The video arrives with the jarring urgency of a breaking-news alert: “$140 MILLION FOUND IN CASH INSIDE REFRIGERATOR BOXES AT FORMER UKRAINIAN DEFENSE OFFICIAL’S HOME.” The clip, shared widely on Facebook in late September 2026, appears to show soldiers wearing vests marked with the Cyrillic letters of Ukraine’s National Anti-Corruption Bureau, or NABU, standing over ordinary-looking boxes labeled as Haier refrigerators. When the boxes are opened, they are supposedly stuffed not with appliances but with neat bundles of American banknotes. One box carries a small yellow note in Ukrainian that reads, “For the servant of the people,” a phrase that instantly calls to mind the popular television comedy series that made Volodymyr Zelensky a household name long before he became Ukraine’s wartime president. The implication is unmistakable: a top official tied to Zelensky’s world has been caught hiding a fortune in cash, and the country’s flagship anti-corruption agency has finally cracked the case. The video feels concrete, visual, and damning. But it is also entirely fake. Ukraine’s real anti-corruption agency, NABU, has categorically denied that any such raid ever took place, and the online article that launched the story was built on an elaborate web of deception. The disinformation did not come from a legitimate newsroom; it came from a hastily created copycat website designed to look like a trusted Ukrainian media outlet, and it disappeared almost as quickly as it appeared.
Tracing the origin of the claim reveals a now-familiar pattern of modern digital warfare. Researchers traced the story to an English-language article published on September 23, 2026, on a website called nvukraine.com. At first glance, the page appeared to be a legitimate English-language version of the Kyiv-based news outlet New Voice of Ukraine, or NV. It replicated the site’s design, its layout, and even its “About Us” section. But the domain was only registered on September 21, just two days before the fake article went live, and by September 28 the site was already offline. A snapshot preserved by the Wayback Machine showed that on its very first day, the domain was populated almost entirely with articles stolen from the real NV site, a common trick used to make a fraudulent site look established and credible. The fake story itself was accompanied by a longer video with English narration that sounded like a professional news report. It mixed real, verifiable facts—such as the resignation of Arsen Zhumadilov, the former head of Ukraine’s Defense Procurement Agency—with the completely fabricated claim that NABU had raided his offices and discovered tens of millions of dollars in cash. When the video’s audio track was run through the synthetic-voice detection tool Hiya, part of the Invid WeVerify browser extension co-developed by AFP, the assessment was blunt: the narration was “very likely AI-generated.” None of this happened by accident. The article, the video, and the website were assembled with the specific intention of manufacturing a believable lie and planting it in the middle of a real political crisis.
The official response was swift and unequivocal. NABU issued statements on X and Telegram on September 25, 2026, rejecting the raid claim as a “fake” and explaining that the video was created with the deliberate goal of “discrediting anti-corruption agencies, undermining trust in state institutions” and causing “damage to the image of Ukraine.” The bureau also denied that it had ever searched Zhumadilov’s offices, a denial independently reported by the Ukrainian Center for Countering Disinformation. The genuine New Voice of Ukraine issued its own statement the same day, making clear that its editorial team had no connection whatsoever to the impostor domain nvukraine.com. AFP reviewed NABU’s official YouTube, X, Facebook, and Telegram channels and found no matching or even similar footage of any such raid. The fake video also displayed the logo of Ukraine’s Specialized Anti-Corruption Prosecutor’s Office, but a search of that office’s official Facebook, Telegram, and YouTube accounts turned up nothing as well. The illusion was carefully constructed—down to the fake soldiers’ vests and the deliberately provocative note about the “servant of the people”—but it collapsed the moment anyone checked the primary sources. The entire operation, from domain registration to viral distribution, appears to be part of a broader pattern of pro-Russian disinformation campaigns that AFP and other researchers have documented extensively. These campaigns often rely on websites created just days before a false story breaks, filled with stolen content to disguise their origins, and then vanish once the misinformation has been spread. In many cases, researchers have linked such efforts to Russian disinformation operations. This particular hoax spread not only in English and Ukrainian but also in Hungarian, German, Czech, Slovak, French, Hindi, Greek, and Polish, suggesting a coordinated effort to push the narrative to international audiences.
