According to a new Small Wars Journal analysis and recent military reports, how has Russia's shadow fleet of commercial tankers evolved beyond sanctions evasion into a covert paramilitary force in the Baltic Sea, what evidence supports this assessment, and how have NATO navies—pa

3. Active Russian Navy escorting and shielding shadow vessels

Since late 2025, the Russian Navy has shifted to operating "in a completely overt manner" in the Baltic, with its main task now being to escort shadow fleet tankers . In May 2025, a Russian fighter jet violated Estonian airspace to escort a shadow tanker away from an attempted Estonian interdiction . Kremlin spokesperson Dmitry Peskov publicly stated that Russia would defend its shadow fleet vessels using "all means available" .

4. Escalating hybrid incidents

The Small Wars Journal analysis documents that since fall 2024, actors affiliated with the Russian state have been responsible for a growing series of disruptive incidents — territorial violations, GPS jamming, and infrastructure probing — conducted by an increasingly militarized shadow fleet . The Lansing Institute notes that the shadow fleet vessels now operate as forward-deployed platforms for Russian intelligence collection and power projection .

Key Evidence Supporting This Assessment

NATO and Royal Navy Response

NATO — Operation Baltic Sentry
NATO launched Operation Baltic Sentry in January 2025, deploying frigates, maritime patrol aircraft, and naval drones to protect critical undersea infrastructure . However, the Small Wars Journal analysis assesses that Baltic Sentry is "a meaningful start but current enforcement and monitoring efforts are still inadequate, as the vast majority of shadow fleet vessels continue operating uncontested in the region" .

Royal Navy — Surge in Monitoring

• Royal Navy operational activations to track Russian vessels increased by 25% in July 2026 compared to the prior year .
• Four warships — offshore patrol vessels HMS Tyne, HMS Mersey, and HMS Severn, plus Wildcat and Merlin helicopters from 815 Naval Air Squadron — spent 21 days on continuous operations monitoring Russian activity in UK waters and the North Atlantic .
• Russian warships Neustrashimy and Admiral Grigorovich were observed escorting shadow fleet tankers through the Dover Strait and North Sea, directly monitored by Royal Navy assets .
• In February 2026, UK defence sources confirmed that "military options to capture a rogue [shadow fleet] ship had been identified" in interagency discussions, though no boarding operation has yet been executed .

Estonia's Dilemma
Estonia, a frontline NATO Baltic member, has decided against detaining Russian shadow fleet vessels in the Baltic, citing concerns that capturing oil tankers might provoke a direct military response from Moscow — a Reuters report described the risks as too high . This underscores the fine line NATO members are walking between enforcement and escalation.

Assessment

The evidence is converging and consistent across 2025–2026: Russia's shadow fleet has moved from economic circumvention to an overt paramilitary and hybrid-warfare instrument, with Russian Navy warships now physically escorting commercial tankers through NATO waters. NATO's Baltic Sentry and the Royal Navy's surge monitoring represent the primary Western responses, but analysts note that enforcement remains partial, and the risk of a direct naval confrontation — whether from a botched boarding, an accidental collision, or a deliberate escalatory move — is higher than at any point since the Cold War.