The wave of drones over European airports and military bases is a manufactured pretext, staged or inflated by NATO governments to justify rearmament and escalation with Russia
By The Conspiratory EditorsAugust 9, 2026
Where the evidence lands: ContradictedThat the drone incursions disrupting European airports and military installations since September 2025 are not a genuine external threat but a manufactured one: either staged outright by NATO governments and their agencies, or knowingly inflated from ordinary drone traffic and misidentification, in order to justify increased defence spending, emergency powers, and escalation against Russia.
Contradicted. The staged-pretext version fails on the physical record. These incidents left objects behind: a drone carrying an explosive device with its detonator torn off was recovered at Leipzig/Halle Airport on 4 and 5 August 2026, a cargo aircraft that aborted its landing there was struck and found damaged at Hannover, and a 2024 incendiary device that burned a freight container at the same airport is part of a plot Western security officials attribute to Russian intelligence. Airports across seven countries closed, and Poland and Estonia each invoked NATO Article 4. Nothing about that is theatre, and no evidence has ever been produced that any European government arranged any of it. The claim is also not organic: analysts tracking the autumn 2025 incidents found Russian-aligned narratives reframing them as a NATO-manufactured pretext circulating through proxy outlets and Telegram within 15 to 45 minutes of each airspace closure. Two things this file does not do. It does not name whoever is flying the drones, because for most of the sightings nobody has been identified, no aircraft recovered, and no operator caught, and the honest state of that question is open. And it does not treat the underlying unease as foolish: European governments have asked their publics to accept a large rearmament on the strength of attributions they have asserted rather than published.
Believed by: A mixed audience with little in common: state-aligned information operations that originate the framing, plus a much larger and mostly unconnected public across Europe and North America that distrusts the case for rearmament and notices that the attributions are asserted rather than evidenced
This file opens on the Leipzig/Halle recovery of 4 and 5 August 2026, which is the first incident in the wave to leave physical evidence in investigators' hands: a drone carrying an explosive device, a detonator that had torn off, and a freight aircraft damaged after a collision with a second object. German Interior Minister Alexander Dobrindt called it a new quality of danger and a hybrid attack scenario while declining to say who was responsible, and Saxony prosecutors have the case. The investigation is live and this file will be updated as it moves. Note what is unresolved and what is not: the pretext claim rated here is contradicted by the devices themselves, while the identity of whoever is flying the drones remains publicly unestablished for almost every incident since September 2025. source →
The full story
Fifteen months of closed runways and no arrests
The list is long enough to be tedious, which is part of why it stopped being news. Copenhagen and Oslo in September 2025. Munich twice inside twenty-four hours. Berlin Brandenburg, Bremen, Brussels, Liege, Gothenburg. Danish air bases. Belgian air bases, including Kleine Brogel, widely reported to store American tactical nuclear weapons. In December, five drones over Ile Longue in Brittany, where France bases its ballistic-missile submarines. Poland and Estonia each invoked Article 4of the NATO Treaty, a provision used only a handful of times in the alliance's history.
And in almost every case, nothing. No drone recovered, no operator identified, no arrest. At Ile Longue, French soldiers fired a jammer at the five drones and brought down none of them. German police have said plainly that they could not intercept the aircraft or find the pilots. More than a year on, the standard reference timeline still lists the wave's cause as under investigation, its motive as unknown, and its outcome as undetermined.
Into that vacuum arrived a claim, and it is the one this file rates: that the emergency is manufactured, staged or talked up by European governments to sell their voters a rearmament programme they had wanted anyway.
Why the doubt is not stupid
Take the strongest form of the sceptical case before knocking it down, because a weak version teaches nobody anything.
European governments have, in substance, named a culprit. They have not produced one. Fifteen months of incidents have yielded no seized aircraft from the sightings wave, no operator in custody, no published forensic attribution. What exists is official assessment: drones “widely believed to be Russian”, a Danish reference to a “professional actor”, a German minister's phrase about a “hybrid attack scenario”. Those are conclusions, offered without the working.
