Israeli security services have detained a Russian citizen accused of photographing infrastructure and vessels at Israeli ports on behalf of Iran, Kommersant reported, citing Ynet, on December 19.

Vitaliy Zvyagintsev, 30, arrived in Israel as a foreign worker and was detained on December 4, according to statements from Israel's Shin Bet security service and the Defence Ministry's security department.

During interrogation, authorities determined he had been in contact since October 2024 with an Iranian intelligence representative who identified himself as Roman and claimed to live in Russia. Zvyagintsev received payment in cryptocurrency for completed assignments.

The suspect photographed facilities at the ports of Ashdod, Eilat and Haifa. Security guards summoned police when he attempted to photograph a coastal area in Herzliya, and he was released after questioning and required to delete the images. Zvyagintsev also photographed oil refineries in Haifa.

They claimed that Vitaly intended to photograph the Ramat David Air Base on December 4, 2025, but was arrested by Israeli security forces before the images could be sent, IRNA reported.

Israeli investigators allege Zvyagintsev understood the requests to photograph various locations in Israel "were espionage assignments from persons seeking to harm the country," but carried them out regardless.

He has been formally charged with espionage for Iran, contact with a foreign agent and "transferring information to the enemy". The Russian national pleaded guilty, according to the indictment.

The arrest follows Israel's Cyber Directorate's warning to residents to ignore text messages allegedly sent by Iranian intelligence services attempting to recruit informants on December 18.

Thousands of people in Israel have received suspicious text messages written in English stating: "Iranian intelligence agencies are ready to receive your intelligence cooperation. To cooperate, contact one of Iran's embassies via the internet," according to Israel Hayom.

The Cyber Directorate, which operates under the Prime Minister's Office, advised recipients to ignore the messages, block the sender's number and refrain from responding.

Israeli security officials described the messages as part of Iran's broader online recruitment efforts, which typically begin with financial offers before progressing to more sensitive assignments.

In many cases, initial contact occurred through social media with messages stating: "Hello, this is Iranian intelligence. You can help us and receive money in return."