The Spy Who Danced Forró: How a Russian Agent Built a Perfect Brazilian Life — and Got Caught

A Russian intelligence officer spent over a decade posing as a Brazilian named Victor Muller Ferreira, complete with a passion for partner dancing and a degree from Johns Hopkins. His unraveling exposed a far larger Kremlin spy network operating from South America.

A Man With a Brazilian Passport Lands in Amsterdam

In April 2022, two months after Russia launched its full-scale invasion of Ukraine, a man in his mid-thirties stepped off a plane at Schiphol Airport in Amsterdam. His Brazilian passport identified him as Victor Muller Ferreira, a 33-year-old from Niterói, near Rio de Janeiro. He was there to start an internship at the International Criminal Court in The Hague — the very institution that was gearing up to investigate Russian war crimes in Ukraine.

He never made it past immigration. The Dutch General Intelligence and Security Service (AIVD) had been tipped off. They declared him an undesirable alien and put him on the next flight back to Brazil. His real name, they said, was Sergey Vladimirovich Cherkasov, born September 11, 1985, in the Kaliningrad exclave. He was an officer of the GRU, Russia’s military intelligence directorate. The Dutch intelligence agency called the threat he posed ‘potentially very high.’

Building a Legend, One Dance Step at a Time

Cherkasov had been building his cover identity — what intelligence professionals call a ‘legend’ — for over a decade. He first arrived in Brazil in 2010 under his real Russian name. Within months, he obtained a fraudulent birth certificate listing a fake father and a deceased Brazilian woman who never had children as his mother. With that single document, the rest fell into place: a voter registration card, a military service certificate, a driver’s license, and eventually a genuine Brazilian passport.

The legend was meticulous. Dutch intelligence later published a four-page document, apparently written by Cherkasov himself in broken Portuguese, filled with mundane biographical details designed to make his story airtight — childhood memories, family drama, even a personal hatred for a particular fish. He claimed his European features earned him the nickname ‘Gringo’ in his neighborhood. And he cultivated a love of Forró, the lively partner dance popular across northeastern Brazil, which gave his persona a layer of cultural authenticity that’s hard to fake.

I’ve spent enough time in the Middle East and Europe to know that the best cover stories aren’t built on grand gestures. They’re built on small, believable details — the kind of thing a border guard or a new acquaintance would never think to question. A man who dances Forró at a local bar is just a guy who dances Forró. Nobody suspects he’s memorizing dead-drop locations in the jungle outside São Paulo.

From Dublin to Washington to The Hague

Under his Brazilian alias, Cherkasov earned a degree in political science from Trinity College Dublin between 2014 and 2018. He even ran a geopolitics blog called ‘Politics of Us,’ which struck a deliberately moderate, pro-Western tone — at one point calling Putin a ‘cancer.’ It was a performance designed to build credibility.

Then came the bigger prize. He was admitted to Johns Hopkins University’s School of Advanced International Studies in Washington, D.C., where he earned a master’s degree in American foreign policy in 2020. One of his professors, Eugene Finkel, an expert on genocide, later wrote on social media that he had taught the man he believed to be Ferreira and even provided him a recommendation letter for the ICC internship. ‘I wrote a reference letter for a GRU officer. I will never get over this fact,’ Finkel said.

While in Washington, Cherkasov opened bank accounts, obtained a Virginia driver’s license, and — according to U.S. prosecutors — sent intelligence about American policy on the looming Ukraine invasion to his handlers. The U.S. Department of Justice later charged him with acting as an agent of a foreign power, visa fraud, bank fraud, and wire fraud.

The Unraveling

How did Western intelligence catch him? The trail appears to lead back to the 2018 Skripal poisoning in Salisbury, England. Investigators discovered that the two GRU suspects in that case carried Russian passports with sequential numbers — a careless bureaucratic detail that triggered a massive international review of Russian passport data. Cherkasov’s passport number was flagged as suspiciously close to those of known operatives. American intelligence tracked him and tipped off the Dutch before his arrival in Amsterdam.

When Brazilian federal police arrested him upon his return to São Paulo, Cherkasov was reportedly ‘very cocky,’ confident his documents would hold up. They were, after all, authentic. But investigators pulled at the one thread that mattered: his birth certificate. They tracked down relatives of the woman listed as his mother and learned she had died without ever having children. His listed father had no record of existing at all. The legend collapsed.

A Tug-of-War Over a Prisoner

A Brazilian federal court initially sentenced Cherkasov to 15 years in prison for identity fraud. That was later reduced to five years and two months on appeal. What followed was a geopolitical tug-of-war.

The United States demanded his extradition, wanting to prosecute him for espionage on American soil. Russia also demanded his return — but on the implausible charge that he was a drug trafficker wanted for running a heroin ring from Afghanistan through Tajikistan in the early 2010s. Investigative outlet Bellingcat found that Russian travel records showed Cherkasov wasn’t even in Russia during the period of the alleged drug crimes. The fabricated charges appeared designed to secure his safe return to Moscow.

Brazil rejected both requests. Its Supreme Court had already approved Russia’s extradition bid first, but the process was suspended. In January 2024, Brazilian authorities brought a new charge — money laundering, alleging Cherkasov received funds from a Russian diplomatic employee — which effectively blocked any early release. As of the most recent reporting, he remains in a prison in Brasília.

Brazil’s Spy Factory

Cherkasov’s arrest turned out to be just the beginning. His case became the linchpin of a broader Brazilian counterintelligence effort known internally as Operation East. A New York Times investigation published in May 2025 revealed that Brazilian federal police ultimately identified at least nine Russian intelligence officers who had been living under fabricated Brazilian identities.

The reasons Russia chose Brazil are not hard to understand. The country’s multicultural population makes it easy for a European-looking foreigner to blend in. Brazilian passports grant visa-free access to some 165 countries. And crucially, the country’s decentralized civil registry system made it relatively simple to obtain authentic birth certificates with minimal verification. Investigators now suspect that Soviet-era KGB operatives may have planted fraudulent birth certificates in Brazilian registries as far back as the 1980s, creating identities that a future generation of spies could claim decades later.

Most of the other identified spies slipped out of Brazil before police could arrest them. Intelligence officials from multiple countries believe they are now back in Russia. But Brazil took the unusual step of issuing Interpol Blue Notices — sharing names, photographs, and fingerprints — effectively burning those agents for any future overseas operations. For a country that has traditionally maintained a neutral posture toward Moscow, it was a remarkable shift.

The story of the spy who loved to dance Forró reads like fiction. But it is a reminder that espionage in the 21st century still relies on the oldest trick in the book: becoming someone else, completely, for years on end. The question that lingers is how many others are still out there, living quiet lives under borrowed names, waiting for their moment.