NextFin News - Lithuanian Prime Minister Mindaugas Sinkevicius said on Tuesday there is no evidence that Russia is preparing an attack on a NATO member, even as a new rotation of roughly 1,000 US troops is set to arrive in the country in late October and Denmark's intelligence service warns of a "low but growing risk" of a limited Russian strike within months. The contrasting messages - calm from Vilnius, alarm from Copenhagen - frame the central tension on NATO's exposed eastern flank: allies are preparing for a war they do not expect to start imminently, and that preparation itself is reshaping Europe's defence spending and industrial priorities.
Speaking alongside NATO Secretary General Mark Rutte at the alliance's Brussels headquarters - his first visit in the role - Sinkevicius pushed back against a wave of warnings from European capitals.
"It is not increasing or decreasing," he said of the threat level. "Therefore, I think we should calmly do our work."
The Two Messages: Calm in Vilnius, Alarm Across the Baltic
The Danish Defence Intelligence Service, in a report published Thursday, said there is a "low but growing risk" that Russia will launch a limited military attack against one or several NATO countries bordering Russia in the coming months. The assessment is calibrated, not apocalyptic: a full-scale invasion remains highly unlikely, and Danish officials said any conventional build-up would take at least six months and would be difficult to conceal. The more plausible scenarios are narrower - isolated long-range strikes on infrastructure critical to supporting Ukraine, or the deployment of a limited number of troops without insignia, echoing the 2014 playbook in eastern Ukraine.
The stated purpose of such a move would not be territorial conquest but political disruption: to redirect European resources away from Ukraine and to sow division inside NATO if the alliance fails to agree on a collective response. That framing matters. It turns the threat from a military problem into a test of political cohesion - and it explains why every public statement from the flank now carries a double audience: reassurance at home, and a signal of unity to Moscow.
Sinkevicius's rebuttal was deliberate. Asked about the warnings at the joint press conference on 29 September, he declined to adopt the alarmist register. His point was not that the threat is absent - he has repeatedly said Lithuanians feel "constantly threatened" - but that the risk level is not currently rising, and that the appropriate response is steady work rather than heightened rhetoric. That distinction is easy to miss and worth stating plainly: Lithuania is not contradicting Denmark's assessment so much as refusing to let it dictate the tempo of its own response.
US Troops Return: The Rotation That Ended a Summer of Uncertainty
While the prime minister played down the immediacy of the threat, the hardware tells a different part of the story. Defence Minister Robertas Kaunas confirmed that two US Army battalions will begin arriving in Lithuania at the end of October - a heavy battalion equipped with Abrams tanks and an engineer battalion - on a nine-month rotation. The total force is expected to be around 1,000 personnel, consistent with the armoured battalion of about 1,000 troops the US has usually deployed in Lithuania since 2019.
The announcement closed a period of public uncertainty. Lithuania said in June that Washington was reviewing its future military presence in the country, against a backdrop of reported US troop withdrawals from European bases. President Gitanas Nauseda said on 22 September, after receiving confirmation, that "the new rotation of US troops is already on its way to Lithuania," and thanked President Donald Trump and the US administration.
"The US military presence in Lithuania is an indispensable part of our deterrence and collective defence," Nauseda said.
The timing is not coincidental. The rotation lands as Lithuania launches Vyčio Skliautas 2026, its largest annual national mobilisation exercise, running from 25 September to 3 October. The drills involve roughly 3,000 officials and representatives of companies and NGOs, plus 1,000 volunteers, and test everything from public warning sirens and mobile-phone emergency alerts to evacuation procedures in Vilnius and municipalities along the Belarusian border. On 29 September - the day of the Rutte meeting - authorities tested warning systems across the country.
The Drone War Above the Flank
The immediate trigger for the heightened alert is a series of airspace violations. On 15 September, Italian jets deployed by NATO from Šiauliai Air Base shot down a drone that had entered Lithuanian airspace.
"This is collective defence in action," Rutte said in Brussels.
Lithuanian Defence Minister Robertas Kaunas said the drone came from the direction of Belarus, Lithuania's neighbour and Russia's closest ally, though the origin has not been formally attributed to Moscow.
Rutte used the incident to argue that NATO's response is adapting to an asymmetric cost structure.
"We will strengthen cheaper counter-drone defences, so we are not using high-end jets against low-cost threats," he said, pointing to the alliance's Drone Edge initiative and a multi-layered, 360-degree air and missile defence approach.
The economics are straightforward: a fighter sortie costs orders of magnitude more than the drone it intercepts, and a campaign designed to exhaust that calculus can drain a defender even without a single bomb landing. The Baltic states have asked the European Commission to help fund €500 million in drone defences; the Commission said it is "carefully assessing" the request.
For Rutte, the vocabulary itself needed correcting. Asked whether allies should stop calling these incidents "hybrid threats," he replied: "It sounds a bit 'cuddly'... these are grey zone tactics." His answer on response was deliberately opaque: "We have all the response options we need. You will not always see them public. They will not always be symmetric. It will not always be tit for tat."
The Money: 5.38% of GDP and the New Burden-Sharing Benchmark
The most concrete number in the room was Lithuania's defence budget. Rutte said Lithuania is expected to reach 5.38% of GDP in core defence spending this year - far above NATO's 2% floor and the highest burden-sharing level in the alliance. On Ukraine, he noted Lithuania's commitment of at least 0.25% of GDP annually in military assistance, $38 million contributed directly into Ukraine's defence industry, and support for energy infrastructure and railway locomotives ahead of winter.
