The Hague · Kyiv · Brussels · May 2026 | ForensicTimes.com | War Crimes · International Law · Forensic Science
Table of Contents
- The Scale of the Evidence Record
- Bucha: The Crime Scene That Changed the Accountability Calculus
- Satellite Forensics: Eyes in the Sky as Legal Evidence
- Digital and Open-Source Intelligence: The New Forensic Frontier
- The Children: Deportation as a Documented War Crime
- The ICC Arrest Warrants: What They Charge and What They Cannot Do
- The Special Tribunal: Filling the Jurisdiction Gap on Aggression
- Law and Legal Implications: The Architecture of Accountability
- The Enforcement Problem: Warrants Without Handcuffs
- Investigation: What Remains Unknown and Unresolved
- The Difference Between Evidence and Justice
The Scale of the Evidence Record
Ukraine’s Office of the Prosecutor General has registered more than 150,000 suspected war crimes incidents since Russia’s full-scale invasion began on February 24, 2022. That number — updated continuously by a team of several thousand prosecutors, investigators, and forensic specialists — encompasses alleged attacks on civilians, execution of prisoners of war, torture, sexual violence, deportation, the targeting of protected sites, and the systematic destruction of civilian infrastructure. It is the largest active war crimes evidence database in human history.
The number is not a political figure. It is a case-management record: each entry represents a documented incident with associated evidence, a case number, an assigned investigator, and an ongoing legal status. As of April 2025, 95 cases related to Russian crimes in Ukraine had been prosecuted across 16 jurisdictions, including Europe, Canada, the United States, and Argentina. The domestic prosecutions in Ukraine — conducted under Ukrainian criminal law with international support — represent the largest volume. The international proceedings, led by the International Criminal Court, represent the highest-profile and the most legally consequential.
The institutional architecture supporting that evidence record is equally unprecedented. Over 55,000 pieces of multimedia evidence have been collected via mobile applications, with social media platforms used for open-source intelligence gathering; organisations such as the Center for Civil Liberties, Truth Hounds, and Bellingcat contribute to verification and archiving; and international bodies such as the ICC and Eurojust have formalised guidelines to integrate civil society evidence into judicial processes. The result is a hybrid evidence ecosystem — part state prosecution, part civil society documentation, part international judicial investigation — that is structurally novel in the history of war crimes accountability.
Bucha: The Crime Scene That Changed the Accountability Calculus
Of all the documented sites of alleged war crimes in Ukraine, Bucha — a suburb of Kyiv from which Russian forces withdrew on March 31, 2022, after approximately five weeks of occupation — has generated the most forensically comprehensive and internationally scrutinised record. What investigators found there upon Ukraine’s reentry established a baseline for the evidence that would follow across hundreds of subsequently documented sites.
Hundreds of civilian bodies were found in the streets, in basements, and in mass graves. Forensic experts confirmed evidence of torture, with burn marks, broken bones, and missing teeth. Survivors described summary executions and the use of civilians as human shields. Satellite imagery and intercepted communications confirmed bodies had been lying in the streets while Russian forces were still present. Investigations by the UN and Human Rights Watch confirmed deliberate targeting of civilians, constituting war crimes under international law.
The forensic detail emerging from Bucha’s autopsy record is specific and legally significant. Forensic experts revealed that dozens of Bucha residents were killed by tiny metal arrows from shells — flechettes — a munition type whose use in civilian areas is prohibited under international humanitarian law. The UN mission report found that in 100 civilians’ killings it examined in detail out of confirmed killings of 441 civilians during the Russian invasion in the Kyiv, Chernihiv and Sumy regions from February 24 until April 6, 2022, 57 victims were summarily executed — 30 of them killed in places of their detention by Russian forces, and 27 killed on the spot after coming under Russian forces’ control.
Russia’s response to the Bucha evidence — that the images were staged, that the bodies had been placed after Russian withdrawal, that the entire record was fabricated — was immediately contradicted by independent satellite documentation that predated the withdrawal. Images of dead bodies in Bucha’s streets were captured by satellite as early as March 11 — twenty days before Russia’s withdrawal on March 31. These bodies were later found in the same locations and positions by investigators. Satellite images of Russia’s military vehicles and personnel were also captured in Bucha during the time the atrocities were committed. The temporal evidence destroyed Russia’s fabrication narrative before it could establish itself.
