European security services have once again retreated to their favourite comfort blanket: the absence of hard evidence. Following a rash of anonymous bomb threats that forced commercial airliners to divert, grounded flights, and sent security teams scrambling across the continent, investigators have been careful to note that there is no conclusive link connecting the disruptions to Moscow, Tehran, or their stable of freelance proxies. Western chancelleries breathed an almost audible sigh of relief. Ambiguity is always cheaper than confrontation. But waiting for a notarised confession from the Kremlin before recognising a coordinated disruption campaign is not prudent statecraft; it is willful blindness.
Consider the operational balance sheet. Commercial aviation functions on precise schedules, wafer-thin margins, and unshakeable passenger confidence. Forcing a single wide-body jet to dump fuel, make an emergency diversion, and sit on a remote taxiway while bomb disposal experts search the cargo hold costs hundreds of thousands of euros. It cascades delays across hundreds of interconnected flight corridors, tying up air traffic controllers, municipal police forces, and military interceptors. To generate that scale of economic friction and administrative paralysis, an adversary needs neither a cruise missile nor an elite sabotage cell. A disposable phone, a routing proxy, or a fifty-euro bounty posted on an encrypted messaging board to a delinquent teenager achieves the same practical result.
To view these aviation hoaxes in isolation requires an extraordinary act of cognitive compartmentalisation. The continent is already enduring sustained, deliberate harassment across its critical infrastructure. Baltic airspace has been subjected to relentless, industrial-scale GPS jamming emanating from the Russian exclave of Kaliningrad, blindfolding commercial navigation systems and forcing regional carriers to suspend routes. Warehouses in Britain and Lithuania have burned under suspicious circumstances. Rail networks in Central Europe have faced attempted signalling interference. When intelligence chiefs speak plainly, they describe an escalating campaign of Russian hybrid warfare designed to probe Western resilience without triggering the tripwire of NATO’s collective defence. Yet the moment a disruption hits civil aviation, political leaders revert to legalistic paralysis, insisting that because the fingerprints are smudged, the crime must be considered a domestic mystery.
This reveals a fundamental vulnerability in the European mindset. Western governance is organised around binary absolutes: we are either at war, or we are at peace. Our adversaries operate under no such constraints. The entire doctrine of the modern hybrid theater—honed in St. Petersburg and adopted by revisionist regimes elsewhere—is engineered specifically to linger in the gray space below Article 5. It relies on cutouts, criminal subcontractors, and plausible deniability precisely because Western legal systems require evidence beyond a reasonable doubt before assigning state responsibility. By insisting on courtroom-standard proof for acts of asymmetric harassment, Europe effectively gifts its rivals total operational freedom.
Nobody is suggesting that airport authorities ignore bomb threats. The laws of aviation safety are written in blood; when a captain receives a warning, the aircraft must be brought down and searched. That procedural rigidity is precisely what makes the sector such an enticing target. Adversaries understand our rules better than we do, and they weaponise our duty of care against us. By forcing Western institutions to repeatedly mobilize counter-terror assets against phantoms, hostile actors achieve a steady psychological and financial return on zero investment. It is sabotage by bureaucratic exhaustion.
Managing this reality requires shedding the illusion that European airspace remains a neutral, peacetime sanctuary. Hardening critical infrastructure means treating cyber-enabled harassment as a core national security priority, not merely an inconvenient police blotter item. It requires intelligence agencies to aggressively hunt down the domestic networks, payment rails, and online brokers who facilitate these low-rent destabilisation contracts. It also requires the political courage to establish a lower threshold for strategic attribution. In deterrence, public consensus and political messaging matter far more than forensic perfection; if an adversary knows that ambiguity guarantees impunity, they will continue to escalate the nuisance until it becomes a catastrophe.
Europe’s adversaries are not attempting to win an argument in an international court. They are attempting to corrode the logistical sinews and public nerve of democracies supporting Ukraine. Pretending that the serial disruption of international transport hubs is merely the work of bored trolls or random bad actors is a luxury a continent at the edge of war cannot afford. When the cost of inflicting chaos is zero and the target refuses to name the instigator, the hoaxes will not stop. They will simply become routine.