After the incursion: what NATO, the EU and Poland can—and should—do next
- Matthew Parish
- Sep 10, 2025
- 4 min read

What happened and why it matters
Overnight on 9–10 September 2025, multiple Russian Shahed-type drones violated Polish airspace during a large strike package against Ukraine. Poland—supported by allied aircraft—shot several down, in what appears to be the first time NATO aircraft have engaged threats in allied airspace since the full-scale war began. Warsaw has framed the breach as an act of aggression and has requested NATO consultations under Article 4. Russia has denied intent, suggesting navigation interference; allied leaders have called the incident deliberate and escalatory.
The episode is strategically important for three reasons. First, it demonstrates that spill-over risk is no longer hypothetical. Second, it tests NATO’s Integrated Air and Missile Defence (IAMD) in real time. Third, it creates pressure for a coherent, collective response that strengthens deterrence without leaping to armed retaliation.
Legal and strategic frameworks
Sovereignty and due diligence. Repeated cross-border drone incursions, whether “strays” or “tests”, breach Polish sovereignty and raise the standard of due diligence required of the launching state. That the incursion occurred amidst a mass strike on Ukraine amplifies the danger to civilians and critical infrastructure in a NATO and EU member state.
Article 4 vs Article 5. Article 4 consultations under the NATO Treaty, which Poland has requested (it is only the seventh time in the history of NATO that this has been done) are appropriate: allies meet when territorial integrity or security of a member state is threatened. Treating this as an intentional but limited probe supports a graduated response short of collective defence while still signalling resolve.
Options for NATO
Boost the IAMD posture on the eastern flank.
Establish continuous AWACS orbits over Poland and the Baltic approaches; pre-position tankers and deploy additional ground-based air-defence (GBAD) batteries to close seams along the Belarus–Poland frontier.
Expand the standing counter-UAS (unmanned aerial systems) tasking within NATO Air Policing, including persistent look-down radar and passive radio frequency sensing to catch low-flying Shahed-class drones earlier.
Real-time ISR (intelligence, surveillance, reconnaissance) and cueing to Ukraine (non-kinetic, outside combat).
Provide continuous, rapid sensor-to-shooter data to Ukrainian air defences from NATO platforms outside Ukrainian airspace. This tightens Ukrainian intercept windows and reduces overflow towards NATO territory without NATO entering combat.
Cross-border electronic protection and jamming corridors.
From NATO soil, intensify GNSS (global satellite navigation systems; there are several, of which GPS is one) spoof-resilience measures and lawful spectrum operations that degrade hostile drone navigation near borders. Properly calibrated, this is non-lethal, defensive support that keeps wayward drones out of Poland, Slovakia, Hungary and Romania.
Visible exercises and force mobility.
Conduct short-notice air and GBAD drills in Poland and Lithuania, integrating Dutch F-35s, Polish F-16s, and allied AWACS as already seen in last night’s response—turning ad-hoc reaction into routine readiness.
Automatic consequence framework.
Allies can agree that further incursions will trigger predefined non-lethal steps (additional GBAD rotations; more ISR orbits; expanded jamming coverage) without fresh debate every time.
Options for the European Union
Sanctions that bite at the drone supply chain.
Fast-track an EU package targeting entities tied to Russia’s Shahed integration, avionics, engines, explosives precursors and logistics, with sharper secondary sanctions. Pair this with tighter enforcement against Iranian and Belarusian facilitators.
Border-region resilience funding.
Use the EU Civil Protection Mechanism and cohesion funds to harden critical infrastructure in eastern Poland (power nodes, rail hubs, fuel depots) and to finance debris recovery, forensics and public warning systems after incursions.
Legal and diplomatic pressure.
Coordinate attribution releases and lodge formal protests with the ICAO (International Civil Aviation Organisation) and relevant fora (noting state responsibility even for “errant” military drones), while ensuring unity messaging with NATO.
Options for Poland
Article 4 leadership and rules of engagement clarity.
Keep convening allies to lock in the automatic consequence framework and publish a clear, measured national ROE (rules of engagement) for repeat violations, reinforcing predictability and deterrence.
Densify the border counter-UAS lattice.
Accelerate procurement and emplacement of layered sensors—gap-filling radars, EO/IR (electro-optical / infra-red) towers, passive radio frequency (RF) detectors—and integrate civil aviation feeds to close low-altitude blind spots along the Belarusian frontier.
Civil protection measures.
Refine siren, SMS and app-based alerts for eastern voivodeships (Polish regions); pre-designate shelter procedures for rail and energy nodes; and conduct regular debris-handling drills with police and firefighters, as already seen today.
Strategic communication.
Release declassified tracks, intercept footage and debris forensics quickly to outpace disinformation and maintain allied unity on intent and attribution.
Risks and how to manage them
Escalation management. Non-lethal measures should be paired with private de-confliction channels to Moscow to reduce miscalculation.
Alliance fatigue. Automating responses via Article 4 outcomes avoids piecemeal debates and shows publics that measured firmness is routine, not a march to war.
Summary: a substantial non-lethal escalation package
Given last night’s deliberate, multi-hour violation—and its novelty in NATO airspace—a firmer stance is warranted short of kinetic retaliation. The most effective package combines visibility, capability and predictability:
NATO Border Shield (non-kinetic). Continuous AWACS and ISR orbits over Poland with pre-positioned tankers; an expanded IAMD rotation of GBAD units to eastern Poland; and a standing counter-UAS cell fusing Polish, Dutch, Italian and other allied feeds for rapid cueing to Ukraine.
Electronic “guard rails”. Permanent, declared jamming corridors along the Belarus–Poland border from NATO territory to degrade hostile drone navigation before it crosses the line—paired with NOTAMs to keep civil air traffic safe.
EU Supply-Chain Squeeze. An immediate sanctions mini-package targeting Russia’s drone ecosystem and its facilitators, with enforcement resources and a public corporate-watchlist to deter circumvention.
Resilience surge inside Poland. EU-funded hardening of critical infrastructure nodes in Lublin, Podlaskie and Podkarpackie; upgraded alerting; and standardised debris forensics protocols to speed attribution.
An allied “automaticity” pledge. A written, public commitment that any further breach triggers the above measures incrementally plus an additional ISR orbit and one extra GBAD battery—no fresh vote required.
This approach is visible enough to deter, practical enough to implement at pace, and calibrated to avoid uncontrolled escalation. It strengthens Poland’s security, hardens the EU’s borderlands, and preserves NATO unity—while signalling to Moscow that even limited probes now carry certain, cumulative costs.




