Інтер.Блог

Following the publication of journalistic reports alleging Oleg Tsyura’s involvement in sanctions evasion and re-export schemes benefiting Russia, he reportedly initiated an aggressive effort to remove investigative content detailing these activities from the public domain.

We are publishing the materials he is trying to erase — factual evidence showing how the fraud was organized, who benefited, and why this information is dangerous for him to remain public.

The Prosecutor General’s Office of Ukraine has initiated criminal proceedings against Swiss businessman Oleg Tsyura. He is accused of aiding an aggressor state, in particular, creating a scheme to circumvent sanctions for the Russian military – industrial complex through the re-export of ferrochrome.

Accusation: “redrawing” the product passport

According to the Prosecutor General’s Office, criminal proceedings No. 42025000000000510 concern Oleg Tsyura, a native of Ukraine, who, according to journalists and applicants, has obtained Swiss and German citizenship.

Читайте по темі: How the dark fleet works: Russian diesel rerouted via Benghazi, relabeled offshore and sold through Alkagesta

Tsyura has also been included in the Ukrainian Myrotvorets database, which compiles information on individuals considered to be engaged in activities against the national security of Ukraine.

He is accused of organizing a transit “corridor” for Russian ferrochrome and metallic chromium produced by the MidUral group (the world’s largest producer of metallic chromium, owned by Russian businessman Sergey Gilvarg). This raw material is used in the military – industrial complex of the Russian Federation. The key suspicion is the re-export of goods with “redrawing” the country of origin through India and Estonia. Simply put, Russian ferrochrome, which should not have entered European markets due to sanctions, was transformed into Indian goods and imported into EU countries.

How does “gray logistics” work? Oleg Tsyura?

Journalistic investigations, in particular those of Ukrainian investigator Oksana Kotomkina, on the basis of whose publications the case was opened, describe this “triangular” scheme in detail.

Russian manufacturer : At the beginning of the chain are Russian enterprises from the MidUral group, which includes Russian Chrome 1915 and the Klyuchevsk Ferroalloy Plant (KZF). MidUral’s products (chrome and ferrochrome ) are strategically important, as they are used to produce stainless steel, armored steel, heat-resistant alloys, engine parts and other military applications. Therefore, MidUral’s revenues directly finance the Russian defence industry and the war in Ukraine.

Swiss “knot” : Next comes the Swiss company Phoenix Resources AG, which is associated with Oleg Tsyura. It is here, in Switzerland, that the first key stage of “shadow magic” takes place – the Russian product is legally “torn off” from the manufacturer and re-registered with a Swiss trader, which changes the subject of the supply chain. Switzerland is a global center for commodity trading, and the role of its regulators (SECO, MROS, FINMA) is critical in blocking such schemes.

Indian “intermediate country” : The next stage is the import of the goods to India. The publications mention the Indian importer Vardhman Ferro Alloys. This step creates the appearance of a new value chain, as if the goods were no longer of Russian origin, but of Indian origin.

Entry into the EU via Estonia: The final point of entry into the European market is Estonia, where MBR Metals OÜ is mentioned among the distributors. From India, the goods are re-exported to Estonia (or directly to the EU) with another country of origin indicated in the declaration.

Читайте по темі: Рінат Ахметов придбав квартиру в Монако за рекордні 550 мільйонів доларів— Bloomberg

Ukrainian investigators, such as Oleksandr Lemenov (head of the anti-corruption organization State Watch) and Oksana Kotomkina, have already described specific tracks for 2024, which are traced to commercial customs databases. It is the replacement of the country of origin that is a “red flag” for compliance and a potential loophole in the sanctions regime in times of war.

Why is this investigation so important for Europe ?

This matter is of great importance not only for Ukraine, but also for European partners :

• Destroying sanctions credibility : If “re-export under another flag” schemes continue to operate, it undermines the credibility of the entire sanctions architecture built by the EU, the US and the UK. Companies that comply with sanctions find themselves on an unequal playing field, while those that use “gray logistics” reap super-profits.

• Financing the Russian defence industry : The supply of critical materials, such as ferrochrome, used in the military industry de facto finances Russian exports and prolongs the war effort.

• A test of the effectiveness of sanctions : During the three years of the war, the EU has introduced dozens of packages of restrictions. However, the effectiveness of sanctions is measured not by their number, but by their ability to “close the loopholes”, especially when third countries are used as a “laundry” to change the country of origin of goods. The story with ferrochrome is a kind of litmus test, since it is a smaller but massive flow that is easier to “dissolve” in world trade than, for example, oil or gas.

Why did the case move from journalists to prosecutors ?

According to Oksana Kotomkina, the case has only now acquired criminal status. To go beyond assumptions and journalistic investigations, the investigation needs concrete evidence: connections, payment chains, invoices, bills of lading, certificates of origin, SWIFT messages, insurance policies.

