How a wave of false bomb threats is disrupting air travel in Europe

A wave of emailed bomb threats has disrupted flights bound for European cities. No explosives have been discovered, but warnings have forced aircraft to change course, land unexpectedly, and undergo inspections. The disruption matters because every warning triggers serious safety procedures, even when the threat proves false.

The effects have included diversions and evacuations. Four countries scrambled fighter jets to escort affected flights. Airports in Rome, Prague, and Madrid received warnings by email. Three Madrid flights were targeted in less than 20 minutes, suggesting an automated or coordinated campaign, although that does not prove how many people were involved.

The campaign is growing. The first alert appeared Monday, followed by seven on Tuesday and at least 27 on Thursday. EASA said each individual threat poses a low risk, but repeated diversions create additional pressure across aviation. Authorities still have not identified the perpetrators or found explosives.

A false bomb threat is a message claiming that explosives are aboard an aircraft when no bomb is ultimately found. It is not harmless just because it is untrue. Airlines, airports, and security authorities must initially treat the warning as potentially real because an actual explosion aboard an aircraft could cause enormous loss of life.

The article describes a low threshold for taking warnings seriously. If the airline and security authorities consider one credible, pilots prepare to land within a maximum of 30 minutes. After landing, bomb-disposal teams inspect the aircraft. The threat therefore produces a genuine emergency response, even when investigators later find nothing dangerous.

This creates an exploitable weakness. Sending an email costs nothing, but diverting an aircraft costs many millions, according to Commander Soren Sorensen. EASA said the risk from each individual false threat is low. Still, a growing stream of warnings can overload aviation systems and force repeated costly precautions.

The campaign is large enough to cross borders and disrupt aviation in many parts of Europe. Reuters counted at least 35 flights bound for European cities receiving false bomb threats since Monday. ICAO said at least 16 countries were affected as origins, destinations, or unscheduled stops for those flights.

The numbers rose rapidly. One alert appeared Monday, seven followed Tuesday, and at least 27 arrived Thursday. Madrid received three emails in under 20 minutes, affecting three flights. Warnings also reached airports in Rome, Prague, and Madrid. No explosives were found, but aircraft were diverted or evacuated, and four countries sent fighter jets to escort affected flights.

The full scale remains uncertain because the perpetrators have not been identified and no person or group has claimed responsibility. The article calls the frequency unprecedented for the aviation sector. EASA describes each individual risk as low, but the combined pressure from many incidents is increasing across the system.

When authorities judge a bomb warning credible, the cockpit response is immediate. Pilots prepare to land within a maximum of 30 minutes, according to Francisco Cruz of Spain’s Airline Pilots Union. The goal is to move the aircraft onto the ground quickly, where specialists can respond under controlled conditions.

The warning also activates a wider chain. Air traffic control may alert the crew, as happened with an Aer Lingus flight from Dublin after Italian authorities notified the office of the French prime minister. Once the plane lands, bomb-disposal teams inspect it as quickly as possible. Four countries scrambled fighter jets to escort affected flights, adding another layer of protection.

These actions occur even when the threat later proves false. No explosives have been found in the known cases. Still, aviation authorities cannot safely dismiss a warning at the outset. Each response protects passengers, but diversions, evacuations, escorts, and inspections place extra pressure and expense on the system.

False warnings exploit aviation’s safety-first design. Authorities must respond to a credible threat even when the chance of danger is low, because the consequences of an actual incident aboard an aircraft could be enormous. That makes every warning operationally serious and gives attackers a cheap way to create disruption.

The response consumes many resources. Aircraft may divert, land, and be evacuated. Bomb-disposal teams then inspect them, while air traffic control, airport operators, security authorities, and sometimes fighter jets become involved. Commander Soren Sorensen said diverting an aircraft costs many millions, whereas sending a false bomb-threat email costs nothing.

The pressure grows when warnings arrive in batches. Three Madrid emails came within 20 minutes, and at least 27 threats arrived Thursday. EASA said each individual false threat poses a low risk, but repeated diversions place additional pressure on the system. Even without explosives, the campaign can disrupt schedules and consume expensive emergency capacity.

Investigators need to connect the digital message to the person or organization behind it. An email address alone cannot show who created the account, who controlled it when the threat was sent, or whether someone else acted as an intermediary. Establishing those links is necessary before assigning responsibility.

The timing provides clues but not proof. Three Madrid emails arrived in less than 20 minutes, pointing to an automated or coordinated campaign. One Rome email used the name of a Russian ultranationalist and misogynistic movement. However, experts warn that a group can be falsely named, and the person using that name may not be Russian.

Determining whether one person, a coordinated group, or a state-linked campaign is involved may take months. Experts place the threats in the broader context of Russia’s hybrid warfare campaign, but they stop short of attributing them to Moscow. No intelligence service or official body has publicly identified a state actor.

The article shows aviation safety as a coordinated chain rather than one single system. Airport operators and security authorities receive or assess the warning. If it appears credible, air traffic control passes the alert to the crew, and pilots prepare to land quickly. This layered response helps protect passengers while investigators check the aircraft.

The Aer Lingus example shows the mechanism. Italian authorities passed the alert to the office of French Prime Minister Sébastien Lecornu. That office notified air traffic control, which alerted the crew. After landing, bomb-disposal teams inspected the aircraft. Four countries also scrambled fighter jets to escort affected flights, adding military support when required.

International cooperation extends beyond the immediate emergency. ICAO tracked effects across at least 16 countries, while European authorities coordinated a previous investigation into school threats. The article does not describe every security system, but it shows why shared information and cross-border coordination matter as threats move through international routes.