Russia is increasingly deploying drones from its so-called "shadow fleet" of tanker vessels to conduct intelligence and potentially disruptive operations over critical infrastructure in the UK and Europe, according to intelligence assessments. These shadow fleet tankers, many of which are ageing and fly under flags of convenience, continue to transport Russian fossil fuel exports despite international sanctions, generating significant revenue for Moscow.
Security experts have observed that these vessels are now being equipped with specialist personnel—recruited from Russia’s armed forces and intelligence services—to carry out surveillance and protect the ships, which often have multinational crews. The presence of such personnel suggests a deliberate effort to expand the shadow fleet’s role beyond commercial shipping to incorporate hybrid warfare functions.
In recent years, monitoring groups have recorded a significant rise in drone activity linked to these tankers. One analysis found 56 drone-related incidents consistent with shadow fleet operations in European waters over the past 18 months, compared to 31 across the three years prior. These flights have targeted critical energy infrastructure and data cables across countries including Germany, Ireland, Spain, Norway, and the Baltic Sea region. Notably, there have been multiple suspected sabotage events involving undersea cables, which are vital to internet and communications connectivity.
Western officials are concerned that Russia is leveraging its shadow fleet to compensate for limitations in its conventional naval capabilities in the Baltic and North Seas. Moscow is believed to be preparing contingency plans that could involve using these vessels as platforms for intelligence gathering, sabotage, or even direct attacks on civilian shipping in the event of escalation with NATO.
European efforts to counter these threats have intensified. Several tankers suspected of illicit activity have been seized in the last year, including the British interception of a flagged vessel in the English Channel and the French detention of a similar tanker off Sicily. In one high-profile case, a Benin-flagged tanker named Boracay was seized near Brittany following investigations into suspected drone operations affecting Denmark.
The presence of Russian naval intelligence ships such as the Yantar in key maritime regions has also raised alarms. The Yantar’s activities, including incidents involving laser illumination of Royal Air Force aircraft, prompted changes in UK rules of engagement. Intelligence sources emphasize a growing “close correlation” between drone flights and the movements of shadow fleet or commercial Russian vessels throughout northern Europe.
Officials from independent monitoring organizations warn that the risks linked to these operations—including potential damage to undersea infrastructure—are expected to increase over the next two years, reflecting Moscow’s broader strategy to exert pressure on Ukraine’s allies through unconventional means as the conflict continues. While the shadow fleet ostensibly functions as a commercial arm carrying oil exports, intelligence experts describe its evolving role as an integral component of Russia’s hybrid warfare approach in European waters.