Russia's Slow-Motion Interference: What the 2026 Election Cycle Reveals About European Resilience

2026 and 2027 will decide as much about Europe's political future as 2020-2022 did. Most major EU states will go to the polls during that period, and the stakes are structural. European polarisation driven by geopolitical strain and economic pressure is making European foreign policy weaker, because unanimity-based instruments (sanctions renewal, common defence commitments, a shared reading of the "common European home") all depend on a political centre that polarisation erodes from both flanks. Polarised electorates produce fragile domestic coalitions that governments must appease before agreeing to anything at EU level, turning unanimity requirements into leverage points, as was the case when European sanctions packages were blocked by Orbán's Hungary or Fico's Slovakia.

The result will help decide whether the Union can still act as a single strategic actor on sanctions, defence and enlargement. That question matters more than any single vote, because the tool Russia has used most effectively against Europe since at least 2014 is not disinformation in the abstract. It is the exploitation of exactly the unanimity rules and coalition arithmetic that this election cycle will reshape. This is not a claim that unanimity exploitation outperforms every other instrument in Russia's toolkit; cyberattacks and energy leverage plainly do damage no referendum result can, but it is the one mechanism structurally embedded in how the EU makes decisions, which means its returns compound with every renewal cycle rather than requiring a fresh operation each time. A single successful cyber attack is a discrete event. A single blocking minority on a sanctions renewal is a recurring asset, available again at the next six-month deadline without any further action required.

Russia's Real Target Is Not Left or Right. It Is European Unity.

On 3 September 2026, six days before Swedes went to the polls, the anti-racism foundation Expo published an investigation into Polina Malaberg, a Sweden Democrats employee who had worked around the Riksdag's EU Affairs and Constitutional committees since moving to Sweden from Russia in 2006. Expo reported that she had shared pro-Kremlin content, including a tribute to Vladimir Putin, in 2015–2017 and again as recently as 2024–2025 (Hungarian Conservative, 2026). What made the story a stratcom event rather than a personnel scandal was not the content she shared. RT clips and pro-Putin posts are freely available to anyone. It was the position she occupied: a staffer inside a governing coalition's parliamentary apparatus, whose partner ran that same coalition's coordination office. That position converts openly available Kremlin narratives into something with institutional authority attached, precisely the source-legitimation effect that a bot account or an RT broadcast can never achieve on its own.

This is the pattern the stratcom community should be tracking across the 2026-2027 election cycle: not only disinformation campaigns in the classic sense of fabricated content pushed through inauthentic accounts, but the capture or convergence of authentic domestic messengers, such as politicians, journalists or other public figures, who then carry Kremlin-aligned framing into audiences that no foreign broadcaster could reach on its own.

Narrative laundering across the political spectrum

The stratcom value of a message is not fixed. It depends on who delivers it. A frame that a Russian state outlet repeats is easy to flag and easy for audiences to discount. The same frame delivered by a domestic party leader, in the domestic language, addressed to a domestic grievance, passes through none of the filters audiences apply to foreign sources. This is narrative laundering, which is defined as the process of placing a false story and then "methodically layered into the media ecosystem" so that it is distanced from its real source and absorbed into genuine, organic conversation (Lawfare, 2025). It operates identically on the right and the left, which is exactly why treating it as an ideological phenomenon misses the mechanism.

On the right, French National Rally's decade-long financial dependence on a €9.4 million loan from Moscow's First Czech-Russian Bank (Washington Post, 2018) sits behind a consistent sovereigntist framing: EU overreach, national self-determination against Brussels, sanctions as self-harm. In Germany, the AfD's Saxony-Anhalt platform of restored Russian-language teaching and school exchanges, explicitly framed as rejecting the federal government's "anti-Russian policy" (Kyiv Independent, 2026), does not read as pro-Russian propaganda to the audience it targets. It reads as an education policy. That is the point: the school exchange programme is itself an information channel, laundering contact and legitimacy through an institutional format that carries none of the suspicion a state broadcaster attracts. The two mechanisms converge on the same outcome. Financial dependency and institutional format are different levels, but each turns a domestic actor with pre-existing local credibility into a messenger for a frame that serves Russia’s interests, without Russia having to write a word of it or send a single account to post it.

