The Norwegian Police Security Service (PST) is closely monitoring Russian-linked shipping activity that uses deceptive flagging and ownership changes to mask its intelligence value. At the same time, Norway is being warned that Moscow will persist with covert maritime intelligence operations in Norwegian waters. This warning is central to PST’s current threat assessment.
Key findings by PST
PST stresses that Russian civilian-vessels, crews of Russian nationality, or foreign-flagged vessels with Russian crews may be repurposed by Russian intelligence services—and therefore pose a significant intelligence threat to Norway. In a written response, senior advisor Eirik Veum stated that what Norway observes is not new but it has become more sophisticated: the methodology is part of a broader pattern of Russian espionage, cyberattacks, sanctions violations, sabotage, and disruptive operations.
Among the adaptive behaviours: vessels sailing under the flags of other states, shifts in ownership structures of shipping companies, and use of civilian maritime cover to advance intelligence objectives.
Illustrative example: sanctions and restrictions on shipping firms
Norway has implemented several measures aimed at reducing Russian maritime intelligence risk. In July, the Norwegian government announced that two Russian shipping companies, Murman Sea Food and Norebo JSC, would be denied access to Norwegian ports and waters. These companies had already been sanctioned by the European Union on evidence suggesting involvement in intelligence activities and undermining EU security interests. The Norwegian government aligned with the EU’s listing.
Specifically:
- The EU cited that these companies were part of Russian state-sponsored surveillance targeting underwater infrastructure in Norwegian / allied sea-areas.
- Norway’s new law — Regulation on restrictive measures in light of Russia’s destabilizing activities — will incorporate those EU listings.
- Recent legislation also proposes to phase out pilot-certificates for Russian navigators in Norwegian waters. Under the proposal, existing certificates will not be renewed and no new ones issued. This is explicitly framed as a response to intelligence risks stemming from civilian vessels.
Why this matters for Norway’s business and infrastructure interests
Here’s what matters: Norway is a small state with high strategic importance. Its continental shelf hosts critical energy infrastructure; its maritime zones neighbour Russia’s Northern Fleet. That increases vulnerability. According to the 2025 National Threat Assessment from PST, Russia’s hybrid campaign has intensified.
For businesses—particularly in shipping, energy, subsea cables, fisheries—this means that risks formerly considered peripheral are now frontline issues:
- Ships operating under Russian control or influence may access zones near critical assets, undermining corporate security and national interests.
- Ownership structures that appear benign on paper may conceal intelligence or sabotage potential.
- Legal and regulatory regimes (port rights, pilot certificates, access to waters) are evolving and create new compliance imperatives.
Updated analysis: what new trends are emerging?
- Flagging and ownership deception: The transitional behaviour PST notes (vessels flagged under other nations or ownership shifted) suggests Russia is refining its masking techniques. The clearer the business-cover chain appears, the harder it is for host states (Norway included) to detect intelligence support activity early.
- Integration of cyber and maritime tools: Beyond physical ships, there is crossover with cyber / hybrid operations. For example, PST recently publicly attributed a cyber-attack on a Norwegian dam to pro-Russian actors. This suggests that maritime-related intelligence work may increasingly tie into cyber-enabled disruption of critical infrastructure.
- Regulatory tightening and business impact: With Norway aligning with the EU’s sanctions and introducing domestic regulation like the phase-out of Russian pilot certificates, businesses must anticipate tighter scrutiny, especially in maritime and adjacent sectors. The window for benign ambiguity is closing.
- Regional leverage via peripheral jurisdictions: The article mentions that the Faroe Islands may be being used as a staging post or access route by blacklisted Russian shipping entities. This underscores that Norway’s security concerns extend beyond its immediate waters to regional ecosystems. Business in the Nordic maritime domain needs to consider the broader regional regulatory and intelligence environment, not just national waters.
Sunning up…
Russia is adapting its tactics in the maritime intelligence domain—using civilian vessels, altered ownership and flag disguises to advance espionage and sabotage goals. For Norway, the message from PST is clear: don’t assume previous counter-measures are sufficient. In practice, this means greater vigilance in shipping access, ownership due diligence, port rights, pilot certification, and cross-sector linkages (cyber + maritime).
For Nordic business leaders—particularly in shipping, fisheries, energy, submarine cables and infrastructure—the key takeaway is this: risk is rising, disguise is improving, and the regulatory and intelligence environment is shifting under your feet. Proactive assessment and adaptation today may prevent disruption tomorrow.