Jan Marsalek

After the disclosure of the 1.9-billion-euro shortfall, Marsalek disappeared in June 2020. German authorities are still seeking him, and 2026 sources continue to describe him as a fugitive generally believed to be in Russia. Earlier Bellingcat investigations had reconstructed a route towards Belarus and raised doubts about his initially reported movements in the Philippines.

State of the evidence

Documented

Attribution

Accused

Former Austrian intelligence official Egisto Ott was arrested in 2024 and tried in 2026 on charges of espionage and abuse of office. In May 2026, an Austrian court convicted him and sentenced him to four years and one month's imprisonment. Prosecutors argued that he had, among other things, passed data on Russian opposition figures and secure equipment to Marsalek's network.

Role of the person profiled

Protagonist not prosecuted

British prosecutions against a group of Bulgarian nationals established the existence of a spy network conducting surveillance of journalists, dissidents and Ukrainian military personnel. The Crown Prosecution Service and trial evidence indicate that operational leader Orlin Roussev received instructions from Jan Marsalek, described as an intermediary acting for Russian intelligence services. All six members of the group were convicted or had pleaded guilty.

Role of the person profiled

Protagonist not prosecuted

Thousands of messages presented in the British espionage case show Marsalek discussing with Orlin Roussev the supply of drones and other equipment to Russia, diamond trading and projects involving mercenaries in Africa. Reuters reported these exchanges based on material shown to the court.

State of the evidence

Documented

The BKA states that Jan Marsalek is suspected of having, together with Markus Braun, inflated Wirecard's balance-sheet total and turnover from at least 2015 by recording revenues purportedly generated by third-party acquirers (TPA). As COO and a management board member, Marsalek was particularly responsible for Asian and TPA operations.

State of the evidence

Documented

The official investigation reports that bank confirmations purportedly proving the existence of trust accounts were forged or inauthentic and that alleged assets of approximately 1.9 billion euros, representing around a quarter of Wirecard's balance sheet, did not exist. Marsalek is under investigation for his alleged role in this scheme.

State of the evidence

Documented

According to the BKA, the suspects allegedly negotiated loans and transactions with investors while knowing that the accounts were inaccurate and that the purported 1.9 billion euros in assets did not exist. German and Japanese banks and other investors reportedly provided approximately 3.2 billion euros, much of which was jeopardised by Wirecard's insolvency.

State of the evidence

Documented

Bellingcat investigations documented Marsalek's links with Russian contacts from military or intelligence circles, projects in Libya, contacts in Austria and episodes in which he reportedly had access to sensitive information. These findings reinforced suspicions about the depth of his ties with Russian intelligence services even before Wirecard's collapse.

The BKA also states that Marsalek is suspected of having acquired shares in a company at an excessive price, contrary to his duty to protect Wirecard's financial interests, thereby causing the group a loss.

State of the evidence

Documented