Satellite Forensics: Eyes in the Sky as Legal Evidence
The use of commercial satellite imagery as forensic evidence in war crimes investigations represents one of the most significant methodological advances in international criminal law since the introduction of DNA analysis in domestic criminal proceedings. In the Ukraine context, it has fundamentally altered the evidentiary landscape by providing independent, time-stamped, third-party documentation of events at specific locations — documentation that is difficult to fabricate, impossible to retroactively alter, and generated by non-governmental commercial entities with no stake in either party’s narrative.
Maxar Technologies, Planet Labs, and BlackSky are the three commercial providers whose imagery has generated the most forensically significant Ukraine documentation. Planet’s imagery provided evidence of Russia’s attack on Ukraine’s Chuhuiv Air Base, spotted Russian trenches built near Chernobyl, and documented attacks on civilian buildings in the besieged city of Mariupol. Photos of dead bodies in the streets of Bucha taken by Maxar satellites were used to disprove Russian claims that civilians in the city were killed after Russian troops had already left the area.
The specific forensic value of satellite imagery in war crimes investigations is its ability to establish temporal sequences. When a satellite image dated March 11 shows bodies in specific locations in Bucha, and those bodies are found in the same locations on April 1 by investigators, the imagery establishes that the deaths occurred while Russian forces were present — not after their departure. That temporal chain is legally equivalent to eyewitness testimony establishing presence, but is harder to challenge than testimony because it does not depend on the reliability of human memory and does not require the witness to be physically present.
Satellite imagery has also been used to document the construction and use of mass graves — including a 45-foot trench dug near a gold-domed church in Bucha where a mass grave was subsequently uncovered — and to track the movement of Russian military units, providing the unit-identification evidence that investigators need to establish command responsibility. Identifying which specific military unit was in which location at which time is a precondition for attributing documented atrocities to identifiable command structures and, ultimately, to named individuals who ordered or failed to prevent those atrocities.
Digital and Open-Source Intelligence: The New Forensic Frontier
Alongside satellite imagery, the Ukraine war crimes investigation has deployed digital and open-source intelligence tools at a scale and sophistication that represents the definitive arrival of OSINT as a mainstream forensic methodology in international criminal law. Bellingcat — the investigative journalism collective that pioneered the use of open-source satellite and social media analysis in conflict documentation — has been among the most active contributors to the Ukraine evidence record since 2014.
The specific OSINT techniques applicable to war crimes documentation include geolocation of photographs and videos using identifiable landmarks, building structures, and terrain features; chronolocation of footage using shadows, seasonal vegetation, and astronomical data; equipment identification from military hardware visible in photographs and videos; and social media archaeology — the retrieval of content posted by military personnel that documents their own activities and locations.
In the Ukraine context, Russian military personnel repeatedly photographed and posted their own activities on social media platforms including VKontakte — the Russian Facebook equivalent. Those posts, archived by Ukrainian investigators and civil society organisations before they could be deleted, provide direct evidence of unit presence, individual identity, and, in some cases, direct documentation of the commission of crimes. A Russian soldier who posts a photograph of himself in a Bucha street, with a body visible in the background, and whose unit affiliation is established through other means, has created evidence against himself and against his chain of command.
A key challenge in digital evidence collection is the graphic nature of content that can be quickly taken down by social media platforms whose policies it violates. The Ukrainian Prosecutor General’s office has developed specific protocols in collaboration with technology companies and international legal institutions to archive and preserve digital evidence before it is removed, and to establish chain-of-custody documentation for that evidence in a form that courts will accept.
The Children: Deportation as a Documented War Crime
Among the most extensively documented categories of alleged war crimes in Ukraine — and the category that produced the first ICC arrest warrants — is the deportation and forcible transfer of Ukrainian children to Russia or Russian-occupied territories. The scale of the documented transfer, the evidence of official Russian government involvement at the highest levels, and the specific legal framework that makes such transfers a war crime regardless of the stated rationale have made this the clearest available pathway to accountability for named senior Russian officials.
Ukraine’s government has identified approximately 19,553 children as deported or forcibly transferred, though the actual number is believed to be substantially higher. In June 2025, during the Istanbul talks, Ukraine handed over a list of 339 children — a partial list of the nearly 20,000 total that they said they verified had been abducted by Russia. As of June 2025, 1,345 Ukrainian children had been repatriated, a figure that reflects both the scale of the problem and the limited pace of its resolution.
