From a million-dollar bribe to “Carthage”: recidivist Osipov’s phone exposed a network of contacts within the law enforcement system

In the summer of 2026, NABU and the SAP informed Andriy Osipov of suspicion for extorting $1 million from a Russian in exchange for help avoiding extradition from Ukraine. During the investigation, authorities seized the man’s phone, on which, prosecutors say, he was keeping a kind of “insurance” — records of money, services, and arrangements with his acquaintances in law enforcement agencies.

This is reported by Slidstvo.Info

These materials, in particular, helped the anti-corruption agencies expose a new criminal organization that specialized in fraudulent call centers, drug distribution, and the production of counterfeit euros.

At the end of July, the High Anti-Corruption Court reviewed the case of repeat offender Andriy Osipov, convicted previously of robbery, assault, and hooliganism. According to the investigation, in 2022 he demanded a bribe of $1 million from Russian national Oleksandr Kuznetsov to save him from extradition from Ukraine. NABU and the SAP handled this case, in part because the amount was allegedly coordinated with the then first deputy head of the SBU, Vasyl Malyuk.

In conversations read out in court at the end of July by SAP prosecutor Andriy Ponomarenko, Osipov called himself part of Malyuk’s “team” and used the phrase: “I’m with VV” (using the initials of Vasyl Vasylyovych Malyuk).

Additionally, according to the investigation, on the recordings Osipov discussed Malyuk’s wife, Yuliia, and referred to a shared past: “Could she have imagined that this hooligan from Korostyshiv would be at such a level.”

The same quote appears on the new NABU and SAP “Carthage” tapes. Using it as an example, a detective explains that Osipov maintains close ties with law enforcement officers who, like him, were born, raised, and began their careers in the Zhytomyr region.

Osipov’s “old acquaintances” in “Carthage”

From the July investigation of the anti-corruption agencies, links are known between Andriy Osipov and Vitalii Rybalko, who on the new “tapes” appears as “Boxer” or “Klitschko.” According to NABU, within the criminal organization uncovered as part of operation “Carthage,” he carried out commissioned attacks and tortures.

Screenshot from the NABU “tapes”

Since 2011, Rybalko repeatedly came under law enforcement scrutiny, including for possible fraud, extortion, and kidnapping. According to the investigation, he long belonged to a criminal group operating in the city of Korosten in the Zhytomyr region.

SAP prosecutor Andriy Ponomarenko emphasized that during searches at Osipov’s residence in the extortion case of $1 million in bribes, Rybalko acted as his representative.

Vitalii Rybalko in the High Anti-Corruption Court

During the July hearing at the HACC, conversations were also mentioned with the current deputy head of Directorate “D” of the Department for Protection of National Statehood of the SBU, Oleksandr Kovalchuk. The men discussed how to arrange the return of Kuznetsov’s phones without his appearing before the pre-trial investigation authority and without conducting real interrogations:

Osipov: Sanya, hi. Listen? Tell me, please, once more quickly. About Sasha [ed. — Kuznetsov], you understand… He just needs to come formally, as if they will interrogate him, take back his phones, right, or what?

Kovalchuk: Well, you need to interrogate him… [ed. — formally] Just, when he’s coming, warn me.

Osipov: So I can supervise this case and everything.

Kovalchuk: So I can supervise this case and everything. Drop by my place, we need to discuss a few issues with you.

According to sources at Ukrainska Pravda, searches were carried out at Kovalchuk’s place in the “Carthage” case in 4 November. How exactly he is implicated in it is unknown for now. Slidstvo.Info found that he was not detained and was not dismissed from his position in the SBU.

At the end of July, the SAP prosecutor also read out during the court hearing transcriptions of Osipov’s phone conversations in which he discussed the new appointment of the SBU’s top official Serhii Duka.

Serhii Duka

“And they appointed the one who, along with Liashko, got into an accident in an armored Lexus. Malyuk’s right hand. But no, in any case that situation is basically nothing to write home about. That one blew it up just on the internet, everyone discussed it. I, you know, also got involved with some couch warriors on the internet, brother. Then I think: ‘Why is that necessary?’” — Ponomarenko quoted Osipov’s words.

The man allegedly recounted how he personally engaged in disputes in the comments under a Obozrevatel article about Duka’s appointment, defending his competence.

On the new NABU “tapes,” Duka appears under the nickname “Akim.” According to the investigation, within the criminal organization uncovered as part of operation “Carthage,” he covered them from the attention of the special services and informed Osipov about SBU employee appointments to administrative positions.

Authorities claim Duka communicated on behalf of the criminal organization with high-ranking National Police officials and helped arrange for Osipov to visit the Central Apparatus building of the SBU on 23 July 2026.

Osipov’s “insurance” — case materials

At the end of July, the High Anti-Corruption Court chose a preventive measure for Andriy Osipov in the extortion case of $1 million in bribes. He was remanded in custody without the option of bail. The man remains in a temporary detention facility.