On the left, the same sovereigntist frame reappears in anti-NATO, anti-militarist packaging. Jean-Luc Mélenchon's remark on the eve of invasion, asking "who wouldn't do the same thing with such a neighbour?" (Insight News, 2026), and his 2023 dismissal of concern for the "centuries-old quarrels of the Latvians or Estonians with Russia" (Insight News, 2026), use a distinct vocabulary, anti-imperialism rather than sovereigntism, to arrive at the same conclusion National Rally reaches from the right: Western solidarity with Ukraine is a trap, and scepticism of it is patriotic rather than foreign-directed. The two parties despise each other and would reject any suggestion of coordination. That is precisely what makes the convergence significant from a stratcom standpoint rather than a party-politics one: two audiences that trust nothing from each other, and nothing from Moscow, both receive the identical underlying frame from a messenger they do trust. European Pravda's September 2025 analysis found this convergence made operational, not just rhetorical, when LFI abstained on a March 2025 European Parliament resolution alongside National Rally (Insight News, 2026). A shared vote is a shared narrative outcome delivered through two entirely separate distribution channels, which is a more efficient reach strategy than any single messenger could offer.

The Neutrality Initiative demonstrates a third route into the same mechanism, and it is important to keep two separate facts apart rather than treat them as one. The first is a domestic conflict of interest: more than CHF 3 million in campaign financing has been linked to the Blocher family, despite Christoph Blocher's ownership of two factories in Russia (Tribune de Genève, 2026). That fact shows a funder had a personal reason to want a Swiss policy Moscow also wants. It is not, by itself, evidence that Moscow acted. The second fact is that SEPOS itself found "coordinated, covert disinformation operations" running alongside the campaign, together with open coverage by RT DE (SWI swissinfo.ch, 2026). That is documented foreign activity, distinct from the funding question, and it is the fact that actually places this case in the same category as Sweden, France and Germany.

What ties the two together is the same lever the AfD case demonstrated: framing that is hard to attack directly. A campaign to protect Swiss neutrality is difficult to characterise as anything other than patriotic, which is exactly why it functions as effective cover regardless of who is funding it or who is amplifying it. A financially conflicted domestic backer and a foreign disinformation operation can converge on the same vote for entirely separate reasons, one commercial, one strategic, and the initiative's neutrality framing is what makes it a rational target for both. Switzerland's Socialist Party has since tabled a parliamentary motion demanding transparency on the sources of interference in the campaign (Parlament.ch, 2026), precisely because the two sources are not yet disentangled in public.

The vote's significance does not depend on its outcome. A serious, well-resourced campaign exists to constitutionalise sanctions-aversion in a country that currently aligns with EU measures purely by choice, which means the discretion Bern used to support Ukraine-related sanctions is itself now a contested political variable rather than a settled fact.

The older, more familiar stratcom mechanism, coordinated inauthentic amplification, remains active but has become the secondary tool rather than the primary one. During the Gilets Jaunes protests, roughly 600 Twitter accounts tracked by the Alliance for Securing Democracy pivoted toward the #giletsjaunes hashtag, amplifying material, including misattributed images of police violence, that reinforced a narrative of a brutal, disconnected French state (Bloomberg, 2018; Ifri, 2018). That operation worked because it amplified a genuine grievance rather than inventing one, but it is also a tactic platform trust and safety teams have since learned to detect and disclose.

A structural observation is that the centre of gravity has moved from covert operations to the exploitation of legitimate domestic political processes. None of the five cases required Russian intelligence services to fabricate anything. A loan, a party staffer's personal history, a regional election platform and a citizen-initiated referendum are all ordinary features of democratic politics. 