What makes this lie so potent is that it does not exist in a vacuum. Corruption has long been a serious and well-documented problem in Ukraine, and the pressure of war has only intensified scrutiny of the country’s institutions. There have been multiple major scandals since Russia’s full-scale invasion in 2022, and these are not fabricated. In July 2025, President Zelensky attempted to strip NABU and the Specialized Anti-Corruption Prosecutor’s Office of their independence, sparking rare and visible protests in a country at war. The backlash was fierce, and the European Union called the move a “serious step back” for a nation seeking membership in the bloc. Zelensky was ultimately forced to reverse course. Then, in November 2025, a NABU investigation uncovered a $100 million corruption scandal involving embezzlement in Ukraine’s energy sector, a case that led to the resignation of Andriy Yermak, the head of the presidential office and one of Zelensky’s closest allies. More recently, in September 2026, Zelensky dismissed Prosecutor General Ruslan Kravchenko after NABU investigators said they had uncovered a network that accepted payments to protect fraudulent call centers involved in money laundering. Kravchenko has denied the allegations of taking bribes, but the investigation was serious enough to cost him his job. These are real events, with real names, real institutions, and real consequences. They are not invented by Russian propagandists. But they are precisely the kind of raw material that disinformation campaigns thrive on, because they make a completely false story about $140 million in a refrigerator box feel plausible to a public that has heard so many disturbing true stories about corruption.
Even the Ukrainian military procurement system, which is central to the fake narrative, has faced legitimate criticism. The New York Times has revealed that Ukraine’s own internal audits found serious flaws in the way the country procured equipment and supplies for its armed forces. Contracts were reportedly awarded to unlicensed or unreliable suppliers, and expensive intermediaries added layers of cost without adding clear value. These findings were devastating enough on their own, prompting outrage among a population that has endured unbelievable sacrifice and worrying Ukraine’s international partners, who have poured billions of dollars into the country’s defense. But the existence of real problems in procurement does not mean that every story about procurement corruption is true. The fake article about Zhumadilov was cleverly designed to exploit this vulnerability. It took a genuinely newsworthy event—Zhumadilov’s resignation from a sensitive procurement post—and grafted onto it an entirely invented scandal, complete with AI-generated narration and imagery designed to look like official NABU action. The lie was then inserted into an ecosystem already buzzing with anxiety about corruption, where it could easily be mistaken for another exposé. This is the signature strategy of modern disinformation: not inventing an entirely new world of lies, but inflating and distorting real weaknesses until the public can no longer tell the difference between a genuine crisis and a manufactured one.
In the end, the $140 million refrigerator story is a cautionary tale about the weaponization of trust. Ukraine’s fight against corruption is real, unfinished, and vitally important, and it deserves honest reporting and accountability. But the same openness that allows brave investigators to expose wrongdoing also creates space for malicious actors to plant false evidence and watch it spread. The goal of this particular fake was not to make Ukrainians hate their government, although that was certainly part of it. The larger goal was to undermine the international support that Ukraine depends on, to persuade foreign audiences that the country is so hopelessly rotten that it is not worth defending. Every share of the video, every gasp at the imagined money, every comment about Kyiv’s greed brought that goal a little closer. Yet the hoax also failed in revealing ways. It was traced to a domain that existed for only days, populated with stolen articles, narrated by an AI voice, and disowned by both the real news outlet and the very agency it claimed to show. The truth, once checked, was not hard to find. In a time when social media rewards outrage and speed, the most important lesson is patience. The video was fake. The raid never happened. The money never existed. But the danger of such lies is real, and so is the need to confront them with the same determination that Ukraine brings to the battlefield.