A Lithuanian man accused of sending explosive parcels across Europe says he had no idea the packages he delivered contained incendiary devices. The case has become part of a wider investigation into alleged sabotage operations linked to Russia following the war in Ukraine.
Aleksandr Suranovas, a 53-year-old from Vilnius in Lithuania, agreed to send several parcels to destinations in the United Kingdom and Poland after being offered short-term work through the messaging app Telegram. The packages contained ordinary-looking items such as cosmetics, massage cushions and other consumer goods.
However, investigators later discovered that the parcels had been fitted with sophisticated incendiary devices. Tubes of cosmetic products had allegedly been refilled with explosive liquids, while ignition systems were hidden inside the cushions. According to Suranovas, he had no knowledge of what was concealed inside the packages.
The devices were already activated when Suranovas collected the parcels from a park in Vilnius in July 2024. Within the following two days, three of the packages caught fire in different locations. One ignited shortly before it was due to be loaded onto a cargo aircraft bound for London, raising concerns about the potential consequences had the explosion occurred during flight.
Authorities in Lithuania and Poland launched a joint investigation into the incident. Suranovas was arrested in August 2024 and accused of participating in a terrorist act allegedly carried out on behalf of Russian military intelligence, known as the GRU. So far, more than twenty people have been detained across the two countries as part of the inquiry. Moscow has denied any involvement in the operation.
Investigators say Suranovas appeared to be only the final link in a larger network operating across Europe. According to the findings, different individuals were assigned separate tasks, including transporting device components into the European Union, supplying vehicles, and coordinating communications remotely.
Lithuanian officials believe the structure of the operation may have been designed to ensure that many participants did not fully understand the broader plan. Vilmantas Vitkauskas, head of Lithuania’s National Crisis Management Centre, warned that such actions represent a serious security threat to countries supporting Ukraine.
Evidence suggests the parcels were directed to addresses in several cities, including London, Birmingham and Warsaw, using courier services such as DHL and DPD. Surveillance footage shows Suranovas posting the packages at company offices.
One of the devices later exploded at an airport cargo facility in Leipzig in Germany. Another ignited inside a delivery truck near Warsaw, while a third caught fire at a warehouse in Birmingham. A fourth device reportedly failed to activate. Although the incidents caused damage, no casualties were reported.
Investigators believe the operation was coordinated through encrypted communications on Telegram. Several suspected organisers, operating from Russia, have been identified by authorities, though their identities have not been made public.
Security analysts say such incidents reflect a broader pattern in which intelligence services rely on intermediaries, criminal networks and individuals recruited through informal contacts. According to experts, this method helps conceal the organisers’ involvement and makes investigations more complex.
Suranovas admits that he delivered the parcels but maintains that he never knowingly transported explosives. He insists he was misled about the nature of the task and agreed to the job only because it appeared to be a routine delivery assignment.
European investigators continue to examine whether the plot was intended to cause large-scale damage, disrupt transport networks or intimidate countries providing support to Ukraine.
Be the first to leave a comment