Wirecard (est. 1999) was a German provider of financial services, such as mobile phone payment processing and other electronic payment transaction systems. The company also issued physical and virtual credit and pre-paid cards. But on June 25, the company declared itself insolvent, after an audit revealed that nearly €2 billion ($2.3 billion) in cash deposits were missing from its accounts. Soon afterwards, the company’s share value lost over 70 percent of its value and its management team, including its chief executive officer, Markus Braun, stepped down.

On June 22, Braun was arrested, and a criminal investigation was launched following reports that the missing €2 billion probably never existed in the first place. Meanwhile, German police sought to arrest Marsalek, who had worked as Wirecard’s chief operating officer since 2010. Marsalek, 40, was also in charge of Winecard’s operations in Asia and specifically the Philippines, where the fictitious €2 billion was reportedly deposited.

On June 18, after getting fired from his job, Marsalek told colleagues that he was leaving immediately for Manilla, in order to track down the missing funds and clear his name. However, he never arrived there, as he seemed to disappear into thin air on the way. An investigative report by The Financial Times revealed that Marsalek never made use of his airline ticket to the Philippine capital, and that the immigration records that showed him entering the country and then flying from there to China had been forged. This was later confirmed by the Philippines government.

According to the investigative website Bellingcat, Marsalek never went to the Philippines, but instead fled to Belarus via Estonia. By the time he arrived in Minsk, the Austrian financier was reportedly “a person of interest” to at least three Western spy agencies, and is now believed to have links to Russian intelligence. Bellingcat said Marsalek has made over 60 trips to Russia since 2010, in some cases staying on Russian soil for just a few hours before flying back to Germany. He is also wanted by several European governments on charges of embezzlement and fraud.

On Sunday, German financial newspaper Handelsblatt said Marsalek had been located in Russia and was allegedly staying at a villa outside Moscow, under the protection of Russian military intelligence. The newspaper claimed that the Austrian financier was being protected by officers of the Main Directorate of the General Staff of the Russian Armed Forces, which is commonly known as GRU. According to Handelsblatt, the current tension in relations between Russia and Belarus made it “too risky” for the Kremlin to keep Marsalek in the Belarussian capital. The decision was therefore made to secretly transport him to Moscow.

The German newspaper said it found out about Marsalek’s whereabouts from sources including “financiers, judges and diplomats”. On Monday the Russian government said it had no information about Marsalek’s current whereabouts. It also denied that the Austrian financier has any ties to its intelligence services.