Russia Weighs Drone Deception in Baltics

Lithuania’s defence minister Robertas Kaunas put a careful warning into the public domain on Wednesday. Military intelligence, he said, has information that Russia is considering a false-flag strike on Baltic critical infrastructure using captured Ukrainian-made drones (LRT, Kyiv Independent).

The warning was hedged, but not casual. Lithuania is “observing the planning moment”, Kaunas said. Russia has not decided to act, no date is known and there is no certain immediate threat (15min, BNS). Still, the point is a serious one for NATO, including Ireland’s EU partners on the alliance’s eastern edge: if a weapon can be made to look Ukrainian, can allies prove quickly enough who actually fired it?

How a Ukrainian-looking drone buys Moscow time

Imagine the first few hours after a drone hits a power substation in the Baltics. Emergency crews arrive. Debris is recovered. Some of it carries Ukrainian markings. The first reports say a “Ukrainian drone” has struck critical infrastructure.

At that stage, Moscow would not need the story to stand up for long. It would only need it to bend the argument. The political question would shift from “who launched this?” to “was Ukraine involved?”, and the time gained in that confusion would be the point.

Kaunas set out how such a move could work. Ukraine’s drone campaign inside Russian territory has left Moscow with Ukrainian drones and components, either intercepted in flight or recovered after crashes. Russia could use those parts to assemble a weapon that looks Ukrainian at the point of impact (LRT, AeroTime).

That is the mechanism. The purpose would be to blur origin, deny Russian involvement and drag NATO into an argument about attribution before allies can agree a response.

Recent incidents on NATO’s eastern flank show the size of the problem. Romanian F-16s scrambled twice against drones near the Danube Delta, detecting and responding before anyone could establish who had sent them (Adevărul, RBC Ukraine). Proper attribution needs radar tracks, debris analysis, allied intelligence sharing and reconstruction of the launch point, not just markings on wreckage (DW). Frontline states can scramble jets quickly. Proving origin takes longer.

The proof problem

Lithuania has already moved to protect the obvious targets: soldiers have been deployed around the Klaipėda LNG terminal, the LitPol Link electricity interconnector and the Kruonis pumped-storage plant (tv3.lt). Its foreign ministry has asked NATO and the EU to strengthen surveillance, counter-drone systems and the resilience of critical infrastructure across the eastern flank (Delfi).

The EU has a lever here, but only up to a point. The European Commission’s July 2026 guidance under the Critical Entities Resilience Directive, the EU law requiring member states to protect essential infrastructure, now covers drone attacks and hybrid threats (European Commission). That can push governments to harden targets. It cannot decide, in the first confused hours after an attack, who was responsible.

That matters because NATO and the EU are political machines as well as security structures. NATO’s Article 5, the collective defence clause invoked only once, after 9/11, requires agreement among allies (NATO). EU foreign-policy sanctions require unanimity, so any single country can block them (Council of the EU). Governments need enough proof before they point publicly at Russia. A false-flag strike would be designed to slow that proof until political cohesion starts to fray.

Finnish coverage reached back to a grim precedent: the “Mainila shots”, the 1939 Soviet border provocation that worked not because it was persuasive, but because it put a false account into circulation before the truth could catch up (Yle). The lesson is uncomfortable. In a crisis, the speed of attribution can matter as much as the eventual quality of evidence.

In the two Slovak outlets covering the Lithuanian warning, the doubt Moscow would want to create did not take hold. Both treated the intelligence as a Russian threat, not as a reason to question Ukraine (Aktuality.sk, Denník N). That consensus is intact for now. Whether it would survive the first hours after a strike, when debris looks Ukrainian and social platforms move faster than forensic teams, is the question Lithuania is putting to NATO.

NATO has troops, jets and infrastructure plans on the eastern flank. What Lithuania has identified is the exposed space between wreckage, proof and political agreement. No ally has yet set out a public protocol for closing it.