FOI study reveals increasing complexity in European espionage from 2008-2024 with wider spy typologies and modern methods, urging vigilance and adaptation.

Intelligence & EspionageHuman Intelligence (HUMINT)Recruitment of locals

Aggressor

Summary

The Swedish Defence Research Agency (FOI) published research analyzing espionage cases in Europe from 2008 to 2024 across more than 20 countries, commissioned by Swedish Security Service, FRA, and MUST. It shows that espionage activities have evolved beyond traditional images, involving various types of spies, motivations, and increasingly complex networks. Most spies were recruited volunteers, often approached personally or via social media, with motivations including financial gain, ideology, pressure, or revenge. The Baltic states and Finland saw many spy assignments, with Poland noted for Russian collaboration with criminals to spy on Western equipment supplies. The study challenges previous assumptions by including overlooked groups such as women and highlighting espionage integration with modern digital technologies alongside old methods. The report calls on European intelligence services to update their approaches to tackle these emerging espionage complexities effectively.

Classification

Confidence: High

Classified as aggressor event because it details espionage activities across Europe attributed primarily to hostile intelligence operations, including Russian cooperation with criminals. There is no mention of defense preparations or countermeasures, so defense event is false.

Source URL

https://foi.se/en/foi/news-and-pressroom/news/2026-02-03-espionage-in-europe-is-becoming-more-complex.html

Open source

Provenance

Publisher: hwt_web_submit
Submitted: Feb 4, 2026, 15:02 UTC
Last updated: Nov 4, 2026, 08:36 UTC
Event time: Feb 3, 2026, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "8a09a00c-7435-4fd9-8d30-1a0f0b47f789",
  "url": "https://foi.se/en/foi/news-and-pressroom/news/2026-02-03-espionage-in-europe-is-becoming-more-complex.html",
  "source": "hwt_web_submit",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "European Union",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "NATO",
    "espionage",
    "Security Report",
    "european union",
    "intelligence",
    "FOI",
    "baltic sea region",
    "Finland",
    "Poland",
    "russian intelligence operations",
    "spy recruitment",
    "security research"
  ],
  "nodes": [],
  "countries": [
    "European Union"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "A new research report by the Swedish Defence Research Agency (FOI) reveals that espionage in Europe between 2008 and 2024 has become more complex, involving multiple types of spies and methods. The study analyzed open cases of espionage convicted in over 20 countries, focusing especially on the Baltic states, Finland, and Poland. It highlights that most spies are recruited volunteers, often approached by handlers, with motivations similar to those during the Cold War. The report stresses growing complexity, such as the involvement of women overlooked in traditional intelligence, and cooperation between Russian intelligence and criminals in Poland. Espionage now uses modern digital channels alongside traditional methods, requiring European intelligence to adapt. The FOI researchers debunk traditional assumptions about lone spies by showing that many operate within networks and employ various tactics. The study also points to new types of spies beyond earlier classifications and emphasizes the need for greater vigilance and intelligence service adaptation.",
  "summary_short": "FOI study reveals increasing complexity in European espionage from 2008-2024 with wider spy typologies and modern methods, urging vigilance and adaptation.",
  "summary_extended": "The Swedish Defence Research Agency (FOI) published research analyzing espionage cases in Europe from 2008 to 2024 across more than 20 countries, commissioned by Swedish Security Service, FRA, and MUST. It shows that espionage activities have evolved beyond traditional images, involving various types of spies, motivations, and increasingly complex networks. Most spies were recruited volunteers, often approached personally or via social media, with motivations including financial gain, ideology, pressure, or revenge. The Baltic states and Finland saw many spy assignments, with Poland noted for Russian collaboration with criminals to spy on Western equipment supplies. The study challenges previous assumptions by including overlooked groups such as women and highlighting espionage integration with modern digital technologies alongside old methods. The report calls on European intelligence services to update their approaches to tackle these emerging espionage complexities effectively.",
  "actor_primary": "Russian intelligence",
  "target_primary": null,
  "location_text": "Baltic states, Finland, Poland, Western countries",
  "location_region": null,
  "location_coordinates_lat": 54.526,
  "location_coordinates_lon": 25.255,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": false,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Classified as aggressor event because it details espionage activities across Europe attributed primarily to hostile intelligence operations, including Russian cooperation with criminals. There is no mention of defense preparations or countermeasures, so defense event is false.",
  "event_time_utc": "2026-02-03T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-04T15:02:00.092Z",
  "updated_at": "2026-11-04T08:36:03.522Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: UnknownLocation: Regional

