Lead: Since 2025, German forces deployed in Lithuania have reported a pattern of non‑kinetic pressure — from airspace probes and surveillance drones to psychological and information operations — that stops short of open combat but raises security concerns. A German soldier recounted answering a call and hearing a recording of his own conversation hours earlier, an episode highlighted in Joshua Krebs’s book Inside Bundeswehr. NATO and German officials say these incidents, including a brief airspace incursion in October 2025, demonstrate persistent hybrid activity on NATO’s eastern flank. The events have prompted diplomatic démarches and stepped‑up surveillance, while legal and operational responses remain contested.
Key Takeaways
- German personnel in Lithuania have reported hybrid tactics — phone‑based harassment, drone surveillance and airspace probes — aimed at intimidation rather than conventional attack.
- In October 2025 two Russian fighter jets entered Lithuanian airspace for roughly 18 seconds before NATO interceptors escorted them back; Germany, Spain and the UK currently help police Baltic airspace.
- Drones have allegedly been used to observe sensitive assets, including the Arrow 3 air‑defence system and exercises involving Germany’s Battletank Brigade 45 in Lithuania.
- Inspector General Carsten Breuer called a recent reconnaissance flight in Belarusian airspace during Exercise Iron Wolf “proof of the very real threat to Lithuania.”
- Federal Defence Minister Boris Pistorius has highlighted that hybrid pressure is felt more acutely in the Baltic states, prompting German support such as a mobile air force command post (January–March).
- Hybrid operations often sit in a legal grey area: they rarely meet the threshold of an “armed attack” under Article 51 of the UN Charter, complicating the choice of response.
- Attribution problems persist — many acts lack conclusive evidence directly linking them to a single state actor, limiting clear countermeasures.
Background
The Baltic states sit in unusually close geographic proximity to Russian territory, including the Kaliningrad exclave bordering Lithuania, which heightens sensitivity to incursions and reconnaissance. Since Russia’s 2014 annexation of Crimea and the rise of Moscow’s layered tactics, NATO members in the region have reported a steady stream of probing activities designed to test reactions and raise political pressure without triggering conventional war. These activities blend military posture with intelligence operations, information campaigns and covert harassment — commonly termed “hybrid warfare.”
Germany contributes to NATO air policing and ground forces in the Baltics, and German ministers have repeatedly flagged hybrid risks in bilateral and alliance forums. Exercises such as Iron Wolf, which involve multinational contingents, routinely draw reconnaissance flights and electronic monitoring in nearby airspace. While kinetic escalation remains undesirable for all parties, these grey‑zone operations complicate deterrence and raise questions about legal thresholds for collective defence.
Main Event
Multiple accounts from German personnel stationed in Lithuania describe a cluster of incidents over the past year: intercepted reconnaissance aircraft, drone overflights near sensitive sites, and targeted psychological techniques. One widely recounted episode, described by Joshua Krebs in Inside Bundeswehr, involved a soldier receiving a call that played back a private conversation recorded hours earlier — a tactic Krebs described as “uncanny” and intended to unsettle troops. Such incidents have prompted intensified electronic and physical surveillance measures.
In October 2025 two Russian fighter jets briefly crossed into Lithuanian airspace for about 18 seconds before NATO aircraft escorted them away; German Chancellor Friedrich Merz publicly called the incident a provocation. NATO states monitor Baltic skies continuously because Estonia, Latvia and Lithuania do not operate their own fighter jets. Germany, Spain and the UK rotate air policing duties, and Germany temporarily deployed a mobile air force command post to bolster regional surveillance from January to March.
Separately, drones have been reported near exercises involving Germany’s Battletank Brigade 45 and around advanced air‑defence systems such as Arrow 3, raising concerns that reconnaissance could identify vulnerabilities or collect technical data. Officials stress these operations so far appear intended to signal presence and test reactions rather than to destroy or seize territory.
Analysis & Implications
These hybrid pressures serve several strategic ends: they gather intelligence, impose psychological costs, and force the Baltic states and NATO to allocate resources to monitoring and mitigation. For Russia, low‑cost, deniable actions can shape narratives and constrain allied freedom of manoeuvre without triggering Article 51’s self‑defence threshold. For NATO, the pattern erodes predictability and raises the operational tempo for air policing, electronic defence, and force protection.