The forensic and documentary record for the child deportations is unusually strong because it involves extensive official Russian documentation. Russian authorities publicly announced, recorded, and celebrated the transfers of Ukrainian children to Russian families and institutions. A February 2023 recording of a meeting between Putin and Children’s Rights Commissioner Maria Lvova-Belova — in which the two discussed the “evacuations” of Ukrainian children to Russia, with Lvova-Belova expressing gratitude to Putin for enabling the transfers — was publicly available. In August 2025, Russian occupation authorities in Ukraine created an internet-based catalogue where Russians can choose Ukrainian children based on photos and descriptions including “obedient” or “calm,” with filtering options for age, eye colour, and hair colour. That catalogue was itself documented and archived by Ukrainian and international investigators as evidence of systematic intent.
On March 9, 2026, the Independent International Commission of Inquiry on Ukraine submitted its latest report to the UN Human Rights Council, concluding that Russian authorities committed crimes against humanity and war crimes through the deportation and forcible transfer of Ukrainian children to Russia or Russian-occupied areas. The March 2026 report represents the most recent formal UN finding on this specific category of crime and will form part of the evidentiary record in any future ICC proceedings.
The ICC Arrest Warrants: What They Charge and What They Cannot Do
The International Criminal Court has issued six arrest warrants in connection with the situation in Ukraine. Each warrant is a formal legal finding that there are “reasonable grounds to believe” the named individual is criminally responsible for specific conduct. They are not convictions. They are not indictments in the American sense. They are the beginning of a prosecution process that can only be completed if the named individual is arrested and surrendered to the Court.
On March 17, 2023, ICC Pre-Trial Chamber II issued warrants for Vladimir Putin, President of the Russian Federation, and Maria Alekseyevna Lvova-Belova, Commissioner for Children’s Rights, for the war crimes of unlawful deportation and unlawful transfer of children from occupied areas of Ukraine to the Russian Federation — alleged to have been committed from at least February 24, 2022. It was the first time the Court had issued an arrest warrant against a sitting head of state who was a permanent member of the UN Security Council.
On June 24, 2024, Pre-Trial Chamber II issued two further warrants: for Sergei Shoigu, then Defence Minister, and Valery Gerasimov, Chief of the General Staff, for alleged international crimes committed from at least October 10, 2022, until at least March 9, 2023 — the period covering the systematic missile campaign against Ukrainian civilian infrastructure, including power stations, water systems, and heating facilities during the winter of 2022–2023. The warrants for Shoigu and Gerasimov charge conduct that the UN Commission of Inquiry has characterised as attacks designed to drive civilians from front-line areas — a category of conduct that the Commission concluded constitutes crimes against humanity.
Ukraine deposited its instrument of ratification of the Rome Statute on October 25, 2024, which officially entered into force on January 1, 2025 — a symbolic and practical reinforcement of the ICC’s jurisdictional basis in Ukraine. The ICC has established a permanent Country Office in Ukraine and deployed investigative teams to collect and preserve evidence. Prosecutor Khan has visited Ukraine multiple times and has described the evidence collection operation as one of the most intensive in the Court’s history.
The Special Tribunal: Filling the Jurisdiction Gap on Aggression
The most significant legal gap in the international accountability framework for Ukraine is the crime of aggression — the act of initiating an illegal war against another sovereign state. Under the Rome Statute, the ICC can prosecute aggression only against nationals of states that are parties to the statute or when the case is referred by the UN Security Council. Russia is not a Rome Statute party, and Russia has a veto on Security Council referrals. This means the ICC cannot prosecute the senior Russian leadership for the decision to invade Ukraine — the foundational crime from which all subsequent crimes flow — regardless of how comprehensive the evidence is.
To close this gap, in 2025 Ukraine and the Council of Europe launched a Special Tribunal for the Crime of Aggression against Ukraine. The tribunal is modelled on the precedent of the Nuremberg Tribunal, which established individual criminal responsibility for the instigation of aggressive war as the “supreme international crime.” Its jurisdiction is specific: it will focus exclusively on the crime of aggression — the decision by senior Russian political and military leadership to initiate and sustain the war — rather than on the individual crimes of war and crimes against humanity that fall within the ICC’s mandate.