Meanwhile the consequences have been concrete and expensive. NATO increased surveillance and air-defence presence in the Baltic. Germany sent a frigate to Copenhagen. Lithuania authorised its forces to shoot drones down. Across the continent, the case for a historic increase in defence spending was made partly on the back of these events. A citizen who asks to see the evidence before agreeing to the bill is doing something entirely reasonable, and the word “hybrid” does not help, since it stretches to cover sabotage, disinformation, migration pressure and drone flights at once, and a category that elastic can never be contradicted by any particular event.
The objects on the ground
Then, in the early hours of 5 August 2026, the pattern broke.
An airport employee at Leipzig/Halle, Germany's big freight hub, found a drone near the south runway carrying what police described as an unknown explosive device. A bomb-disposal robot was sent in and the detonator, which had apparently torn off, was removed. Photographs from the scene show forensic technicians working beside a Ukrainian aircraft; the airport hosts Ukrainian Antonov transports. A second flying object collided with a freight plane that had aborted its landing because the runway was shut, and the aircraft flew on to Hannover, where slight damage was found. Interior Minister Alexander Dobrindt interrupted his holiday, went to the airport, and told reporters that a drone armed with explosiveswas “a new quality of danger” and “a new threat scenario”. Saxony prosecutors, whose brief is politically motivated crime, took the case.
This is where the staged-emergency reading stops working. A manufactured panic does not require a real explosive charge left on a runway apron, a real collision, or a real damaged aircraft. Nor does it require the 2024 incident at the same airport, when an incendiary device burned through a freight container as part of a plot Western security officials attribute to Russian intelligence. And there is no evidence, of any kind, that a European government arranged any of it. The claim asks its audience to believe that states planted live devices at their own infrastructure and then failed for fifteen months to produce the culprit they had invented, which is a great deal of risk for a result they could have obtained with a press release.
Fifteen to forty-five minutes
There is a second reason to treat the pretext framing as something other than a spontaneous public reaction: it kept arriving before the public could have reacted.
Analysts who examined the autumn 2025 incidents in Poland, Denmark and Germany found Russian-aligned narratives moving through proxy outlets and Telegram channels within fifteen to forty-five minutesof the sightings and closures, already recasting each as a pretext manufactured by NATO and its members. The EU's counter-disinformation service has tracked the same reframing, and pro-Kremlin outlets have made a standing habit of casting European incidents as excuses to raise defence budgets.
Fifteen minutes is not time to form a view. It is time to publish one that was already written. That does not make every person repeating the framing an agent of anything, and the overwhelming majority are not; a placed narrative succeeds by landing on real scepticism that was there first. But knowing where a story entered the water is part of reading it, and this one did not begin with a European voter wondering about the defence budget.
Two piles of evidence that keep getting mixed
The most useful thing anyone can do with this story is sort it into two piles, because almost every overreach in either direction comes from treating it as one.
The attributed pile. In September 2025 drones entered Polish airspace in numbers reported at nineteen to twenty-one and were identified as Russian-launched; Poland invoked Article 4. Days later three Russian MiG-31s crossed into Estonian airspace, and Estonia invoked Article 4 as well. These are manned aircraft and traced munitions, not lights in the dark.
The unattributed pile. Copenhagen, Munich, Brussels, Berlin, Bremen, Liege, Gothenburg, Kleine Brogel, Ile Longue. Dozens of incidents, no recovered aircraft, no identified operator, cause and motive formally open.
Merge the piles and the first one lends its certainty to the second, which is how the official account comes to sound better established than it is. Merge them the other way and the unsolved majority is used to wave off the cases that were solved. The Kremlin, for its part, has denied that its drones entered European airspace at all while offering no alternative explanation, and Russian officials at a Moscow meeting reportedly told European diplomats that the incursions were retaliation for Ukrainian strikes on Crimea, which is an odd thing to say about flights you say never happened.