As part of the pre-trial investigation, authorities seized Osipov’s phone. It turned out he was preparing an “insurance” for himself in case of exposure or betrayal by his “own.”

Members of the criminal organization recorded evidence of transferring money, valuables, and other services to law enforcement officers from various agencies. They also constantly reported to Osipov on the work done and the orders carried out.

Screenshot from the NABU “tapes”

Thanks to the property seized from Osipov, NABU and the SAP exposed a criminal organization that specialized in fraudulent call centers, drug distribution, and the production of counterfeit currency. According to the investigation, its activities were accompanied by commissioned attacks, kidnappings, and torture of people.

“The Mexican” and his methods of dealing with opponents

According to authorities, a co-organizer of the group was the founder of the drug cartel “Khimprom” and the U420 narcoshop chain, Yehor Burkin (“The Mexican”). In 2014 he obtained a Ukrainian passport under the surname Levchenko. Since 2016 he has been wanted by the SBU.

According to the investigation, already during the full-scale war Burkin cooperated with representatives of Russia’s FSB.

Screenshot from the NABU “tapes”

According to the case materials, it was “The Mexican” who voiced threats to journalist Denys Bihus over the Bihus.Info investigation into the U420 narcoshop network. Burkin proposed pouring acid on the journalist or beating him with a hammer. Ultimately, the figures abandoned the idea because Bihus is the “loudest” and a direct attack on him would cause too much resonance.

After the Bihus.Info investigation into the U420 narcoshops, activists began to speak out. In one of the conversations documented by authorities, “The Mexican” said that almost everyone had been “neutralized”: some were paid off, some were ‘asked’ to leave.

Only one veteran refused to cooperate with the criminal organization’s members — a man who survived Russian captivity and was preparing protest actions outside the chain’s stores. This refers to public figure Viktor Lakhno, call sign “Leleka.”

Screenshot from the NABU “tapes”

In a comment to Slidstvo.Info, Lakhno said he knew about the criminal organization’s plans against him and reported this to law enforcement agencies.

“For me, this story is already over,” added “Leleka.”

The fight against NABU and the SAP: the case of detective Mahamedrasulov

NABU and SAP investigation materials mention anti-corruption bureau detective Ruslan Mahamedrasulov. Members of the criminal organization discussed falsifying evidence in his case with the participation of Russian special services.

Screenshot from the NABU “tapes”

When someone who knew about the falsification decided to turn to NABU, the scheme’s participants began discussing how to prevent that.

“Before we pull him out of there, I’ll shut his mouth. Then there are things I can’t say, because I won’t have an explanation for some people that I am restraining him, so think,” reads Burkin’s message to Osipov.

According to the investigation, Osipov forwarded this message to Duka so that he would somehow counter it.

Recall that NABU detective Ruslan Mahamedrasulov was arrested by SBU officers in 21 July 2025. He was notified of suspicion for aiding Russia. The official reason was the sale by the detective and his father of cultivated industrial hemp to Dagestan. A number of activists, including the head of the board of the NGO Center for Countering Corruption and serviceman Vitalii Shabunin, called the case against the detective “fabricated.”

In February of 2026, Slidstvo.Info wrote that SBU officers held a meeting with the leadership of the Kyiv pretrial detention center regarding Mahamedrasulov’s detention conditions prior to choosing a preventive measure for him.

$7 000 a month without searches

According to the investigation, the criminal organization ensured the operation of a network of fraudulent call centers through the bribery of law enforcement. For unobstructed operation, one call center transferred $7 000 per month. At the beginning of the month, scheme participants received information about addresses and office identifiers, and by the 5 they paid funds in cryptocurrency to predetermined wallets.

According to the investigation, responsibility for “covering” the “offices” and the security of the criminal organization lay with the first deputy head of the Department of Strategic Investigations of the National Police, Volodymyr Tsenov (“Price”), and the deputy head of the Criminal Investigation Department of the Main Directorate of the National Police in Kyiv region, Oleksandr Demianchuk (“Consultant”).

Volodymyr Tsenov was detained on 4 November. The High Anti-Corruption Court imposed a preventive measure of detention with the alternative of bail in the amount of 15 million hryvnias. During the hearing, the man refused to speak to journalists or comment on his role in the scheme.

As authorities found, the suspects coordinated the work of at least 52 call centers, which employed about 2700 people.

In 2026 the participants of the criminal organization set up production of counterfeit euros. For this they equipped a secret workshop with specialized printing equipment and holographic plates.

In this case, NABU and the SAP announced suspicions against five figures. Besides Tsenov, a preventive measure was selected for Vitalii Rybalko. He was remanded in custody without the option of bail. During the court hearing the man denied his participation in the criminal organization.

The released “tapes” are the second part of operation “Carthage.” The first part concerned employees of the Office of the Prosecutor General who, according to the investigation, were “covering” the activities of fraudulent call centers. After those materials were released, then Prosecutor General Ruslan Kravchenko left Ukraine.