Greek authorities are investigating a civilian woman believed to be a central figure in an alleged espionage network that infiltrated the country’s armed forces, as a senior Air Force officer remains in custody on spying charges.
The case, which has rattled Greece’s military establishment, centers on a 54-year-old Air Force colonel who is officially suspected of espionage. Investigators are now working to identify his recruiter and dismantle what they describe as a pyramid-structured spy network. At the top of that structure, according to authorities, is a woman outside the military who allegedly played a coordinating and connecting role.
Intelligence and military counterintelligence units are combing through the officer’s digital footprint, files, and contacts in an effort to map the full scope of the operation, which officials say touches on core national security concerns.
Recruitment and foreign links
Evidence so far indicates the officer was first approached by a Chinese national posing as a representative of a technology company. The initial contact reportedly involved general geopolitical discussions and seemingly harmless technical advice. After gaining his trust, the individual invited him to China, where authorities believe the recruitment was effectively completed.
The woman now under scrutiny was allegedly present at a 2025 meeting in Athens where the officer met face-to-face with the Chinese agent. Authorities say they have photographic material from that meeting and are examining her role in both the recruitment and the connections among those involved.
Encrypted communications and payments
According to investigators, classified documents were transferred using specialized software allegedly provided by Chinese intelligence services. In return, the officer is said to have shared a card number to receive payments.
Greek authorities have so far identified about €60,000 in funds and cryptocurrency. At a more advanced stage of the alleged collaboration, monthly payments reportedly ranged between €15,000 and €20,000. Other transfers, depending on the importance of the information, were said to range from €5,000 to €15,000 and were arranged through encrypted applications on a secondary “shadow” phone.
A hidden second mobile phone with an encrypted communication app proved crucial in uncovering the case. During a surprise search of the officer’s office, conducted in the presence of a military cybersecurity specialist, investigators were able to recover even deleted files.
Additional suspects and meetings
The investigation has uncovered at least two meetings in 2025 at central locations in the Greek capital. In both, a third key individual was reportedly present and may have had a role even more significant than that of the officer. Authorities are now examining that person’s involvement.
Profile of the suspect officer
Colleagues describe the 54-year-old officer as low-profile, methodical, and unlikely to attract suspicion. He had 32 years of service and specialized in communications, electronic systems, and cybersecurity.
On social media, he appeared active, sharing posts from trips and conferences. In a notable twist, he had authored a 2023 article warning about “malicious insiders” and stressing that internal actors could pose a critical threat if underestimated.
Ongoing investigation and charges
The officer faces serious charges and remains detained at a military facility pending his appearance before a military prosecutor.
Meanwhile, authorities are widening the probe to identify the ultimate recipients of the information and other members of the network. Officials believe the case could potentially have implications beyond Greece, possibly extending to other NATO countries.