Unsolved is not the same as invented
The pretext claim is contradicted by what was found on the ground at Leipzig, and it has no evidence of its own anywhere. That is the rating.
What survives, and what this file will not pretend away, is that the question at the centre of the story is open. Nobody has said publicly who flew the drones over Copenhagen or over a French submarine base, and no government has published the working behind the assessments it has asked its public to act on. That is an unsolved case, and an unsolved case is a poor foundation for confidence in any direction, including the confident version of the official story.
For the first time there is now hardware in evidence: a drone, a charge, and a detonator that tore off, held by prosecutors whose remit is politically motivated crime. If an attribution is ever going to be published rather than briefed, it will come from somewhere like that. Until it does, the honest description of who is flying drones over Europe is that we do not know, and that the people insisting they do, on either side of the argument, are working from the same absence of proof.
What's still unexplained
- Who has been flying the drones over Copenhagen, Munich, Brussels, Kleine Brogel and Ile Longue? Fifteen months on, no operator has been publicly identified for the sightings wave, and the standard timeline still lists cause, motive and outcome as under investigation, unknown and undetermined.
- Why has nothing been recovered until now? At Ile Longue soldiers fired a jammer at five drones over a submarine base and downed none. Whether that reflects the drones' capability, the difficulty of countering them over populated ground, or something about how the sightings were generated is unresolved, and it is the question the Leipzig device may finally answer.
- Does the Leipzig investigation break the pattern? For the first time there is hardware, an explosive device and a torn detonator in the hands of prosecutors who handle politically motivated crime. Whether that produces a named actor, and whether any attribution is published rather than briefed, is the thing to watch.
- How much of the reported wave is misidentification? Airports close on sightings, and sightings are made by people. No public assessment appears to exist of how many of the dozens of incidents involved a confirmed drone rather than a report of one, which matters to both readings of this story.
Point by point
The claim: The whole thing is theatre. Nothing was ever actually found, which is why nobody was ever caught.
What the record shows: Objects were found, and one of them was armed. At Leipzig/Halle on 4 and 5 August 2026 police recovered a drone carrying an explosive device and removed a detonator that had torn off; a bomb-disposal robot was photographed working beside a Ukrainian aircraft. A second object struck a freight plane that had aborted its landing, and damage was confirmed after it diverted to Hannover. In 2024 an incendiary device burned a freight container at the same airport, part of a plot Western security officials attribute to Russian intelligence. Physical devices, physical damage, and a criminal investigation by prosecutors who handle politically motivated crime are not the residue of a staged emergency.
The claim: Even so, nobody has ever been identified, and after more than a year that silence is the real story.
What the record shows: This part is correct, and it is the strongest thing the sceptics have. Across dozens of incidents in seven or more countries, from Copenhagen in September 2025 to Ile Longue in December, essentially no operator has been identified and no drone recovered from the sightings wave. At Ile Longue, French soldiers fired a jammer at five drones over a ballistic-missile submarine base and brought down none of them. German police have said they were unable to intercept the drones or apprehend the pilots. The standard reference work on the wave still lists its cause as under investigation, its motive as unknown and its outcome as undetermined. What that establishes is an unsolved case, which is not the same as an invented one.
The claim: European governments used the panic to push through rearmament they already wanted.
What the record shows: Rearmament did follow, and the sequencing is real: NATO increased surveillance and naval air-defence presence in the Baltic, Germany sent an air-defence frigate to Copenhagen, Lithuania authorised its military to shoot down intruding drones. But a policy response following an event does not show the event was arranged to produce it, and this argument would have to explain the physical devices. The Soufan Center made a sharper version of the same point from the opposite direction, warning that expanding Europe's defence architecture creates new vulnerabilities of its own, and that investment in conventional rearmament without attention to social cohesion can undercut the security it is meant to buy. That is a criticism of the response. It is not evidence that the incidents were manufactured.
