The leaked files first appeared on the now-deleted X/Twitter account “Mikhail” shortly after the start of the war in Ukraine. The Swiss investigative collective WAV downloaded the full leak before its removal and later shared it with BIRN. Our team analysed hundreds of documents, including technical specifications, invoices and correspondence, and verified their authenticity through export-control records, open-source material and consultations with security-technology experts.
The investigation was complicated by gaps in Switzerland’s public export-licensing data and the absence of official confirmation from Serbian authorities. Nevertheless, the documents indicate that BIA considered purchasing two IMSI catcher models in 2021, both capable of identifying devices, tracking movements and, under downgraded 2G conditions, intercepting calls and SMS messages. Additional leaked files show that another Serbian company, Ibis Instruments, acquired NeoSoft’s BTS Hunter, a system designed to detect IMSI catchers, raising further questions about the domestic surveillance landscape and the lack of legal safeguards in Serbia.
Key findings
- Leaked documents show BIA explored purchasing NeoSoft’s NS Backpack IMSI catcher in 2021.
- The device is capable of device identification, location tracking and interception of calls and SMS via forced 2G downgrading.
- Two versions were offered, priced roughly between USD 145,000–150,000, with advanced optional modules costing over USD 70,000.
- The equipment appeared to be pre-configured for Serbian mobile networks.
- Switzerland’s SECO database shows no export licence issued for this equipment in 2021.
- NeoSoft did obtain permission for a short demonstration at BIA headquarters in 2023.
- Separate leaked files confirm that the Serbian firm Ibis Instruments purchased NeoSoft’s BTS Hunter, a tool for detecting IMSI catchers, in 2021.
Serbia lacks dedicated legislation regulating IMSI catcher use, creating potential for opaque or abusive surveillance practices.
Image by ©Slobodan Đuričić
