Red Label
Red Label
Counterpoint

Control Risks' Grinch Analysis Misreads Moscow's Response Calculus

Why Russia's maritime constraint is situational, not structural, and where the operational risk actually sits

Red Label Intelligence
1,100+
Shadow Fleet Tankers
733
GPS Incidents (2025)
7
Cable Cuts (Nov-Jan)
66%
Unknown Insurers

The Control Risks Assessment

Control Risks framed France's January 22 seizure of the Grinch tanker as a "shift from talk to action," marking the start of systematic efforts by NATO members to disrupt Russian oil exports physically. The analysis predicted further interdictions at NATO-dominated chokepoints while keeping actions limited to stateless vessels.

Their core thesis: Russia's appetite to respond "appears constrained by wider Russia-West dynamics, the war in Ukraine, a deteriorating economic outlook, and a stretched naval fleet." Moscow would likely answer with "an inconsequential show of force" and keep up existing grey zone activities.

The "muted intent" assessment treats Moscow's constraint as structural. The operational evidence suggests it's situational, and the constraint isn't appetite but domain selection.

The Interdictions

Date Vessel Location Action Value
2025-01-10 Tavian Baltic (German waters) Entry denied N/A
2025-02 Eventin Baltic (off Rügen) Seized, confiscated €40M+
2026-01-22 Grinch Mediterranean (Spain-Morocco) Seized, diverted to Marseille $35M

All three vessels were stateless or falsely flagged. The Grinch sailed from Murmansk under a Comoros flag the International Maritime Organisation confirmed was false. The Tavian appeared in one database as a 2025-built Tanzanian-flagged vessel and in authoritative systems as an older Cameroon-flagged ship with official status "never existed."

Control Risks correctly identified the pattern: NATO members are targeting the weakest link in the supply chain. Interdicting stateless vessels avoids the legal complications of detaining flagged ships or the military risk of confronting escorted tankers.

Three Problems with the Assessment

1. Constraint is Situational, Not Structural

The analysis treats Moscow's limited maritime response capacity as permanent, citing economic pressures, naval overstretch, and the Ukraine war. But Russia's operational history shows a pattern of calibrated escalation in domains where it has asymmetric advantages.

The constraint isn't appetite. It's choosing where to respond. Russia has demonstrated consistent willingness to act against subsea infrastructure, deploy GPS jamming at scale, and harass reconnaissance near critical energy routes. These are the operational responses Moscow has actually deployed, not theoretical naval exercises.

Between November 2024 and January 2025, seven subsea cables were cut in the Baltic Sea. On Christmas Day 2024, the Estlink 2 electricity cable between Finland and Estonia was damaged, with the Cook Islands-flagged tanker Eagle S (linked to Russia's shadow fleet) suspected of dragging its anchor across the seabed. Western intelligence officials believe the damage was either deliberate or orchestrated by Russian intelligence.

Interactive map: Seven cable cuts in 90 days (Nov 2024-Jan 2025). Click markers for details. Orange = November, Red = December/January.

2. The Maritime Focus Looks in the Wrong Direction

Control Risks mentions onshore sabotage as a secondary toolkit Moscow would "primarily reach for." This reverses the demonstrated priority. Russia's preferred response mechanism is critical infrastructure disruption, not ship detentions in the Gulf of Finland.

GPS Jamming Incidents in Baltic Sea (2023-2025) 800 400 0 2023 2024 2025 55 495 733 Source: Spire Maritime Intelligence, 2025

GPS jamming in the Baltic Sea jumped from 55 incidents in 2023 to 733 in 2025, a 13x increase. Individual NATO members report dramatic escalation: Poland recorded 2,732 cases in January 2025 alone. Latvia's Electronic Communications Office documented 820 interference events in 2024 compared to 26 in 2022. In Estonia, 85% of flights were affected by GPS interference.

Kaliningrad Oblast has emerged as the Baltic's most persistent GNSS interference zone, hosting both known electronic warfare installations and suspected mobile jammers. In October 2024, researchers observed 7-hour stretches of disruption affecting all four major satellite constellations (GPS, GLONASS, Galileo, BeiDou). The International Civil Aviation Organization condemned Russia for violations of the 1944 Chicago Convention in October 2025.

3. The Revenue Erosion Threshold Doesn't Hold

Control Risks conditions escalatory responses on interdictions that "materially erode Russia's oil revenues." This assumes a causal link that's difficult to establish. Russia's shadow fleet comprises 1,100-1,240 tankers (per Ukrainian Foreign Intelligence) operating through complex beneficial ownership structures.

Seizing a handful of stateless vessels is unlikely to impact crude export volumes. The fleet adapts, re-flags, and reroutes. Russian crude exports reached 3.7 million barrels per day in September 2025, a seasonal high. Shadow tankers' share of exports rose to 69%, up 6% month-on-month.

