An investigation has uncovered a sprawling digital recruitment network involving 289 websites, social media profiles and messaging accounts allegedly used to lure foreign nationals into Russia’s military campaign against Ukraine through promises of lucrative civilian employment.
The investigation, conducted by Code for Africa’s iLab research team and partners, identified as many as 33 competing recruitment operations targeting potential recruits across Africa, Asia, Latin America and other regions.
The findings, contained in the report Death Benefits: The Industry Selling Russia’s War as a Job, expose an increasingly sophisticated recruitment industry that uses online advertising, deceptive job offers and digital communications to connect foreign job seekers with recruiters allegedly channelling them into military service.
The 289 digital assets comprise 197 websites and web pages, 19 social media accounts and 73 messaging accounts or channels operating on platforms including WhatsApp, Telegram, VK and MAX.
Researchers found that the operations were not controlled by a single recruitment organisation but were distributed across multiple competing networks, with some sharing technical infrastructure and contact details.
“The recruitment funnel does not belong to one organisation,” the report states, describing a decentralised system in which multiple operators compete to attract potential recruits.
Fake job offers
The investigation found that recruiters frequently advertised opportunities resembling ordinary employment, including construction work, security positions, film roles and assistance with visas and travel arrangements.
Such offers allegedly attracted job seekers who were looking for employment abroad but did not necessarily intend to join the Russian military.
Some advertisements promised attractive salaries, free flights and other financial incentives, while certain recruitment campaigns targeted people with technical skills, including engineers, doctors and drone operators.
The researchers said some websites presented themselves as legitimate employment agencies or claimed to represent Russian state institutions, despite a lack of independently verified evidence supporting some of those affiliations.
Others reportedly used fabricated endorsements and the appearance of established media organisations to enhance their credibility.
The strategy exploits the trust job seekers place in recruitment agencies, particularly when advertisements promise overseas employment and financial security.
According to the Institute for Security Studies, the investigation found that many African nationals had been misled after responding to advertisements for seemingly conventional jobs.
The institute described the recruitment campaign as a decentralised operation involving a combination of Russian companies and freelancers operating across different jurisdictions.
Disposable websites
A key finding is the use of disposable websites and online identities that can be abandoned and replaced when exposed.
Researchers described the tactic as “burn and replace”, whereby recruitment operators can establish new web pages or accounts after existing ones are identified or removed.
The approach complicates efforts by authorities, investigators and technology companies to track recruitment activity and establish links between operators.
Investigators also identified common technical indicators, including shared internet protocol addresses, telephone numbers, email records and tracking codes, which helped connect some of the recruitment operations.
The networks reportedly rely on widely available digital infrastructure, including Western hosting services, website-building software and advertising systems operated by major technology companies.
This has raised questions about how platforms can identify and disrupt deceptive recruitment campaigns without waiting for individual websites or accounts to be reported.
Research findings cited by the Centre for Information Integrity in Africa indicate that Meta has removed hundreds of recruitment-related advertising campaigns, profiles and associated accounts. However, investigators warn that enforcement against individual accounts may not dismantle the wider recruitment infrastructure.
Decentralised recruitment industry
The investigation identified four principal recruitment brands: Military Staff Agency, Work in Russia, IRC Russian Bear and Work Crew Agency.
The operations allegedly compete for recruits while using overlapping digital resources and recruitment techniques.
Some campaigns reportedly offer commissions to intermediaries who introduce prospective recruits, creating a geographically dispersed network of recruiters operating through personal social media accounts and group chats.
One recruitment webpage cited in the investigation offered payments to individuals who recruited candidates through online channels or in-person contacts.
The commission-based model potentially allows recruitment operations to expand without relying exclusively on a central agency or formal office.
However, researchers have cautioned that technical links between websites and accounts do not, by themselves, establish that every operation is controlled by the same organisation or that the Russian government directly supervises the entire network.
The investigation said some operators made claims of official affiliation that researchers could not independently substantiate.
Kenya faces growing recruitment concerns
The findings have particular significance for Kenya, where authorities have investigated allegations that job seekers were deceived into travelling to Russia and subsequently exposed to military service.
In February 2026, prosecutors charged Festus Omwamba, alleged to be the head of Global Face Human Resources, with trafficking 22 Kenyans for exploitation through deception. The men were reportedly found in a residential building in Athi River while awaiting travel to Russia.
Omwamba denies the allegations, and the case remains before the courts.
The case illustrates how online recruitment can intersect with physical recruitment agencies, intermediaries and travel arrangements, making it difficult to address the problem through digital enforcement alone.
Researchers have urged technology companies to strengthen their monitoring of recruitment advertisements and improve cooperation with investigators.
Justin Arenstein, who leads Code for Africa, said the investigation sought to expose the mechanics of the recruitment industry and encourage technology companies and regulators to respond.
“Our aim exposing the mechanics,” Arenstein said, “is to force the technology companies to act and to trigger regulators to police these abuses more closely.”
The investigation ultimately highlights the challenge facing governments and digital platforms: dismantling a recruitment system that can quickly change its online identity, move between jurisdictions and continue targeting job seekers even after individual accounts are removed.
For countries whose citizens are being recruited, the findings underscore the need for coordinated action against deceptive employment advertising, suspected trafficking networks and the intermediaries facilitating recruitment into a foreign war.