The claim: This is an organic public reaction to an unconvincing official story.
What the record shows: Partly, and partly not. Analysts examining the Poland, Denmark and Germany incidents of autumn 2025 found coordinated Russian-aligned narratives already circulating through proxy outlets and Telegram channels within 15 to 45 minutes of the sightings and airspace closures, reframing each event as a pretext manufactured by NATO. A response that fast is prepared, not spontaneous. That does not make everyone who repeats the framing an agent of anything, and most are not: a seeded narrative works precisely because it lands on a real and widely felt scepticism. But the origin of the framing is documented, and it belongs in the account.
The claim: Officials say Russia is behind it, so the question is settled and the pretext claim is just denial.
What the record shows: Not settled, and this file will not assert it. The drones are widely believed by European officials to be Russian, Denmark identified a professional actor, and Western officials have accused Russia and its proxies of staging dozens of incidents across Europe since the full-scale invasion. Against that, the Kremlin has consistently denied its drones entered European airspace or that it is testing NATO, while offering no evidence or alternative explanation, and, per Bloomberg, Russian officials at a Moscow meeting characterised the incursions as retaliation for Ukrainian strikes on Crimea, which is a curious thing to say about flights you deny making. For the Leipzig device, the German interior minister declined to name anyone responsible and said it was a matter for the investigation. Attribution here rests on official assessment rather than published proof, and this site anchors attribution to courts, watchdogs and investigative reporting rather than asserting it in its own voice.
The claim: The Polish incursion and the mystery sightings are all one campaign.
What the record shows: They are being treated as one and they are not the same thing, which is what lets both sides overreach. The September 2025 Polish incursion involved drones identified as Russian-launched, entering in numbers reported at 19 to 21, and triggered an Article 4 consultation; the Estonian case involved manned Russian aircraft. The sightings wave that followed over Copenhagen, Munich, Brussels, Kleine Brogel and Ile Longue is a different evidentiary category, with nothing recovered and no operator identified. Merging them lets the attributed cases carry the unattributed ones, and lets anyone arguing the reverse point at the unsolved majority as though it settled the whole file. Keeping the two apart is the single most useful thing a reader can do with this story.
Other readings
Angles that don't fit neatly into the claim or its rebuttal, laid out and weighed, not endorsed.
The misidentification read
A quieter possibility sits between the two loud ones and deserves recording. Airports close on reports, and reports are made by people looking at night skies during a period when everyone has been told to expect drones. Some share of the dozens of incidents may involve ordinary aircraft, hobbyist drones, planets or nothing at all, which would explain both the absence of recovered hardware and the absence of arrests without requiring either a state campaign or a staged one. We note it as unweighed rather than endorsed: no public assessment appears to exist of how many sightings were confirmed as drones, and until someone does that count this remains a hypothesis rather than a finding. It also cannot account for Leipzig, where an object was recovered and a charge defused.
Timeline
- 2024An incendiary device ignites at a logistics centre at Leipzig/Halle Airport in Germany and sets fire to a freight container. The flight it was due to travel on is delayed. Western security officials suspect the device was part of a plot run by Russian intelligence. No conspiracy framing attaches to it at the time; it is the earliest incident at the airport that will later be described as a repeated target.
- 2025-09-09Several drones fly over Polish airspace, closing airports at Warsaw, Rzeszow, Lublin and Modlin. Poland invokes Article 4 of the NATO Treaty, a rarely used provision allowing a member to call emergency consultations over a perceived threat to its security. Analysts later record pro-Kremlin narratives reframing the incursion as a pretext manufactured by Poland and its allies.
- 2025-09-19Three Russian MiG-31s briefly enter Estonian airspace. Estonia invokes Article 4 as well. Lithuania, having reported drones crossing its border, authorises its military to shoot down unauthorised drones in its airspace.