Convergence with Russian interests is not coincidence, because coincidence leaves no paper trail and these cases do: an unpaid €9.4 million loan from a Kremlin-linked bank behind National Rally, a staffer's Kremlin-sponsored trip and continued pro-Kremlin posting behind the Sweden Democrats, coordinated covert disinformation operations that SEPOS itself documented alongside the Swiss referendum. It is not simple ideological affinity either. National Rally's Euroscepticism and LFI's anti-NATO tradition both predate 2014 and need no Russian input to exist. What convergence adds is not the ideology but a documented material or informational link operating alongside it, whether by keeping a debtor party from severing an inconvenient position or by allowing a school exchange programme to carry legitimacy a state broadcaster never could. And it is not ordinary domestic disagreement, because ordinary disagreement predicts divergence on most votes. What it does not predict is mutually hostile actors, who share nothing else and would reject any suggestion of coordination, arriving at the identical outcome, as LFI and National Rally did when both abstained on the same March 2025 European Parliament resolution.

This is why convergence is harder to counter than either direct control or pure coincidence. Direct control leaves recruitment and tasking evidence that counter-espionage tools are built to find. Coincidence needs no response. Convergence produces content that is not fabricated, a messenger who is not foreign, and an outcome the domestic actor can accurately call its own, which is exactly the target a fact-checking or bot-detection framework has nothing to grip.

The Malaberg case, the AfD platform and the Swiss campaign are harder to counter for the opposite reason: there is no inauthentic network to take down, no coordinated posting pattern to flag, because the amplification is being done by real domestic actors exercising ordinary political speech. A counter-disinformation framework built to find bot farms has almost nothing to do here.

What would actually give these cases a paper trail is disclosure aimed at the convergence itself, not at the content. Three targets follow directly from the cases above. First, foreign-linked party financing that predates the disclosure window most electoral laws currently use: National Rally's loan is fifteen years old and would fall outside most annual reporting cycles, so what is needed is a standing requirement to disclose foreign-linked debt for as long as it remains unpaid, not only at the point of origination. Second, staff and personnel vetting for roles with access to parliamentary committee work, extended to cover a documented history of foreign-sponsored travel and continued public alignment with that sponsor's positions, which is precisely the gap the Malaberg case exposed. Third, referendum and campaign funding disclosure that flags a funder's material interests abroad, such as Blocher's factories in Russia, as a matter of routine record rather than something investigative journalism has to surface case by case.

Destabilisation of the European Political Sphere 

The destabilisation campaign that Russia wages through European elections matters because of the consequences it produces. The EEAS found that Russia targeted elections in Germany, Poland, Romania, Moldova and the Czech Republic in 2025, and it named Sweden among the member states likely to face similar interference patterns (EEAS, 2026).

First, the polarisation of European societies makes political debate more difficult. Polarised groups cannot understand one another, and that incomprehension leads to further radicalisation. Radicalised societies are, by extension, more receptive to online disinformation (JRC, 2019), which Russia can use to polarise them further or to push its own narratives (University of Helsinki and Aalto University, 2024).

Second, polarisation makes it harder for parties to communicate while forming a government, which can lead to unstable periods. Unstable governments respond less effectively to hybrid and direct threats from Russia, and those threats are growing: the EEAS expects Russian information manipulation to intensify in 2026, with funding for state-controlled media set to rise by 7 percent (EEAS, 2026).

Third, less stable and more polarised governments weaken European solidarity and its institutions through vetoes and decisions by individual countries not to align with Brussels. EU sanctions on Russian individuals must be renewed by unanimity every six months (Euronews, 2026), and Slovakia has taken up the blocking role that Hungary played until its change of government (RFE/RL, 2026).

 Image: Alexia Barakou / Investigate Europe, “Russian interference unnerves Europe as elections near,” 21 March 2024.

____________________

By Louis Sandro Zarandia, Research Associate, Center for Strategic Communications, SSI