Interpol hunts a Ukrainian suspect in Monaco after an attack on an oligarch—who’s behind it?

On July 3, 2026, Monaco’s police issued a search and arrest order for a Ukrainian woman, identified in multiple reports as Anastasia Berezovska, in connection with the explosion that targeted Ukrainian oligarch Vadim Ermolaev and his family in Monaco on Monday. El Mundo reports that the Principality’s police, working with French counterparts, identified her using footage from multiple security cameras, and that she had disguised herself as a man to complicate recognition. Clarín adds that Berezovska is the principal suspect and that investigators believe she did not act alone, pointing to the likelihood of accomplices or a broader network. A separate EuropeNews item circulated via bsky describes an Interpol alert with identifying details, including that she speaks German, has dark hair, and bears a possible snake tattoo on her upper right arm. Geopolitically, the case sits at the intersection of European security cooperation and the transnational shadow economy surrounding high-profile Ukrainian figures. Monaco and France’s joint identification effort signals that European states are treating the incident not as an isolated criminal matter but as a cross-border threat with potential links to organized crime, intelligence-linked tradecraft, or retaliatory violence tied to the wider Ukraine conflict ecosystem. The fact that the suspect is described as speaking German and has a distinctive tattoo suggests mobility and possible integration into European networks, which raises the risk of follow-on incidents beyond Monaco. The immediate beneficiaries of the investigation are European law-enforcement agencies seeking to disrupt networks that can exploit luxury jurisdictions, while the likely losers are any actors relying on anonymity, false identities, and fragmented policing across borders. Market and economic implications are indirect but real, primarily through risk premia and insurance/shipping-adjacent concerns for high-value assets and elite travel corridors. Monaco’s role as a wealth hub means such attacks can tighten security spending and increase compliance costs for banks, private wealth managers, and event operators tied to the principality’s financial ecosystem. In the near term, investors may watch for marginal effects on European luxury and hospitality sentiment, though no direct commodity linkage is described in the articles. The more relevant market channel is security-related: heightened perceived risk can lift costs for private security contracts and increase scrutiny of cross-border financial flows connected to sanctioned or politically exposed persons. Next, investigators will likely focus on corroborating the Interpol alert details with biometric and forensic evidence, then mapping the suspect’s movements before and after the Monaco blast. Key indicators to monitor include whether additional suspects are named, whether French and Monégasque authorities release further camera timelines, and whether Interpol updates the alert status from “wanted” to “arrested” or “provisional arrest.” A critical trigger point is evidence that the attack involved a coordinated cell operating across multiple jurisdictions, which would expand the scope of cooperation and potentially lead to targeted asset freezes or broader criminal designations. Over the coming days, watch for follow-on raids, extradition requests, and any public statements that clarify whether the investigation is purely criminal or connected to wider geopolitical violence patterns.

Geopolitical Implications

• 01

  Signals intensifying European cross-border policing against transnational violence involving Ukrainian-linked elites.

• 02

  Highlights how luxury jurisdictions can become operational nodes for international criminal or politically motivated attacks.

• 03

  If accomplices are identified, the case could expand into broader security cooperation and potentially sanctions-adjacent enforcement.

Key Signals

• —Whether Interpol updates the alert to include accomplices or specific travel routes.
• —Forensic confirmation tied to the tattoo/biometrics and whether investigators release a suspect timeline.
• —Public statements indicating whether the investigation is purely criminal or connected to broader geopolitical retaliation patterns.
• —Any follow-on arrests in France or Germany given the suspect’s reported German-speaking ability.