On March 24, 2026, the European Commission proposed a Council decision on the signing of the Enlarged Partial Agreement establishing the Special Tribunal’s Management Committee, initiating the process for the EU to become a founding member. The institutional framework is still being assembled. The tribunal does not yet have a permanent seat, a full roster of judges, or a complete evidence dossier. What it has is a legal theory, an institutional framework, international political support, and a growing body of evidence from the ICC’s Ukraine investigations and the Ukrainian Prosecutor General’s database that will eventually underpin its proceedings.
Legal scholars have noted that the Special Tribunal risks fragmenting the international criminal law landscape, with competing tribunals introducing inconsistent legal standards and generating competing narratives of legitimacy. Those concerns are real and will need to be managed as the tribunal’s institutional design is finalised. They do not diminish the fundamental legal necessity of the tribunal’s existence: without it, the decision to wage aggressive war against Ukraine — the supreme crime from which 150,000 documented incidents of criminal conduct flow — will be entirely outside any criminal justice framework.
Law and Legal Implications: The Architecture of Accountability
The legal architecture being assembled for Ukraine accountability is multi-layered, multi-jurisdictional, and historically unprecedented in its scope. Its components operate at four distinct levels, each with different jurisdictional bases, different evidentiary standards, and different realistic prospects for producing convictions against named individuals.
At the domestic level, Ukraine’s own courts and prosecutors are conducting the largest volume of proceedings. Trials of captured Russian personnel are ongoing in Ukrainian courts under Ukrainian criminal law, with convictions producing sentences that are largely symbolic in the short term — Russia does not extradite its nationals — but build the legal record that will be relevant to future proceedings. The Atrocity Crimes Advisory Group, established with US support, has embedded international legal experts in the Ukrainian Prosecutor General’s office to assist with documentation and prosecution strategy.
At the bilateral and multilateral level, as of April 2025, 95 cases had been prosecuted across 16 jurisdictions including Europe, Canada, the United States, and Argentina — a dispersed network of national prosecutions using universal jurisdiction principles. Universal jurisdiction allows states to prosecute war crimes regardless of where they were committed or the nationality of the perpetrator, based on the principle that certain crimes are offences against all humanity.
At the international institutional level, the ICC is building its prosecution dossiers against the six named individuals and potentially others whose warrants have not yet been publicly issued. The ICPA — the International Centre for the Prosecution of the Crime of Aggression, housed at Eurojust — is securing and organising the evidence base that will underpin the Special Tribunal’s eventual proceedings. On December 16, 2025, the EU signed the Council of Europe Convention establishing an International Claims Commission for Ukraine, with a view to enabling compensation for civilian victims — a parallel civil accountability track that operates independently of criminal proceedings.
The fourth level is the evidentiary archive: the preservation of evidence for proceedings that may occur years or decades in the future. The lesson of Nuremberg, the ICTY, the ICTR, and the Special Court for Sierra Leone is that war crimes accountability often operates on a timeline measured in decades. Evidence preserved today may underpin prosecutions of individuals not yet identified or not yet in custody. Ukraine’s digital evidence preservation protocols — and the ICC’s deployment of investigative teams to document sites before evidence degrades — are investments in accountability processes whose full completion may be generational.
The Enforcement Problem: Warrants Without Handcuffs
The ICC’s six Ukraine arrest warrants represent the most significant formal legal action taken against a sitting head of state by an international tribunal in the Court’s history. They also, as of May 2026, represent a study in the gap between legal authority and practical enforcement that defines the ICC’s fundamental institutional limitation.
In September 2024, Putin traveled to Mongolia — a member of the Rome Statute. Under Article 59, Mongolia was obligated to arrest and surrender him to the ICC. The Mongolian authorities did not act on the warrant. Hungary has offered to convene peace talks that would include Putin in Budapest. Hungary had announced its repudiation of the Rome Statute in April 2025 — effective April 2026 — providing itself with institutional cover for its diplomatic overtures. The pattern of states that are formally bound by the Rome Statute declining to enforce the warrants is not an anomaly. It is a structural feature of the international system.
The ICC has no enforcement arm. It cannot arrest anyone. It relies entirely on the cooperation of states to arrest individuals, execute warrants, and implement its decisions. When the political cost of enforcement — alienating Russia, jeopardising trade relationships, risking retaliatory measures — exceeds the political benefit of compliance with international legal obligations, states choose non-compliance. That calculation has been made consistently by non-Western states, and it reflects a geopolitical reality that the ICC’s founding architecture did not adequately anticipate.