- 2025-09-22Large drones appear repeatedly inside controlled airspace near Copenhagen Airport, forcing a shutdown of nearly four hours. Oslo Gardermoen closes briefly the same night in a separate incident. Danish authorities describe a 'professional actor' behind the incursion and call the flights a serious attack. Over the following week, sightings disrupt Aalborg, Esbjerg, Sonderborg and Skrydstrup Air Base.
- 2025-10-02Drones of unknown origin suspend flights at Munich Airport for several hours: 17 outbound flights cancelled, 15 inbound diverted, thousands of passengers delayed. Belgium investigates 15 drones over the Elsenborn military site near the German border, which reportedly cross into Germany and are observed by police at Duren. Munich is forced to suspend operations again the following day.
- 2025-10-08The Soufan Center publishes an assessment noting that the Kremlin has consistently denied its drones entered European airspace or that it is testing NATO, and has offered no evidence or alternative explanation. It also records, citing Bloomberg, that at a meeting in Moscow Russian officials characterised the incursions as retaliation for Ukrainian strikes on Crimea.
- 2025-11-02Several drones are seen over Kleine Brogel Air Base in Belgium, widely reported to store US tactical nuclear weapons; a helicopter is deployed and the drones move off toward the Netherlands. Drones are also seen over Leopoldsburg and Marche-en-Famenne. Brussels Airport, Liege, Gothenburg-Landvetter, Berlin Brandenburg and Bremen all suspend operations across the following days.
- 2025-12-04Five unidentified drones are spotted in the evening over the Ile Longue naval base in France, the operational hub for the French fleet of nuclear-powered ballistic-missile submarines. Soldiers fire a jammer. No drone is brought down and no operator is identified, which by this point is the pattern rather than the exception.
- 2026-08-05Shortly before midnight on 4 August a flying object is sighted near Leipzig/Halle Airport. Both runways close and flights divert. An airport employee finds a drone near the south runway carrying what police call an unknown explosive device; a bomb-disposal robot is deployed and the detonator, which had apparently torn off, is removed. A second object collides with a freight aircraft that aborted its landing; the plane reaches Hannover with slight damage. German Interior Minister Alexander Dobrindt calls it a 'new quality of danger' and 'a hybrid attack scenario', while saying the explosives, the drone's origin and who was behind it are matters for the investigation. Saxony prosecutors, who handle politically motivated crime, take the case. NATO says it is aware and refers questions to Germany.
Contradicted. The staged-pretext version fails on the physical record. These incidents left objects behind: a drone carrying an explosive device with its detonator torn off was recovered at Leipzig/Halle Airport on 4 and 5 August 2026, a cargo aircraft that aborted its landing there was struck and found damaged at Hannover, and a 2024 incendiary device that burned a freight container at the same airport is part of a plot Western security officials attribute to Russian intelligence. Airports across seven countries closed, and Poland and Estonia each invoked NATO Article 4. Nothing about that is theatre, and no evidence has ever been produced that any European government arranged any of it. The claim is also not organic: analysts tracking the autumn 2025 incidents found Russian-aligned narratives reframing them as a NATO-manufactured pretext circulating through proxy outlets and Telegram within 15 to 45 minutes of each airspace closure. Two things this file does not do. It does not name whoever is flying the drones, because for most of the sightings nobody has been identified, no aircraft recovered, and no operator caught, and the honest state of that question is open. And it does not treat the underlying unease as foolish: European governments have asked their publics to accept a large rearmament on the strength of attributions they have asserted rather than published.
Reviewed by The Conspiratory Editors · Last reviewed August 9, 2026 · How we rate
Common questions
Is Europe's drone incursions true?
