← Back to Library

Shor’s expanding empire

This week's coverage from David Smith for Moldova Matters does more than report on corruption; it exposes a fully operational, state-backed financial architecture designed to bypass global sanctions and destabilize democracies. The most startling revelation isn't just that Ilan Shor is involved in illicit finance, but that his network has evolved into the Kremlin's primary clearinghouse, bridging traditional banking with cryptocurrency to move everything from car purchases to military drone funding. For busy observers tracking the erosion of international norms, this piece provides the missing link between abstract sanctions and the concrete machinery keeping them ineffective.

The Architecture of Evasion

Smith begins by dismantling the common misconception that Sanctions evasion is a niche crypto game. He highlights a new 114-page report from the Open Source Centre and TRM Labs, which argues that "past investigations focused on the A7A5 cryptocurrency have obscured a much larger set of financial infrastructure that largely relies on traditional banking but is optimized for sanctions evasion." This reframing is critical: it moves the story from digital novelty to systemic risk.

Shor’s expanding empire

The author points out that Shor has become the architect of this system, acting as a "financial clearing house for both large corporations and individuals needing small scale financial services." The report's finding that Shor sits at the center of a network "fully backed by the Russian state" changes the stakes entirely. It is no longer just about one fugitive politician; it is about a captured state apparatus, specifically in Kyrgyzstan, which Smith notes is described as a "captured state" serving as a key node.

"The main takeaway is the fact that Ilan Shor now sits at the center of a critical financial network that is fully backed by the Russian state."

Smith's analysis here is particularly sharp because it highlights the paradox of the system: its very complexity makes it accessible to anyone, from small business owners to arms dealers. The coverage details how the network is "growing rapidly and has global ambitions," yet simultaneously reveals how difficult it remains for ordinary Russian entities to access the global financial system. This duality suggests a two-tiered economy where the elite bypass rules while the rest face isolation.

From Outcast to Insider

Perhaps the most compelling narrative arc in Smith's piece is the transformation of Shor from a pariah to a Kremlin insider. He cites a 2016 report by Kommersant which quoted a Russian source explaining why Shor was initially banned: because he "corrupts everyone he sees." The irony, as Smith illustrates, is that this same trait became his greatest asset.

The author traces the pivotal moment to a meeting in Israel between Shor and Roman Abramovich. According to sources cited by Novaya Gazeta Europe, "Abramovich and Shor bonded over Jewish topics... All these people are essentially part of the same circle and interact with each other." This social engineering, Smith argues, is the engine of the network's legitimacy within Russian power structures.

"It's all the same crowd, how can I explain it? ... They become useful to each other. Then they go their separate ways."

Smith emphasizes that Abramovich personally introduced Shor to Vladimir Putin, granting him a unique value proposition: being vouched for by the highest levels of the Russian state. The coverage details how "Diamant Estate," a company sanctioned by the UK, serves as the financial core, borrowing money to fund everything from TV stations to political campaigns. Critics might argue that focusing on individual relationships overlooks broader structural incentives within the Russian economy, but Smith effectively demonstrates that in this specific ecosystem, personal patronage is the structure.

The piece also reveals the terrifying accessibility of this network. When journalists tested the system by asking to buy a car in Germany, an operator casually replied: "You transfer rubles to an A7-Agent account and provide us with an invoice from the German recipient. We use our infrastructure to select the route, and the money arrives within five days." This mundane efficiency underscores the normalization of sanctions evasion.

Exporting the Playbook

Smith extends his analysis beyond finance to political interference, drawing parallels between Moldova and Armenia. He details how Shor's NGO, Evrazia, has redeployed its "Moldova playbook" in Yerevan. The organization positions itself as a benign provider of cultural services—robotics classes, language lessons—while functioning as a platform for election manipulation.

"Evrazia's operations in Moldova and Armenia are not separate initiatives; it is one operation running across two countries, which seems to share the same objective: to build political leverage for Kremlin-aligned forces ahead of elections."

This section draws a sharp line between civil society work and hybrid warfare. The report notes that while Evrazia was designated a national security threat in Moldova, it "continues to operate freely" in Armenia. This inconsistency highlights the vulnerability of neighboring states where Russian influence can flow unimpeded.

Smith connects these activities to broader geopolitical shifts, noting the deepening economic crisis in Transnistria, where street lights have been turned off on the order of "above," and teachers' salaries are being paid in installments. The region's attempt to outlaw the word "Transnistria" itself signals a desperate consolidation of identity amidst collapse.

"The evaluation of the information held indicates detailed databases containing names and surnames, e-mail addresses, telephone numbers, home addresses, as well as copies of identity documents."

