Baltic Sea Security: Shadow Fleet, Seabed Cables, GPS Spoofing and Interdiction Rules

A running ledger of who is patrolling, boarding, jamming and threatening in the Baltic Sea, updated as events land.

Why this page exists

The Baltic is the theatre where three separate Russian pressure campaigns overlap on one stretch of water: a shadow fleet of sanctions-evading tankers running through the Gulf of Finland, a seabed-infrastructure threat that has produced repeated cable and pipeline incidents since December 2024, and an electronic-warfare footprint radiating out of Kaliningrad that now degrades civil GPS across seven states. Each strand generates its own stream of incidents, sanctions listings and NATO responses, and none of the three has a fixed end date.

Held together with dates attached, the three strands show how the prevailing reading shifts with each interdiction, each new spoofing measurement and each sanctions round — and they keep in view the single most consequential development, Estonia's own navy stepping back from interdiction over escalation risk, which is easy to lose against the volume of French and British boardings elsewhere.

State of play

The shadow fleet: interdiction has moved west, not stopped

Russia's tanker fleet — reflagged, often uninsured by Western markets, numbering past 670 EU-sanctioned hulls as of the 21st sanctions package on 23 July 2026 — still loads at Primorsk, Ust-Luga and Novorossiysk and still transits the Baltic approaches. But the states doing the stopping have changed. Estonian Navy commander Ivo Vark told Reuters on 10 April that Tallinn would no longer board vessels in its own exclusive economic zone, citing two to three permanent Russian armed patrols in the Gulf of Finland and a May 2025 incident in which Moscow scrambled a fighter jet to escort an intercepted tanker into Russian waters. Roughly 30 to 40 tankers now idle at Estonia's Vaindloo anchorage, a queue that tripled after Ukrainian strikes on Ust-Luga and Primorsk.

The active interdiction campaign since has run through France and Britain, mostly outside the Baltic proper. France boarded the tanker Tagor off Brittany on 31 May — its fourth boarding since the Boracay in September 2025 — using the vessel's repeated flag-hopping between Madagascar, the Marshall Islands and Panama as the legal hook; a fifth, the Deliver off Sicily, followed on 25 June — France's fourth of 2026 and the ninth shadow-fleet boarding by a European navy that year. Britain's one shadow-fleet boarding to date came on 14 June, taking the Cameroon-flagged Smyrtos in the English Channel with Royal Marines, the National Crime Agency, a Type 23 frigate and an RAF P-8. Sweden's contribution has been judicial rather than naval: a district court ruled in June, and the Supreme Court confirmed in August, that the tanker Caffa — seized off southern Sweden on suspicion of a false flag — can be handed to Ukraine to face a war-crimes case over grain cargo appropriated from occupied territory.

Seabed infrastructure: from the Eagle S to a standing NATO mission

The sequence begins on 25 December 2024, when the Cook Islands-flagged tanker Eagle S dragged its anchor across the Estlink 2 power cable between Finland and Estonia, cutting its capacity from 1,016 MW to 358 MW in an incident Finnish investigators classified as aggravated sabotage. NATO's response — a declaration of solidarity on 30 December and the launch of Baltic Sentry at a Helsinki summit on 14 January 2025 — set the template the two later enhanced vigilance activities (Eastern Sentry, Arctic Sentry) have since copied: no fixed end date, a dedicated command chain through Joint Force Command Brunssum and Allied Maritime Command, and a new NATO Maritime Centre for Security of Critical Undersea Infrastructure as the knowledge hub.

Baltic Sentry's operational logic has since generated its own procurement line — Task Force X-Baltic, an autonomous-surveillance initiative eight Baltic allies moved from experiment toward national ownership in early 2026 — evidence that a vigilance activity launched to patrol a sea now drives acquisition, not only patrol schedules. No further cable-severing incident with an identified vessel has been confirmed since the Eagle S; the open question is whether the seabed-protection architecture built around one incident holds against a second.

Kaliningrad: jamming as baseline, not incident

Lithuania's communications regulator RRT confirmed on 26 May that Russian GPS-spoofing antennae in Kaliningrad had grown from three in early 2025 to 36 — a twelvefold expansion in fifteen months, derived from analysis of ADS-B aviation-surveillance signals rather than military intelligence. The resulting broadcast radius, about 450 kilometres, now covers Estonia, Latvia, Lithuania, Poland, Finland, Sweden, Belarus and the Baltic Sea itself. Civilian effects include degraded mobile-network quality, failed GPS-dependent bus schedules in Klaipėda, and diverted aircraft, including the Spanish defence minister's plane in 2025; the Lithuanian parliament sheltered under an air-danger warning on 20 May 2026; no earlier such activation is recorded. Interference spikes correlate with Ukrainian deep strikes on Russian territory, which points to operational rather than purely political tasking.

The structural point is that a civilian GNSS-dependent layer — aviation, telecoms, transport — across the eastern Baltic now operates under regular interference as its baseline condition, not as a series of discrete incidents. That reality is what the German-Netherlands Corps assignment to Latvia and Estonia, announced the same week as the RRT figures, is reinforcing on the ground.

NATO's standing posture: Sentry, air policing, and new Baltic hardware

Baltic Sentry is one of three open-ended vigilance activities NATO has stood up since January 2025 — the others answer Poland's drone incursions and the Greenland rupture with Washington — and together they mark a shift from the fixed-date exercise to the permanent deployment as NATO's working instrument of deterrence. On the air side, the Ankara summit on 7-8 July 2026 converted Baltic Air Policing, flown since 2004, into an air defence mission: engagement authority now sits with the Supreme Allied Commander Europe and is delegated through the Combined Air Operations Centre at Uedem down to the cockpit, which Estonian defence minister Hanno Pevkur summarised as removing the restrictions that once kept a pilot from pressing the button. The mission had already opened fire twice before the summit, on 19 May and 8 June, both by NATO command decision rather than national political sign-off.

Regional navies are re-arming for the same theatre. Poland signed a SEK 47 billion (roughly $4.8 billion) contract with Saab for three A26 submarines on 29 June, explicitly optimised for shallow Baltic waters and packaged with a bilateral Baltic Sea Pact and a leased Swedish A17 boat as a stop-gap; Poland and Germany separately created a joint Baltic Sea command in their 17 June defence pact, though without any new bilateral mutual-defence guarantee beyond existing NATO and EU obligations. Outside NATO's own structures, ten Joint Expeditionary Force states — including Sweden, Finland, Estonia, Latvia, Lithuania, Denmark and Norway — signed a Statement of Intent in April for a Northern Navies Initiative targeting a hybrid-warfighting posture across maritime ISR, anti-submarine warfare and undersea-cable protection by 2029.

Escalation at the edges: warning shots, drone jamming, and a seizure threat

The most direct probe of allied hardware in the Baltic came on 25 February 2026, when a Swedish naval vessel jammed a suspected Russian reconnaissance drone in the Øresund Strait roughly 13 kilometres from the French carrier Charles de Gaulle, moored at Malmö on its first Swedish port call; the drone had apparently launched from the Russian signals-intelligence vessel Zhigulevsk, and Swedish defence minister Pål Jonson said it came "probably from Russia". A different pattern has run at the Baltic's western mouth: the Russian frigate Admiral Grigorovich, which had spent weeks escorting Russian tankers through the English Channel, fired warning shots to divert a British yacht off the Isle of Wight on 16 June, two days after the Royal Navy's Smyrtos boarding — London does not link the two events, but the same frigate was performing both roles.

The threat now hanging over the Baltic is rhetorical rather than physical. On 12 August, Putin — aboard the frigate Varyag — called European interdictions "piracy and theft" and said Russia would "respond symmetrically… wherever we deem it necessary and appropriate", naming as triggers France's June seizure of the tanker Deliver, Britain's Smyrtos boarding, and the EU's expanded Irini/Atalanta boarding mandates. Medvedev amplified the threat on Telegram, listing flag-of-convenience registries — Panama, Liberia, the Marshall Islands, Cyprus and others — as fair targets. As of 22 August, no European-flagged or European-operated vessel has been stopped, and satellite imagery shows sanctioned tankers such as the Caruzo and Rizvel sailing with defensive netting rather than any change in Russian naval posture toward interdiction.

Key numbers

The ledger

Newest first, one dated development per entry; where a Großwald piece covers it, the entry links to it.

The contrarian read

What to watch

The seizure test

Whether a European-flagged or European-operated merchant vessel is stopped, boarded or detained by Russian naval forces outside Russian territorial waters — the direct test of Putin's 12 August threat. Moscow's 17 August protest over the Toa Payoh boarding was diplomatic, not naval. As of 22 August, open.

A second cable or pipeline incident

Whether a second Baltic seabed-infrastructure incident with an identified vessel occurs, which would test whether Baltic Sentry's command architecture, built around the single Eagle S precedent, generalises to a repeat event.

Estonia's interdiction threshold

Whether Estonia (or another Baltic littoral state) resumes active boarding, which would require either a reduced Russian naval presence in the Gulf of Finland or a policy decision to accept the escalation risk Vark named in April.

A maritime equivalent of the Uedem chain

Whether NATO or the EU stands up a pooled mandate or delegated-engagement chain for state-navy maritime confrontation — neither Operation Irini nor Atalanta is mandated for it today.

Baltic Air Policing's next engagement

Whether SACEUR's delegated authority at Uedem produces a third engagement decision in Baltic airspace, following those of 19 May and 8 June, which would confirm the Ankara mandate change is operative rather than declaratory.

Detention to confiscation

Whether any EU state converts a detained shadow-fleet hull into a confiscation under the 21st package's new cargo power — the Eventin off Rügen, held nineteen months without confiscation, is the test case.

Related Großwald positions

• Russian drone and missile incursions into NATO territory — the running record
• European air and missile defence — who is buying what
• SAFE — the €150 billion EU defence loan, country by country
• Germany's defence procurement — budget, 25-million approvals, BAAINBw reform
• European ammunition and energetics capacity
• German frigate programmes — F123, F126 to MEKO A-200, F127
• European deep strike — ELSA, Tomahawk/Typhon, PrSM, ATACMS
• NATO exercises 2026 — the complete guide