position.

At the end of July, the SAP prosecutor also read into the court record transcriptions of Osipov’s phone conversations in which he discussed the new appointment of SBU top official Serhii Duka.

Serhii Duka

“And they appointed the one who, together with Liashko, got into an accident in an armored Lexus. Malyuk’s right hand. But no, in any case this situation is basically not worth a hill of beans. He blew it up just on the internet, everyone discussed it. Me, too, I got into some arguments online with some couch vigilantes, brother. Then I thought: ‘Why is this necessary?’” — Ponomarenko quoted Osipov.

The man allegedly recounted how he personally engaged in disputes in the comments under an Obozrevatel article about Duka’s appointment, defending his competence.

On the new NABU tapes, Duka appears under the nickname “Akim.” According to the investigation, within the criminal organization exposed in operation “Carthage,” he covered them from special services’ scrutiny and informed Osipov about SBU personnel appointments to administrative positions.

Authorities claim Duka communicated on behalf of the criminal organization with high-ranking figures in the National Police and helped arrange for Osipov to visit the Central Apparatus building of the SBU on 23 July 2026.

Osipov’s “insurance” — materials of the case

At the end of July, the High Anti-Corruption Court chose a preventive measure for Andriy Osipov in the case of extorting $1 million. He was detained without the option of bail. He remains in a temporary detention facility.

As part of the pretrial investigation, authorities seized Osipov’s phone. It turned out he was preparing “insurance” for himself in case of exposure or betrayal by his “own.”

Members of the criminal organization recorded instances of handing over money, valuables, and other services to law enforcement officers from various agencies. They also constantly reported back to Osipov on work done and orders carried out.

Screenshot from NABU “tapes”

Thanks to the property seized from Osipov, in particular, NABU and the SAP exposed a criminal organization that specialized in fraudulent call centers, drug distribution, and producing counterfeit currency. According to the investigation, its activities were accompanied by commissioned attacks, kidnappings, and torture.

“The Mexican” and his methods of dealing with opponents

Authorities say the group’s co-organizer was the founder of the drug cartel “KhimProm” and the U420 network of drug shops, Yehor Burkin (“The Mexican”). In 2014 he obtained a Ukrainian passport in the surname Levchenko. Since 2016 he has been wanted by the SBU.

The investigation reports that during the full-scale war, Burkin cooperated with representatives of Russia’s FSB.

Screenshot from NABU “tapes”

According to the case materials, it was “The Mexican” who voiced threats to journalist Denys Bihus over Bihus.Info’s investigation into the U420 drug shop network. Burkin suggested pouring acid on the journalist or beating him with a hammer. In the end, the participants abandoned that idea because Bihus is the “loudest” and a direct attack on him would risk strong public resonance.

After Bihus.Info’s investigation into the U420 network, activists began to speak up. In one recorded conversation documented by authorities, “The Mexican” noted that they had managed to “eliminate” almost everyone: some were paid off, some were “asked” to leave.

Only one veteran refused to cooperate with the criminal organization’s members — a man who had survived Russian captivity and was organizing protests outside the chain’s stores. This is civic activist Viktor Lakhno, call sign “Leleka.”

Screenshot from NABU “tapes”

In a comment to Slidstvo.Info, Lakhno said he knew about the criminal organization’s plans against him and informed law enforcement about them.

“For me this story is already over,” added “Leleka.”

The fight against NABU and the SAP: the case of detective Mahamedrasulov

The NABU and SAP investigation materials mention NABU detective Ruslan Mahamedrasulov. Members of the criminal organization discussed falsifying evidence in his case with the participation of Russian special services.

Screenshot from NABU “tapes”

When someone who knew about the falsification decided to contact NABU, the scheme participants began discussing how to prevent it.

“Before we pull him out of there, I’ll shut his mouth. Then there are things I can’t say, because I won’t have an explanation for some people about why I’m restraining him, so think,” reads Burkin’s message to Osipov.

According to the investigation, Osipov forwarded this message to Duka so that he would somehow counteract it.

Recall, NABU detective Ruslan Mahamedrasulov was arrested by SBU officers on 21 July 2025. He was charged with assisting Russia. The official reason was the sale by the detective and his father of technically cultivated hemp to Dagestan. A number of activists, among them Head of the Board of the NGO Anti-Corruption Centre and serviceman Vitalii Shabunin, called the case against the detective “fabricated.”

In February 2026, Slidstvo.Info wrote that SBU officers held a meeting with the management of Kyiv SIZO about the conditions of Mahamedrasulov’s detention before a preventive measure was chosen for him.

$7 000 a month without searches

According to the investigation, the criminal organization ensured the operation of the network of fraudulent call centers through bribing law enforcement. For unobstructed operation of one call center, they handed over $7 000 per month. At the start of each month, scheme participants received details about addresses and office identifiers, and by 5 they paid money in cryptocurrency to predetermined wallets.

According to the investigation, responsibility for “covering” the “offices” and ensuring the criminal organization’s security lay with First Deputy Head of the Department of Strategic Investigations of the National Police Volodymyr Tsenov (“Price”) and Deputy Head of the Criminal Investigation Department of the Kyiv Region Main Police Department Oleksandr Demianchuk (“Consultant”).

Volodymyr Tsenov was detained in 4 November. The High Anti-Corruption Court set his preventive measure as detention with the alternative of bail of 15 million hryvnias. During the hearing he refused to speak to journalists or comment on his role in the scheme.

Investigators found that the defendants coordinated the work of at least 52 call centers, employing about 2700 people.

In addition to the “offices,” in 2026 the criminal organization set up production of counterfeit euros. They organized a secret workshop equipped with specialized printing equipment and holographic plates.

In this case, NABU and the SAP announced suspicions against five suspects. In addition to Tsenov, a preventive measure was chosen for Vitalii Rybalko. He was detained without the option of bail. During the court session he denied involvement in the criminal organization.

The released “tapes” are the second part of operation “Carthage.” The first part concerned employees of the Office of the Prosecutor General who, according to the investigation, “covered” the operation of fraudulent call centers. After these materials were published, then-Prosecutor General Ruslan Kravchenko left Ukraine.