Starlink's Shadow Network

Independent Russian outlet Verstka reported that the Russian military in Ukraine is using the Starlink satellite internet system, bypassing restrictions via Ukrainian intermediaries, while also facing communication problems stemming from domestic messaging limits.

According to Verstka, Russian forces began widespread use of Starlink in 2024. The terminals, developed by Elon Musk’s company, have become one of the few ways to obtain secure stable internet access in combat zones. They are used not only for communication, but also to support drone operations.

In February, however, unverified terminals in Ukraine began to be disconnected, causing immediate disruptions for Russian units. A soldier identified as Alexander, serving in an electronic warfare unit, told Verstka that the loss of Starlink hindered "rapid task execution." 

Sellers quickly adapted. Advertisements now offer verified terminals or services to "activate" them. A Verstka reporter, posing as a buyer, contacted several vendors. One man, identifying himself as Dmitri, offered Starlink units that had been registered to Ukrainian citizens. He also arranged subscriptions for three, six, or 12 months. 

In a Telegram channel with about 20,000 subscribers, the seller posted images of bulk shipments, allegedly sourced from China. He said devices are first sent to Ukraine for verification and activation. Ukrainian citizens or businesses, referred to as "drops," register the terminals in their names. The equipment is then mailed within Ukraine before being forwarded to Russia, including Moscow. Another vendor said shipments also move through Europe or Crimea.

Verstka found posts on illicit income forums seeking such intermediaries, offering payments of $100 to $500 for registering terminals through Ukrainian administrative centers and postal services.

Following the restrictions, Ukraine’s security service detained several citizens accused of registering terminals for Russian military use. They face potential life sentences and confiscation of their assets. Ukrainian hackers also reportedly created fake "drop" networks, collecting payments from Russian buyers and potentially gathering sensitive information.

Delivery to Moscow takes about 12 days, sellers said. They claim replacements are provided if terminals are blocked. One vendor argued that devices are unlikely to be disabled because of their volume and inclusion on Ukrainian "whitelists."

Another supplier, identifying himself as Alexei, offered remote verification via "trusted contacts and companies," claiming the process is faster. One seller said multiple terminals could be verified through Ukrainian military personnel, up to 10 units for $3,200.

Despite these workarounds, terminals can still be blocked. One vendor attributed shutdowns to "military use," saying devices used for drone control are more likely to be disabled. Verification for such purposes is possible, he added, but "much more expensive."

Frequent disruptions have reduced Starlink’s appeal, Alexander said. Many units now rely on Russian providers such as Gazprom or Rostelecom. Fiber-optic internet from the Defense Ministry is not widely available.

Another soldier, using the call sign "Kazakh," said his unit purchased the Russian satellite dish Yamal-601. "It’s more expensive than Starlink. It works worse than Starlink, but better than the military internet," he said.

Others were less favorable. "Anyone who used Yamal is dissatisfied. It’s far behind Starlink," Alexander said. A pro-war blogger, Alexander Simonov, echoed that view, saying the system cannot handle group video calls and requires a paid VPN even for Telegram.

A mobilized soldier named Sergey described conditions as worsening. "Connection has been terrible lately. It constantly drops," he said. Asked whether Starlink disruptions were to blame, he pointed instead to Russian restrictions, including the slowing of Telegram, widely used by troops.

Most soldiers interviewed said they rely on VPNs to access Telegram. One contractor said mobile networks barely function, and internet access is sporadic. Messaging is only possible when a signal appears, leaving units disconnected for extended periods.