The coverage also touches on the human cost of this hybrid war, specifically regarding the explosion of telephone fraud. The Security and Intelligence Service (SIS) revealed that Russian special services are using databases collected by Shor's criminal group to target citizens. This data is then weaponized in scams where children are coerced into stealing from their own homes under the guise of a "secret mission." Smith notes that this represents a new phase where "children and teenagers are turned into accomplices of criminals," turning domestic tragedy into a geopolitical tool.

The Institutional Response

The piece concludes with a roundup of institutional reactions, including the EU adding six individuals to its sanctions list for destabilizing Moldova. Notably, former Gagauzia leader Irina Vlah was sanctioned as a "Russian agent who coordinated her role in the elections with the Kremlin." Meanwhile, a Moldovan court issued a new arrest warrant for Shor regarding the embezzlement of $100 million from Banca de Economii.

Smith observes that despite these legal actions, the political landscape remains fluid. Igor Grosu was re-elected leader of the PAS Party, and the party has proposed Alexandru Vornicu as their mayoral candidate for 2027—a remarkably early move given Vornicu's success in transforming his suburban town of Stauceni.

"This constitutes an interference operation that uses the language of civil society to do the work of political campaigning."

The administration's response includes legislative moves, such as forcing taxi payments through local banks to stop revenue leakage to Dubai, and Moldova's accession to a Council of Europe protocol banning unregistered SIM cards. These are defensive measures against an offensive strategy that has already penetrated deep into the social fabric.

Bottom Line

David Smith's coverage succeeds by shifting the focus from the personality of Ilan Shor to the terrifying efficiency of the infrastructure he commands. The strongest argument is that this network is not a shadowy conspiracy but a formalized, state-backed utility for sanctions evasion and political subversion. Its biggest vulnerability lies in the growing visibility of its operations, yet as the piece shows, the speed at which it adapts—from crypto to traditional banking, from Moldova to Armenia—suggests that legal warrants alone will be insufficient to dismantle it.

Deep Dives

Explore these related deep dives:

  • Sanctions, Statecraft, and Nuclear Proliferation Amazon · Better World Books by Etel Solingen

  • Virtual currency law in Iran

    While the article notes that A7A5 is a distraction from larger traditional banking infrastructure, this entry explains the specific technical mechanism of the 'stablecoin' designed to bypass capital controls and how its failure necessitated the shift to the broader network described in the report.

  • Kyrgyzstan–Russia relations

    The article identifies Kyrgyzstan as a 'captured state' essential to Shor's network, and this entry explains the specific economic dependencies and political leverage Russia uses to turn neighboring states into financial conduits for sanctions evasion.

Sources

Shor’s expanding empire

by David Smith · Moldova Matters · Read full article

New Investigations Shed Light on Shor Financing and Activities.

This week 3 new investigations were published into various aspects of Ilan Shor’s network. In each case investigative journalists have published sweeping looks into various aspects of Shor’s operations and detailed how they have grown beyond Moldova to become a core part of Russia’s financial and foreign influence infrastructure.

Each investigation is well worth reading in full - here we’ll link to them and summarize some of the key findings.

The Big Shor: A7 and the illusion of Russian financial innovation..

Published on 12 June by the Open Source Centre (OSC) in partnership with TRM Labs, authored by Zachary Tvarozna, Hamish Macdonald, James Byrne, Lucas Kuo, Denys Karlovskyi, Vasyl Yurkuts, Gary Somerville and William Gibson.

This 114 page report tracks the growth and evolution of the A7 network in great detail. The authors argue that past investigations focused on the A7A5 cryptocurrency have obscured a much larger set of financial infrastructure that largely relies on traditional banking but is optimized for sanctions evasion. The report centers Ilan Shor as the architect of Russia’s most important sanctions evasion network and documents its global reach as a financial clearing house for both large corporations and individuals needing small scale financial services. In this network A7A5 plays an important role, but only in support of more traditional infrastructure including Russian banks and entities in Kyrgyzstan which the report calls a “captured state.”

The main takeaway is the fact that Ilan Shor now sits at the center of a critical financial network that is fully backed by the Russian state. This network is growing rapidly and has global ambitions. At the same time, its very complexity highlights how challenging it is for Russian individuals and companies to access the global financial system right now.

“Corrupts everyone he sees”.

Published on 17 June by Novaya Gazeta Europe, written by Alexey Stepanov and Olesya Shmagun

This brilliant report tracks Shor’s rise to the center of Russia’s sanctions evasion system. It takes his name from a 2016 report by Kommersant which quotes a Russian government source on why Ilan Shor was at that time banned from entering Russia. Because he “corrupts everyone he sees.”

The investigation looks at how Shor went from being banned from entering Russia to sitting at the center of the country’s financial architecture. According to a source cited by Novaya Gazeta Europe the key ...