Russian intelligence services are creating fake websites, social media pages, and messenger channels to imitate Ukrainian government agencies, security bodies, media outlets and senior officials, Kyiv has said.

According to the Security Service of Ukraine (SBU), these fake resources copy official names, logos, photographs and branding in an attempt to appear legitimate.

The agency said it had recorded a key increase in such manipulative activities and had already identified and blocked more than 50 resources that copied the SBU’s own branding and appearance.

Fake accounts have also been created in the names of senior Ukrainian officials. Previous examples include Telegram accounts impersonating President Volodymyr Zelenskyy, First Lady Olena Zelenska, former presidential office chief Andriy Yermak and former SBU chief Vasyl Maliuk.

Ukraine’s Center for Countering Disinformation has also warned about fake accounts using the names and photographs of security officials to publish supposed insider or exclusive information.

In some cases, operators repurpose older Telegram channels, including cryptocurrency pages, by changing their names and branding to make them appear official.

The goal: information and influence

The SBU says the fake resources are mainly used to spread disinformation and collect personal data.

The SBU says these campaigns aim to destabilise the political and social situation inside Ukraine and weaken the country’s position internationally.

The same resources can also be used to collect information from users. Fake pages and channels may encourage people to follow an account, click on links, send messages or provide personal details.

According to the SBU, Russian intelligence services also target users who interact with fake pages and messenger channels and may compromise their accounts to obtain personal data. The agency says this information can later be used in recruitment operations or to gather confidential information.

Russian intelligence services are particularly interested in information about the combat and operational activities of Ukraine’s defence and security forces, according to the SBU.

The fake resources can therefore serve several purposes at the same time. First, they can spread disinformation, attract users by posing as trusted sources and direct them towards links or accounts that can be used to collect information.

This tactic often relies on small differences that can be difficult to spot, like different usernames for fake accounts. Meanwhile, a fake website may closely copy the design of a government or media page but use a different web address.

Ukrainian authorities are therefore advising users to check account names, web addresses and verification badges carefully, avoid suspicious links and rely on official sources.