Source reliability

Info credibility

Event time

Feb 3, 2026, 00:00 UTC

Event time confidence

unknown

Location

Baltic states, Finland, Poland, Western countries

Primary actor

Russian intelligence

Country

European Union

Countries

European Union

Tags

Russia, NATO, espionage, Security Report, european union, intelligence, FOI, baltic sea region, Finland, Poland, russian intelligence operations, spy recruitment, security research

Loading signal...

{ "id": "8a09a00c-7435-4fd9-8d30-1a0f0b47f789", "url": "https://foi.se/en/foi/news-and-pressroom/news/2026-02-03-espionage-in-europe-is-becoming-more-complex.html", "source": "hwt_web_submit", "status": "approved", "category": "Intelligence & Espionage", "subcategory": "Human Intelligence (HUMINT)", "incident_type": "Recruitment of locals", "country": "European Union", "source_reliability": "C", "info_credibility": "3", "tags": [ "Russia", "NATO", "espionage", "Security Report", "european union", "intelligence", "FOI", "baltic sea region", "Finland", "Poland", "russian intelligence operations", "spy recruitment", "security research" ], "nodes": [], "countries": [ "European Union" ], "where_text": "Land", "headline": null, "description": "A new research report by the Swedish Defence Research Agency (FOI) reveals that espionage in Europe between 2008 and 2024 has become more complex, involving multiple types of spies and methods. The study analyzed open cases of espionage convicted in over 20 countries, focusing especially on the Baltic states, Finland, and Poland. It highlights that most spies are recruited volunteers, often approached by handlers, with motivations similar to those during the Cold War. The report stresses growing complexity, such as the involvement of women overlooked in traditional intelligence, and cooperation between Russian intelligence and criminals in Poland. Espionage now uses modern digital channels alongside traditional methods, requiring European intelligence to adapt. The FOI researchers debunk traditional assumptions about lone spies by showing that many operate within networks and employ various tactics. The study also points to new types of spies beyond earlier classifications and emphasizes the need for greater vigilance and intelligence service adaptation.", "summary_short": "FOI study reveals increasing complexity in European espionage from 2008-2024 with wider spy typologies and modern methods, urging vigilance and adaptation.", "summary_extended": "The Swedish Defence Research Agency (FOI) published research analyzing espionage cases in Europe from 2008 to 2024 across more than 20 countries, commissioned by Swedish Security Service, FRA, and MUST. It shows that espionage activities have evolved beyond traditional images, involving various types of spies, motivations, and increasingly complex networks. Most spies were recruited volunteers, often approached personally or via social media, with motivations including financial gain, ideology, pressure, or revenge. The Baltic states and Finland saw many spy assignments, with Poland noted for Russian collaboration with criminals to spy on Western equipment supplies. The study challenges previous assumptions by including overlooked groups such as women and highlighting espionage integration with modern digital technologies alongside old methods. The report calls on European intelligence services to update their approaches to tackle these emerging espionage complexities effectively.", "actor_primary": "Russian intelligence", "target_primary": null, "location_text": "Baltic states, Finland, Poland, Western countries", "location_region": null, "location_coordinates_lat": 54.526, "location_coordinates_lon": 25.255, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": false, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "Classified as aggressor event because it details espionage activities across Europe attributed primarily to hostile intelligence operations, including Russian cooperation with criminals. There is no mention of defense preparations or countermeasures, so defense event is false.", "event_time_utc": "2026-02-03T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "unknown", "created_at": "2026-02-04T15:02:00.092Z", "updated_at": "2026-11-04T08:36:03.522Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "unknown", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }