Not One Three-Country Raid: How Ukraine's Khimprom Investigation Moved Through Kazakhstan and Albania Over Nearly a Year

Ukraine's National Police announced the latest stage of the investigation on August 31, 2026.

Seven people were detained in Ukraine under Article 208 of the Ukrainian Criminal Procedure Code, and nine individuals were formally notified of suspicion. The alleged leader of the network and a co-organiser were notified in absentia.

The police refer to the criminal network as Khimprom.

According to investigators, recruitment call centres were used as a staffing system for an international drug operation.

Fake online job advertisements were allegedly used to recruit operators, HR managers, chemists, couriers, drug stashers, logistics staff, warehouse workers and others.

Police also allege that workers faced heavy financial penalties and that people attempting to leave could be subjected to violence or unlawful confinement. These remain allegations that must be established in individual criminal proceedings.

The investigation began with digital evidence in Ukraine

The timeline published by the National Police starts a year earlier.

In August 2025, Ukrainian authorities conducted 26 searches of call centres and seized approximately 4,000 items of digital evidence.

Police say analysis of that material led them to 31 Telegram-based drug shops, suspected organisers and operators, as well as hundreds of recruited individuals.

Kazakh law enforcement then investigated the possible involvement of some of those people in drug distribution in Kazakhstan.

That detail matters.

A multinational investigation is not simply several countries conducting unrelated raids.

The useful part begins when evidence found in one jurisdiction generates an actionable lead in another.

Joint Investigation Teams

Ukraine says it established Joint Investigation Teams, or JITs, with both Kazakhstan and Albania to coordinate the investigation.

According to the Ukrainian police, the teams worked to identify alleged organisers, operational participants, recruitment channels and people involved in drug trafficking across different countries.

The public release does not provide the detailed legal mechanics of every exchange of evidence, so those details should not be inferred.

But the operational timeline shows how the cooperation developed.

Albania had already moved a separate case to court

In March 2026, according to Ukraine's National Police, Albanian law enforcement sent a criminal case involving two Ukrainian nationals to court.

They were accused of unlawfully holding recruitment call-centre operators and using physical force and violence against them.

This means Albania's role was not a raid conducted simultaneously with Ukraine on August 31.

By then, the Albanian episode described by Ukrainian police had already reached a later procedural stage.

Seventy searches in Ukraine

In May 2026, police conducted another major phase in Kyiv and the Kyiv region with representatives of Kazakhstan's law-enforcement authorities participating.

The National Police reports 70 searches, 120 items of digital evidence seized and 27 active Khimprom participants identified.

Then the operation moved to Kazakhstan

In July 2026, the direction reversed.

Ukrainian officers participated in 15 searches in Kazakhstan, according to the National Police.

Kazakh authorities detained 17 people allegedly involved in drug distribution inside the country.

This is perhaps the clearest illustration of the investigation's international structure.

Evidence was first seized in Ukraine.

Links to Kazakhstan emerged.

Kazakh officers later participated in operations in Ukraine.

Ukrainian officers then participated in searches in Kazakhstan.

The latest stage returned to Ukraine

The final phase described in the August 31 announcement again took place in Ukraine.

With Kazakh representatives participating, police carried out 35 searches in Kyiv and five Ukrainian regions.

Authorities say two Khimprom recruitment cells were dismantled.

Police reported seizing digital evidence as well as 3,600 joints, 24 kilograms of a mixture containing the synthetic cannabinoid PINACA and more than 1,900 pre-packed sachets.

Seven people were detained and nine received notices of suspicion.

Ukraine says the alleged leader and a co-organiser were notified in absentia.

The police list charges or suspected offences including provisions on creating or leading a criminal organisation and participation in illegal drug production and distribution.

No conviction is implied by a notice of suspicion.

The alleged leader remains abroad

Ukrainian police identify the alleged organiser as a 36-year-old Russian national using the alias "Mexican."

They say he is hiding abroad.

An earlier National Police statement published in April 2026 said the individual had been internationally wanted since 2019 and allegedly continued coordinating the network remotely.

That is where a domestic criminal investigation meets a separate international problem: locating and, if legally possible, obtaining custody of a person outside the investigating state's territory.

Interpol and the DEA

Ukraine's National Police also says the operation was conducted in cooperation with the drug unit of Interpol's General Secretariat and the U.S. Drug Enforcement Administration, or DEA.

The public statement does not specify exactly which evidence or operational action was provided by either organisation.

It is therefore accurate to report cooperation, but not to invent a more detailed operational role.

The real lesson for investigators

The most interesting number in this case may not be seven arrests or 35 searches.

It is the sequence.

Twenty-six searches in Ukraine produced thousands of digital exhibits.

Analysis generated new Telegram-shop identities and people of interest.

A related case in Albania moved to court.

Another 70 searches followed in Ukraine.

Then 15 searches and 17 arrests followed in Kazakhstan.

The latest stage produced another 35 searches in Ukraine.

That is what a multinational investigation looks like when viewed as an evidentiary process rather than a press-release event.

One country's evidence needs to become another country's actionable lead without losing the chain linking a device, account, communication, transaction or individual to the alleged offence.

The real test will come later.

Searches generate material.

Suspicion notices define allegations.

Only the judicial process can determine whether the multinational evidentiary chain is strong enough to prove them.