There is, however, a documented partial effect. In 2023, Russia ceased the mass transfer of Ukrainian children into foster care, at least publicly. The Russian Children’s Rights Commissioner has increasingly reported facilitating the return of Ukrainian children home — 1,345 had been repatriated as of June 1, 2025. Whether this reflects a genuine response to the ICC warrants, a strategic effort to appear cooperative while continuing transfers through less visible channels, or some combination of both, is contested. What is documented is that Russia’s behaviour on the specific conduct charged in the warrants changed after the warrants were issued — a result that the ICC’s architecture produced without a single arrest.
Investigation: What Remains Unknown and Unresolved
The full scope of war crimes committed in areas that remain under Russian control — including the Donbas, Zaporizhzhia, Kherson, and Crimea — has not been independently documented. Access to those areas for investigators is obstructed by Russian control, and evidence collection depends on testimony from people who have left, satellite imagery, and whatever documentation Russian personnel have generated themselves. The documented record is necessarily incomplete for anything occurring in areas Ukrainian investigators cannot physically access.
The specific individuals responsible for individual documented incidents — the unit commanders, the soldiers, the intelligence officers — have been identified in some cases but not in most. The institutional evidence (which unit was where, which commanders were responsible) is being assembled, but command responsibility cases require establishing the link between documented crimes and named individuals in the chain of command above the perpetrators. That link is the most legally demanding element of any war crimes prosecution and the one least susceptible to satellite imagery or OSINT documentation alone.
The number of ICC arrest warrants that have been issued under seal — their existence confirmed by the Court but their subjects and charges not yet publicly disclosed — is not known. The Court routinely seals warrants to protect ongoing investigations. There may be additional named individuals beyond the six publicly identified. Whether those sealed warrants include lower-ranking military officers whose capture in the course of the war would make prosecution feasible has not been disclosed.
The fate of the approximately 18,200 Ukrainian children who have been identified as deported or transferred but not yet returned remains entirely unresolved. Russia has established an adoption infrastructure for some of those children. Children who have been adopted by Russian families, given Russian citizenship, and raised in Russian culture for three or four years are being systematically separated from their Ukrainian identity in ways that cannot be fully reversed by repatriation alone. The legal accountability for that process — for the senior officials who designed and implemented it — is the subject of the ICC warrants. The practical human accountability — the return of every child — is a separate and ongoing emergency.
The Difference Between Evidence and Justice
The forensic record assembled in Ukraine since February 2022 is the most comprehensive documentation of alleged war crimes produced in real time in the history of international criminal law. The satellite images are authenticated and archived. The autopsy findings are documented. The digital evidence — the social media posts, the intercepted communications, the open-source geolocation — is preserved and verified. The institutional database contains more than 150,000 entries. The ICC has issued six arrest warrants supported by evidence reviewed by independent judicial chambers that found reasonable grounds for each charge.
None of that has produced a single trial. None of the six named individuals is in custody. The children have not come home. The infrastructure that was destroyed has been partially rebuilt and partially destroyed again. The war continues.
This is not a statement about the inadequacy of the forensic and legal work that has been done. That work is extensive, rigorous, and historically significant. It is a statement about the structural gap between evidence and enforcement in international criminal law — a gap that the Ukraine accountability architecture is attempting to close through institutional innovation (the Special Tribunal), diplomatic pressure (the ICC warrants’ chilling effect on Russian diplomacy), civil society documentation (55,000 pieces of multimedia evidence and counting), and the patient construction of a legal record that may produce accountability on a timeline measured not in months but in decades.
The Nuremberg prosecutors took four years after the end of the Second World War to complete their trials. The ICTY operated for twenty-four years. Ratko Mladic was convicted thirty years after Srebrenica. International criminal justice is slow. What makes it credible is that it is thorough — that the evidence assembled today survives, that the legal frameworks constructed now remain intact, and that the people responsible for what happened in Bucha, in Mariupol, in the cities whose children were taken, eventually find themselves in a courtroom.
The evidence is there. The court is being built. The warrant has been issued. The rest is a question of time and political will — neither of which is reliably available, but both of which history suggests eventually move, however slowly, in the direction of the documented record.
ForensicTimes · forensictimes.com · Investigative Journalism on Crime, Justice & Forensic Science · © 2026 ForensicTimes. All rights reserved.
