Brussels is weighing stricter controls on Russian diplomats as European capitals grapple with a wave of hybrid attacks that have increasingly been linked to Moscow. The discussions, still at an early stage, could lead to a new layer of the EU's sanctions regime, according to senior diplomats familiar with the talks.
The push comes after a series of incidents that have rattled the bloc's security. In Estonia, a suspected arson attack at a defence company was attributed to Russian operatives, while in Germany, an unexploded drone was discovered at Leipzig Airport. Both cases have been connected to Russian intelligence activities, heightening concerns among member states.
Last month, Hungary expelled ten Russian diplomats for what it called "unacceptable" behaviour under the 1961 Vienna Convention. Moscow retaliated by expelling Hungarian diplomats, a move that underscored the escalating tit-for-tat. The episode also strained EU unity, as some member states were reluctant to back Budapest's hardline stance.
From notification to authorisation
The current system, introduced in the EU's 19th sanctions package in early 2026, requires Russian diplomats to notify their host country at least 24 hours before travelling to or transiting through another member state. This applies to all diplomatic and consular staff, including ambassadors, administrative personnel, and their families.
While the notification mechanism has improved oversight, it does not actually restrict movement. Member states can choose to impose a stricter procedure, requiring diplomats to obtain authorisation before crossing borders. If denied, the diplomat cannot travel. However, this option is voluntary, and so far only two countries have adopted it.
"As the system has only been in place since January 2026, experience is limited," a European Commission spokesperson said, reflecting the cautious approach in Brussels.
The original rationale for the notification system was that Russian diplomats are "often involved" in spreading pro-war narratives and manipulating public opinion. Now, the debate is shifting to their potential role in hybrid attacks, which include sabotage, cyber operations, and disinformation campaigns.
Draft conclusions for next week's summit of EU leaders signal a tougher line: "Russia's actions will not remain unanswered. The European Union and the member states will act resolutely and in a coordinated manner to address these actions, making full use of all tools and mechanisms available."
The challenge for EU policymakers is to balance these measures against the Vienna Convention, which grants diplomats extensive rights and protections. The convention is widely regarded as a cornerstone of international law, and any restrictions must be carefully calibrated to avoid legal and diplomatic fallout.
Some analysts argue that the EU's response has been too slow. The disinformation campaigns targeting Baltic voters are a case in point, showing how Moscow adapts its tactics to exploit democratic processes. Others point to the fake websites exposed by Ukraine as evidence of the Kremlin's willingness to target officials and media directly.
As the debate unfolds, member states are also looking at ways to close ranks after the recent diplomatic spat over Hungary. The expulsion of Russian diplomats from Budapest, and Moscow's response, highlighted the difficulty of maintaining a united front. Yet the growing list of hybrid incidents is pushing countries towards a more coordinated approach.
The EU's next steps will be closely watched, not least in Moscow. The Kremlin has repeatedly denied involvement in hybrid attacks, but European intelligence services have documented a pattern of sabotage, arson, and cyber intrusions across the continent. The ongoing strikes on Ukraine's power grid serve as a stark reminder of the broader threat.
For now, the EU is treading carefully, mindful of the legal and diplomatic constraints. But the mood in Brussels is shifting. As one senior diplomat put it, "We cannot afford to be naive. The rules we set must protect our security, not tie our hands."
