Baltic Spy Chiefs Warn Russia Could Test NATO Within Months
European intelligence chiefs say Russia is preparing for more decisive action in Europe, including a possible limited military push into NATO territory within months.
The assessments came from separate interviews held over the past week in different places. They were published by The Guardian on 20 September 2026 under the headline 'Baltic spy chiefs warn Moscow is preparing for more decisive action in Europe'. The Guardian
Michal Koudelka, head of the Czech Republic's BIS Security Information Service, put the timeline for a limited incursion scenario at "months, not years". He listed increased drone activity, a limited incursion, false-flag provocations (incidents staged to blame someone else) and a massive influence campaign as possible Russian actions.
Normunds Mežviets, director general of Latvia's VDD state security service, said "We don't see indications of an imminent attack" by Russia. He added there were signs Moscow was making preparations for more decisive action in Europe.
Poland's Prime Minister Donald Tusk told parliament that intelligence assessments suggested Russia might launch a drone or missile attack on NATO territory in the coming months to prove "article 5 is more theoretical than practical". Article 5 is NATO's rule that an attack on one member is treated as an attack on all. Tusk has previously warned that Moscow intends to send drones or missiles into NATO territory and then claim the incidents were "accidental". He described the planned actions as 'hybrid' drone and missile attacks, a blend of open military pressure and deniable tactics, against countries supporting Ukraine, and said Russia's aim was to "weaken NATO's integrity". NPR Reuters
French President Emmanuel Macron called Tusk's warnings "sound and well-documented". Macron summoned party leaders and 2027 presidential candidates to an emergency meeting in Paris on Friday to discuss intelligence of a growing threat from Russia, among other topics.
Jonatan Vseviov, secretary general of Estonia's foreign ministry, on Saturday decried "panic on social media" in recent days about a possible Russian attack.
These warnings follow earlier allied assessments. Two countries on NATO's eastern flank warned in June that Russia was preparing a possible 'provocation' in the Baltic states or Poland to test cohesion of the Western military. New U.S. intelligence reports say Russian President Vladimir Putin could try to launch a limited assault on a NATO ally in coming years to test NATO's resolve. The Wall Street Journal On 30 August 2026 a NATO official said Russia was stepping up hybrid acts in Europe but that the alliance saw no imminent threat of attack at that time. In December 2024 a Polish admiral said Russia was disrupting mobile communications and ship-tracking data across the Baltic Sea, endangering vessels and energy supplies to test NATO.
The broader context here is a shift from steady low-level pressure to testing unity on purpose. Eastern flank services have long tracked sabotage, GPS interference, airspace violations and influence operations used to check where responses begin, like testing a fence for weak spots. Koudelka and Mežviets describe a possible step-by-step escalation, from drone activity and false-flag provocations to a limited incursion that would force a joint decision under Article 5. Tusk spells out that logic when he talks of a deniable strike that questions credibility without inviting full-scale retaliation.
Looking at what this means for NATO planners, the near term turns on clues and signals. Intelligence sharing will need to separate feints from real warnings. Political leaders will need to agree in advance what counts as an armed attack, what requires consultation, and what can be absorbed without splitting unity. Vseviov's warning about panic shows the risk at home. Deterrence depends on public calm as much as on force levels, and Moscow's influence tools are built to exploit that gap.