Contradicted. The staged-pretext version fails on the physical record. These incidents left objects behind: a drone carrying an explosive device with its detonator torn off was recovered at Leipzig/Halle Airport on 4 and 5 August 2026, a cargo aircraft that aborted its landing there was struck and found damaged at Hannover, and a 2024 incendiary device that burned a freight container at the same airport is part of a plot Western security officials attribute to Russian intelligence. Airports across seven countries closed, and Poland and Estonia each invoked NATO Article 4. Nothing about that is theatre, and no evidence has ever been produced that any European government arranged any of it. The claim is also not organic: analysts tracking the autumn 2025 incidents found Russian-aligned narratives reframing them as a NATO-manufactured pretext circulating through proxy outlets and Telegram within 15 to 45 minutes of each airspace closure. Two things this file does not do. It does not name whoever is flying the drones, because for most of the sightings nobody has been identified, no aircraft recovered, and no operator caught, and the honest state of that question is open. And it does not treat the underlying unease as foolish: European governments have asked their publics to accept a large rearmament on the strength of attributions they have asserted rather than published.
What is Europe's drone incursions?
Since September 2025, drones have closed airports across Europe: Copenhagen, Oslo, Munich twice in a day, Brussels, Berlin, Bremen, Liege, Gothenburg. They have appeared over Belgian air bases, a French naval base that hosts the country's ballistic-missile submarines, and Danish military sites. Poland and Estonia both invoked NATO's Arti…
What does the evidence show?
Objects were found, and one of them was armed. At Leipzig/Halle on 4 and 5 August 2026 police recovered a drone carrying an explosive device and removed a detonator that had torn off; a bomb-disposal robot was photographed working beside a Ukrainian aircraft. A second object struck a freight plane that had aborted its landing, and damage…
Why do people believe it?
The official account has a hole in it that anyone can see. Governments have named a suspect in substance while charging nobody, recovering nothing and catching no one, and asked for a great deal of money on that basis. Scepticism aimed at that gap is not irrational.
What is still unresolved?
Who has been flying the drones over Copenhagen, Munich, Brussels, Kleine Brogel and Ile Longue? Fifteen months on, no operator has been publicly identified for the sightings wave, and the standard timeline still lists cause, motive and outcome as under investigation, unknown and undetermined.
Sources
- 1.Drone with explosives found at German airport, official sees 'new quality' of threat (Associated Press), NPR (2026)
- 2.Germany warns of 'new threat' after explosives-packed drone targets airport, CNN (2026)
- 3.Explosive-laden drone found at German airport poses 'new quality of danger', Al Jazeera (2026)
- 4.Explosive drone: why Leipzig/Halle airport keeps becoming a target for sabotage, Euronews (2026)
- 5.Beyond the Drones: Confronting Russia's Expanding Hybrid War on Europe (the September 2025 timeline, the Article 4 invocations, the Kremlin's denial, and the Bloomberg-reported retaliation remark), The Soufan Center (2025)
- 6.Russian Disinformation Followed Drone Incursion of Poland, BankInfoSecurity (2025)
- 7.Religion, drones and 'piracy': latest trends in Russian FIMI, EUvsDisinfo (European External Action Service)
- 8.The battle for the mind: how Europe can stay safe in the cognitive threat era, European Council on Foreign Relations
- 9.2025 European drone sightings (timeline of closures at Copenhagen, Oslo, Munich, Berlin, Bremen, Brussels, Liege, Gothenburg, and sightings over Kleine Brogel and Ile Longue), Wikipedia
Embed this verdict on your site
Paste this snippet to show our sourced verdict as a small card, with a link back to the full case file. Free to use.
<iframe src="https://theconspiratory.com/embed/europe-drone-incursions" title="The Conspiratory verdict" width="520" height="190" style="border:0;max-width:100%" loading="lazy"></iframe>Help us investigate
This is a living case file. If you spot an error or know evidence we missed, tell us, and weigh in on where you land.
Where do you land?
Cast your read on this one.
Comments
Add your take. Comments are read and approved by a human before they appear, so keep it on topic and civil. Please do not accuse named, living people of crimes.