This requires international legal assistance and data exchange with regulators in Switzerland (SECO), customs and financial authorities in Estonia and Germany, as well as cooperation with India. Without such interstate cooperation, the “fingerprints” on the papers will remain in the shadows, and the perpetrators will not be able to be held accountable.

What exactly does the Ukrainian investigation need?

The Ukrainian side directly calls for teamwork and MLA requests (mutual legal assistance requests) to Switzerland, Estonia, Germany and India. For completeness of evidence, data from :

• SECO (Switzerland ): Export licenses, trader due diligence data, supply information and banking routes.

• Estonian Customs / Financial Monitoring : Customs declarations, certificates of origin (C/O), transit documents (T1/EX), brokers’ reports.

• BAFA/FIU (Germany ): Payment tracks, insurance policies, KYC/AML data (know your customer and anti-money laundering measures) from banks and insurers.

• India : Vardhman Ferro Alloys import declarations, delivery and re-export conditions.

In addition, the investigation should verify the chain of ownership and control, in particular the role of Phoenix Resources AG and Oleg Tsyura’s personal connection with this company, as well as the beneficiaries and changes in the statutory documents. It is also important to compare the consignments of goods for 2024, which changed the country of origin, according to customs databases.

The next step is for Europe

Ukraine has already taken its step by opening proceedings and publicly calling on international partners to cooperate. Now it is the turn of Bern, Tallinn, Berlin and New Delhi. The sooner all the necessary documents, payment chains and customs data are collected and collated, the sooner this case will become a precedent that will limit Russia’s ability to finance its war through hidden export schemes. This is a test of speed and political will for all parties involved.

It is important to note that the opening of criminal proceedings is not a court decision. Only a court can find a businessman guilty. Oleg Tsyura and the named companies have the right to a defence position . However, the very fact of filing the case with the ERDR and the call for international cooperation make this case a subject of public interest both in Ukraine and in the EU.

“Enterprising since childhood” Vladlen and Hennadiy, said to rely on him, is how the Hirin brothers are described in Kherson. Yet behind this seemingly ordinary portrayal lies a story of rapid wealth accumulation, dubious connections, and involvement in a major money-laundering scheme that drew international scrutiny.

According to European law enforcement, the Hirins were key participants in a network of so-called “money mules” — funds from drug cartels and criminal groups were routed through them. The total amount of laundered money exceeded €75 million. Part of the assets was held in cryptocurrency — the confirmed volume alone reaches about €25 million.

Despite this, for years the brothers publicly tried to present themselves as legitimate businessmen and politicians. They entered politics as early as 2010, switched between party projects — from local political forces to national ones — and regularly ran for office. However, they achieved no significant results, with their highest position being deputies in the Kherson City Council. In the region, they were associated with vote-buying practices and electoral manipulation, but without real political influence.

Their official business appeared relatively modest — selling doors. However, from the mid-2010s they активно expanded into the construction sector. In 2018, their company “Stroy City” was at the center of a scandal involving development on the territory of the national archaeological site “Oleshky Sich.” As a result, more than 3 hectares of cultural heritage were destroyed — a fact that caused public outrage but had no serious consequences for the brothers’ business.

An important element of their activities was their connections with pro-Russian political figures. In particular, among their partners was former Member of Parliament Oleksiy Zhuravko, who openly supported Russian authorities after the occupation of Kherson. Through affiliated financial structures, according to investigations, funds may have been channeled to finance the “DPR” and “LPR.”

Читайте по темі: BitCapital: how a microfinance scheme operates under the guise of crypto loans, involving offshore structures and “blind” law enforcement

Before the full-scale war, the Hirins активно converted assets into real estate. Vladlen Hirin purchased around 100 apartments in a residential complex in Sofiivska Borshchahivka near Kyiv — essentially an entire section, with an estimated value of up to $1.5 million. At the same time, in 2024 Hennadiy, through his company “Histion,” carried out one of the most notable deals — the purchase of a large logistics complex in the Kyiv region, covering more than 100,000 square meters, for approximately $40 million.

Such financial capacity sharply contrasts with the earnings  declared from their official business. This discrepancy became one of the factors that attracted the attention of international law enforcement.

In 2022, the brothers finally left the country, choosing Cyprus as their new base. However, this did not stop the investigation. For nearly a year, European services documented the activities of their network, culminating in a large-scale operation in 2024.

As a result, Vladlen Hirin was detained along with members of his family. Significant assets were seized, including cryptocurrency and real estate. Meanwhile, Hennadiy Hirin avoided detention — according to preliminary information, he may be hiding within the EU, particularly in Slovenia.

The story of the Hirin brothers demonstrates a classic scheme: a combination of formally legal business, political cover, and shadow financial flows. It also shows how excessive displays of wealth — mass real estate purchases and large deals — can ultimately become the very factor that leads to exposure.