Russia's shadow fleet, used to circumvent Western sanctions, has become a new tool for testing Europe's security. According to a report published by the International Institute for Strategic Studies (IISS), these aging vessels are being used as platforms for drone operations aimed at gauging the air defense systems and response times of NATO allies.
Between August 2024 and February 2026, 144 suspicious drone flights were recorded near sensitive military bases and nuclear facilities in Germany, France, Belgium, the Netherlands, the United Kingdom, and Denmark. In November 2024, American air bases in the UK were targeted.
Former Commander of U.S. Army Europe, Lieutenant General Ben Hodges, said, "I have no doubt that the Russians are using shadow fleet vessels as platforms to bring different types of drones close to various European countries."
The report stated that the drones were spotted in the airspace of more than a dozen NATO countries and Ireland. These incidents led to the closure of major airports, disruption of military operations, and breaches of the perimeters of Europe's most critical defense facilities.
In Germany in 2025, more than 1,000 suspicious drone flights were detected over defense companies and military bases where Ukrainian soldiers were training.
In 2025, military bases in the Netherlands and Belgium, where the U.S. is believed to have deployed B61-12 nuclear bombs, as well as France's ballistic missile submarine base Île Longue, were also targeted by mysterious drones.
Elisabeth Braw of the Atlantic Council said, "Whoever is doing this is testing the response of authorities, how the public will react, whether they will panic, and whether they will blame their politicians." Braw added that the behavior of European countries in a real crisis is also being tested in this way.
Hodges said these activities are an espionage operation and also aim to create public anxiety to reduce governments' support for Ukraine.
Russian President Vladimir Putin, however, denied the accusations of sabotage and surveillance in Europe. Putin reacted by saying, "What is the purpose of all this? Name a single proven incident."
However, the IISS tracked the positions of vessels belonging to Russia's shadow fleet and linked them to recent high-profile drone incidents. According to the report, Russia may be using these ships to launch drones while maintaining deniability. The drones are often undetectable by radar systems.
On January 3, 2025, while the Russian shadow fleet vessel Arctica was sailing along the Danish coast, 20 drones flew over the Port of Koege and disappeared over the sea. On September 22, during drone sightings that led to the closure of Copenhagen Airport, several shadow fleet vessels, including Arctica and Boracay, were detected in the area.
Sweden became the only European country to directly blame Moscow after a drone launched from a Russian spy ship at sea flew near a French aircraft carrier.