That spending level is the real story for markets. Lithuania is no longer arguing for the 2% target; it is living at a level that most allies treat as politically unreachable, and it is doing so while running a budget deficit that the prime minister has said is likely to exceed 3% of GDP next year. The tension between fiscal rules and defence needs is no longer theoretical in Vilnius - it is the actual trade-off on the table. Other European capitals will face versions of the same choice, and Lithuania's path - high spending, fiscal strain, industrial mobilisation - is the template they will be measured against.
The industrial footprint is already visible. On 25 September, Lithuania's economy and defence ministers signed a cooperation agreement with US defence technology company Mach Industries. The cross-border evacuation planning with Poland - part of a wider northern European agreement among ten nations signed in March - is not just a civil-protection exercise; it is procurement-adjacent infrastructure that assumes sustained threat conditions. Poland's Podlaskie region is preparing to serve as a transit and reception corridor for evacuees from Lithuania, Latvia and Estonia.
Cyclical Alert or Structural Shift? The Verdict
The central analytical question is whether this is a cyclical spike in tension - a wave that will recede - or a structural regime shift that will not revert on its own. The evidence points to structural, for three reasons.
First, the mechanism is not a single crisis but a sustained campaign below the Article 5 threshold. Drone incursions, sabotage, cyberattacks and undersea-cable damage are designed to impose recurring costs and test response protocols without triggering collective defence. That pattern does not self-correct; it persists as long as it remains cheap and effective for the attacker. Rutte's own language - "reckless campaign of hostile actions" - describes a continuous state, not an episode.
Second, the response is institutional, not episodic. Annual mobilisation drills of this scale, cross-border evacuation treaties, permanent forward land forces, and defence spending locked above 5% of GDP are not reversible on an election cycle. Once a country rebuilds its civil-defence architecture and reorients its budget around a wartime footing, the baseline does not return to the pre-2022 normal. The ten-nation evacuation agreement and the Poland-Lithuania bilateral plan create durable infrastructure and procedures that outlast any single alert.
Third, the geography is fixed. Lithuania shares a land border with the Russian enclave of Kaliningrad and sits astride the Suwałki Corridor, the narrow strip of territory linking the Baltic states to Poland and the rest of NATO. No diplomatic outcome in Ukraine changes that map. Any security architecture for the region has to assume a permanently contested frontier, which is precisely what the current build-up - US battalions, Rūdninkai Training Area expansion, air-defence procurement - is priced for.
The cyclical counter-read has merit on timing. Danish intelligence explicitly described the risk as "low," and a full-scale invasion would require six months of visible preparation. Sinkevicius is right that nothing in the current data shows an imminent build-up, and markets that price a near-term conventional attack on NATO are pricing a tail, not a base case. But the cyclical argument addresses the calendar, not the regime. The structural call is that the threat environment itself - the frequency of sub-threshold incidents, the defence-spending floor, the mobilisation posture - has shifted up and will stay there.
The Counter-Thesis and the Signal That Would Break It
The strongest case against the structural reading is the one Sinkevicius is making: that the current alert is being driven by politics and perception as much as by capability, and that Russia - failing on the battlefield in Ukraine, as Rutte put it - lacks the capacity for a deliberate escalation against NATO. On this view, the Danish warning and the evacuation drills are prudent hedging, not evidence of a new normal, and the appropriate response is exactly the "calm work" Vilnius describes. If Russia's hybrid campaign is a sign of weakness rather than strength - a desperate attempt to divide the alliance because conventional options are closed - then the structural-shift thesis overstates the danger.
That counter-thesis is serious and internally coherent. It fails on one test: it cannot explain why the sub-threshold campaign would stop if it is working. A tactic that imposes costs, diverts air defences, and keeps frontline populations on edge has no obvious off-switch from Moscow's perspective. The burden of proof is on those who expect reversion to show the mechanism that would produce it.
The falsifying signal is specific and observable. If confirmed Russian drone and sabotage incidents against NATO territory fall back to their pre-September frequency for two consecutive months - and if the Danish assessment's "coming months" window closes without a limited strike or insignia-less deployment - then the structural-escalation call is wrong and the episode should be read as a cyclical pressure campaign that peaked and receded. Watch the monthly count of confirmed airspace violations and the Danish intelligence follow-up assessment.
What Comes Next: Three Horizons
Short term (weeks): The Vyčio Skliautas 2026 drills run through 3 October, with further warning-system tests and evacuation exercises. The late-October arrival of the two US battalions will be the next concrete signal of allied posture. Any confirmed drone incursion during this window would immediately re-price the risk premium on the flank.
Medium term (months): The European Commission's decision on the Baltic €500 million drone-defence request will set the pace for allied funding of counter-UAS capability. The Danish assessment's "coming months" window - effectively the autumn and early winter of 2026 - is the period in which a limited strike or grey-zone deployment would most plausibly occur if the assessment holds.
Long term (years): Lithuania's 5.38%-of-GDP defence spending and the permanent forward-presence infrastructure point to a Europe in which the eastern flank is fortified as a structural fact, not a crisis response. The fiscal strain - deficits above 3% - will force political choices across the continent about how much of the post-war settlement Europeans are willing to fund.
The base case is continued sub-threshold pressure without conventional escalation; the upside case is a negotiated de-escalation in Ukraine that reduces the tempo of hybrid incidents; the downside case is a limited Russian strike or insignia-less deployment against a bordering NATO state that forces the alliance to prove whether its response options are real or rhetorical.
Lithuania is preparing for a war it does not expect to start tomorrow - and that is precisely why the market should treat the eastern flank's rearmament as permanent, not cyclical. The drills, the evacuation corridors and the 5.38% defence burden are not a reaction to a headline; they are the price of a frontier that stopped being peaceful years ago.
更多独家洞察尽在 nextfin.ai.