If NATO wanted to erode revenues, the target would be the payment and insurance mechanisms that enable the shadow fleet. Two-thirds of ships carrying Russian oil have "unknown" insurers. Many vessels present falsified certificates or list insurers that no longer exist. Western sanctions in January 2025 targeted 183 vessels, removing approximately 46% of Russia's proprietary shadow fleet from normal commercial service by March 2025.

The vulnerability sits in the re-insurance ecosystem sustained by a narrow set of domestic and offshore actors, not in individual tanker seizures.

What Control Risks Got Right

The geographic vulnerability assessment is accurate. Russia's export infrastructure is concentrated in chokepoints NATO can monitor. Around 15-20% of Russian crude still moves through the Baltic, particularly through Primorsk (the largest Russian oil port in the Gulf of Finland).

The focus on stateless vessels as the likely interdiction target is also correct. Germany's January 10 denial of entry to the Tavian marked the first reported case of such a vessel being blocked from entering a nation's territorial waters outright. This sets a precedent NATO members can apply without triggering Article 5 complications.

The Baltic Sea is relatively shallow, meaning ships only need to drag anchors along the seabed to damage cables. This creates both accidental risk and plausible deniability for deliberate sabotage operations.

Where the Operational Risk Actually Sits

Moscow's response calculus isn't binary (constrained vs. escalatory). Russia has consistently demonstrated a third option: persistent, deniable disruption below the threshold that triggers Article 5 responses.

Demonstrated Response Pattern

  • • Subsea infrastructure attacks (7 cables, Nov 2024-Jan 2025)
  • • GPS jamming escalation (13x increase, 2023-2025)
  • • Shadow fleet anchor-dragging incidents
  • • Reconnaissance harassment near energy routes

Predicted But Not Observed

  • • Tit-for-tat ship detentions in Gulf of Finland
  • • Naval exercises as "show of force"
  • • Expanded naval escorts for tankers
  • • Military personnel embarked on tankers

The operational risk sits in domains where Russia can impose costs without triggering NATO collective defense mechanisms. Subsea cables, GPS interference, and "accidental" anchor-dragging all offer plausible deniability while demonstrating capability.

NATO's January 2025 launch of "Baltic Sentry" to strengthen critical infrastructure protection suggests alliance planners recognize this threat vector. Secretary General Mark Rutte stated they would work together to ensure "the safety and security of critical infrastructure," a tacit acknowledgment that the vulnerability isn't in ship seizures but in the connective tissue of European energy and communications systems.

The Grinch seizure may prompt retaliation, but not where Control Risks is looking. Watch subsea infrastructure, not the Gulf of Finland.

Red Label Assessment

Control Risks' analysis correctly identifies the interdiction pattern but miscategorizes Russia's constraint. The "muted intent" framing assumes structural limitations when the evidence points to deliberate domain selection.

Russia has avoided symmetric maritime responses (ship-for-ship detentions, naval confrontations) not because it lacks capability or appetite, but because those responses play to NATO's strengths. Instead, Moscow has escalated systematically in domains where it holds asymmetric advantages: subsea infrastructure sabotage, electronic warfare, and plausibly deniable cable-cutting operations.

The revenue erosion thesis also misses the mark. Seizing stateless tankers doesn't materially impact Russia's 3.7 million barrel-per-day crude export operation when the shadow fleet comprises 1,100+ vessels. The real vulnerability is in the insurance and payment mechanisms that sustain the fleet, where Western sanctions removed 46% of capacity in early 2025.

For due diligence and risk assessment: Don't watch the Baltic Sea for tit-for-tat ship seizures. Watch the subsea cable maps, GPS interference patterns, and the re-insurance networks that make the shadow fleet commercially viable.

Data Sources

Source Data Date
Al Jazeera Grinch tanker seizure, $35M cargo value 2026
gCaptain Germany's Tavian interdiction, first territorial denial 2025
Der Spiegel / The Moscow Times Eventin tanker confiscation, €40M+ value 2025
Ukrainian Foreign Intelligence / UNITED24 Shadow fleet size: 1,100+ tankers 2025
Kpler Russian crude exports: 3.7 mbd (September 2025) 2025
Spire Maritime Intelligence GPS jamming incidents in Baltic: 733 (2025), 495 (2024), 55 (2023) 2025
Wikipedia / Multiple Sources Baltic subsea cable disruptions: 7 cuts (Nov 2024-Jan 2025) 2024
Submarine Networks Eagle S / Estlink 2 cable damage (Christmas Day 2024) 2024
International Institute for Strategic Studies (IISS) Shadow fleet insurance mechanisms, two-thirds with unknown insurers 2025
Navigating Russia Sanctions impact: 46% of shadow fleet capacity removed by March 2025 2025
ICAO / AeroTime International condemnation of Russian GPS jamming 2025
Carnegie Endowment for International Peace Baltic Sea infrastructure sabotage patterns 2025