How Russia is waging a silent sabotage campaign in Europe

Since 2022, Europe is facing a clear increase in sabotage operations linked to Russia, which can no longer be seen as isolated criminal incidents.

Data from the Center for Strategic and International Studies shows a tripling of cases of arson and serious sabotage in 2024 compared to the previous year.

This trend has prompted both the European Union and the United Kingdom to treat sabotage as a central threat in their security strategies by 2025.

What is happening is not just sporadic violence, but the emergence of a sustained pattern of hybrid warfare, designed to test the resilience of NATO states, increase the cost of supporting Ukraine, and erode public trust in Western institutions.

Unlike classic Cold War sabotage, current operations are characterized by low operational level but high strategic effect.

Arson attacks on shopping malls, logistics warehouses, railway lines, or symbolic objects do not only aim to cause physical damage.

The main goal is psychological and social impact: creating uncertainty, polarizing societies, and spreading narratives that Europe is no longer safe.

Particularly significant is the shift towards civilian targets and “soft” infrastructure, where the cost to the perpetrator is low, while the state response is often slow and fragmented.

One of the most worrying developments is the democratization of sabotage. Russia is using fewer and fewer trained operatives and more and more ordinary individuals – migrants, young people, economically vulnerable people – recruited through Telegram, social networks or online gaming platforms.

This model, similar to the gig economy, allows Moscow to build a vast network of “agents for a day” who are easily replaceable and politically deniable. Payments range from a few dozen euros for symbolic vandalism to thousands of euros for arson or attacks on logistics chains.

Funding is the glue that holds this ecosystem together. Cryptocurrencies, particularly Bitcoin and USDT, have become the mainstay of sabotage payments, not because of technical sophistication, but because of their speed, lack of KYC checks, and ease of conversion to cash.

Ironically, investigations show that many of these payments are simple and traceable, but authorities often only intervene after arrests, when the financial chain has already lost its operational value. The weakest points are not blockchains, but informal OTC counters and cash networks, which operate almost unsupervised in many European and Western cities.

Sabotage and the attribution game

One of the main successes of this strategy is confusion about attribution. By using non-Russian intermediaries and executors – often Ukrainians – Moscow achieves two goals simultaneously:
First, it avoids direct political responsibility; second, it fuels social tensions and anti-Ukrainian sentiment in host countries.

This mechanism makes it difficult to use strong legal and financial instruments, as many cases are treated simply as ordinary crimes and not as part of a strategic state-sponsored campaign.

The analysis shows that the problem lies not only in the lack of tools, but also in their fragmented use. There is no common legal definition of sabotage in the EU, cross-border cooperation is often slow, and information sharing between the public and private sectors remains limited.

Meanwhile, digital platforms like Telegram continue to play a key role in recruitment and coordination, with minimal legal accountability and weak regulatory oversight.

Russian sabotage in Europe is neither accidental nor temporary. It is part of a long-term strategy to undermine Western cohesion with cheap, dispersed, and difficult-to-attribute means. If it is treated only as a criminal matter, rather than a strategic threat, its effect will continue to multiply.

An effective response requires a paradigm shift: treating sabotage as hybrid warfare, more aggressive use of financial intelligence, and real accountability for platforms that facilitate recruitment and payments.

Otherwise, Europe risks facing a normalization of low-level violence that, in the long term, could have high-level strategic consequences.

The Geo Post