Politically, hybrid activity amplifies anxieties in frontline states and strengthens calls for allied reassurances and capabilities tailored to grey‑zone threats. Germany’s increased presence and ministerial statements reflect both a willingness to support Baltic security and an acknowledgment that traditional deterrence tools are less effective against ambiguous, non‑attributable actions. The result is a demand for improved attribution, legal frameworks and tailored responses that avoid unwanted escalation.
Economically and technologically, persistent surveillance and electronic fiddling prompt investment in hardened communications, cyber‑defence, and counter‑UAS (unmanned aircraft systems) tools. NATO and partner states may prioritize interoperability of sensors, real‑time data‑sharing and legal instruments to deter malign actors. However, developing widely accepted norms for response to hybrid acts — and proving responsibility beyond reasonable doubt — will take time and coordinated diplomatic work.
Comparison & Data
| Incident | Date | Location | Key detail |
|---|---|---|---|
| Airspace incursion | October 2025 | Lithuania | Two Russian fighters inside for ~18 seconds; escorted by NATO |
| Reconnaissance flight | 2025 (during Iron Wolf) | Belarusian airspace near Lithuania | Detected by Bundeswehr as close monitoring of exercise |
| Drone surveillance | 2025–2026 | Near training grounds / Arrow 3 sites | Allegedly observed sensitive systems and exercises |
These data points illustrate a deliberate mix of short‑duration kinetic probes and persistent surveillance. While the airspace incident is discrete and observable, drone and electronic activities are harder to quantify and attribute. That contrast explains why most responses have been diplomatic, defensive and focused on intelligence fusion rather than offensive military measures.
Reactions & Quotes
Officials and observers have framed the incidents as part of a broader pattern of hybrid pressure rather than isolated miscalculations. Military leaders emphasize the need for vigilance while diplomats pursue clarification through established channels.
“This reconnaissance flight is proof of the very real threat to Lithuania.”
Carsten Breuer, Inspector General, Bundeswehr (official)
Germany’s defence minister has highlighted regional sensitivity and called hybrid tactics a special concern for the Baltic states.
“The threat posed by Russia is felt more acutely in Lithuania and across the Baltic region.”
Boris Pistorius, Federal Defence Minister (official)
A firsthand account in Inside Bundeswehr captured the psychological effect on troops.
“A comrade phones home… and then gets a call from an unknown number and hears his own conversation played back — uncanny.”
Joshua Krebs, author (book)
Unconfirmed
- Attribution of phone‑playback and some drone operations to Russian state services remains unproven in public sources; investigations have not disclosed conclusive forensic evidence.
- Reports that drones directly penetrated secured zones around Arrow 3 installations are reported but lack independently verified imagery or chain‑of‑custody confirmation.
- Characterizing certain border incidents as precursors to annexation mirrors historical patterns but remains an interpretive judgment rather than a confirmed policy from Moscow.
Bottom Line
What is unfolding in Lithuania and the wider Baltic region is a steady pattern of hybrid pressure: probing, surveilling and unsettling rather than launching open combat. These actions complicate alliance responses because they often fall below the legal and operational thresholds that would trigger kinetic countermeasures, forcing NATO to adapt through intelligence, resilience and tailored deterrence measures.
For policymakers, the immediate priorities are clearer attribution, stronger defensive posture for critical systems, and international coordination to establish norms and proportional responses to hybrid acts. Without such steps, grey‑zone operations will continue to be an efficient tool for coercion short of war, imposing long‑term political and resource costs on frontline states and their allies.
Sources
- Euronews — news report summarising incidents and official statements (media).
- Bundeswehr — official German armed forces site with press releases and statements (official/military).
- Federal Ministry of Defence, Germany — ministerial statements and policy outlines on deployments (official/government).
- NATO — alliance statements on Baltic air policing and regional posture (official/international organisation).
- Lithuanian Armed Forces — local reports and announcements concerning airspace and border incidents (official/military).