Deniable by Design: The Decades-Long Process of Turning Migration into a Weapon
The operation at Ceuta on July 31st 2026 was not an improvisation.
Between 50,000 and 60,000 people crossed from Morocco into the Spanish exclave within roughly 24 hours. At least 72 confirmed dead — some drowned, some crushed in a stampede at the Tarajal breakwater. Almost all had returned to Morocco within 48 hours. The US Congress had allocated $40 million to Morocco two weeks earlier and embedded committee language formally questioning Spanish sovereignty over Ceuta. The State Department blamed Spain within hours of the crossing.
None of this was new. The weapon had been in development for decades — documented in academic literature since 2010, tested across multiple European borders since at least 2015, and pre-tested at this exact location in 2021. What we witnessed at Ceuta was a production deployment: the most sophisticated iteration yet of an instrument that Europe, through its own border externalisation policies, helped build.
The question is not whether this weapon will be used again. It is why Europe, after more than fifty documented deployments over seventy-five years, still has no doctrine to counter it — and whether it can build one without first admitting its own role in the weapon's development.
The Academic Foundation
In 2010, Kelly Greenhill of Tufts University and MIT published Weapons of Mass Migration: Forced Displacement, Coercion, and Foreign Policy — the first systematic examination of what she called coercive engineered migration: the deliberate creation, manipulation, or exploitation of population movements to extract political, military, or economic concessions from target states.
Greenhill documented more than fifty cases since 1951, with a success rate of well over half. The weapon was, as she put it, hiding in plain sight.
The mechanism is consistent across deployments. The coercer exploits two simultaneous vulnerabilities in the target: the straightforward capacity problem of managing a sudden mass influx, and what Greenhill calls norms-enhanced political blackmail — the exploitation of the target's own legal and normative commitments to those fleeing violence, persecution, or privation. The more seriously a democracy takes its humanitarian obligations, the more exposed it is. The asylum framework, designed to protect the vulnerable, becomes the attack surface.
Greenhill's warning, published sixteen years before Ceuta 2026, was precise: unless policymakers confront the forces that enable weaponised migration, the favoured policy responses seem destined to increase, rather than curtail, its use.
They did not confront those forces. The favoured policy responses increased its use.
Europe Built the Vulnerability
Before tracing the weapon's development, one structural point must be stated plainly, because it is the part of this story Europe least wants to hear.
The Barcelona-based CIDOB institute put it precisely after the 2021 Ceuta operation: at the external borders of the European Union, the use of migration as a political weapon is the direct consequence of Europe's own externalisation policies. By forcing neighbouring states to control its borders for it — offering development aid, trade agreements, and visa arrangements as incentives — Europe automatically put itself in their hands. Now it is they who set the terms. Dependency has made Europe a prisoner of its own gatekeepers.
The weapon is not purely an autocratic invention. It is the predictable consequence of an architecture in which the EU pays third countries to perform border enforcement it is unwilling to perform itself, and in which the gatekeeper's leverage grows with every payment. Every externalisation agreement is also a weapons transfer.
The empirical proof arrived in the 2026 migration statistics. Migration flows from Turkey declined 59% — the direct dividend of the EU-Turkey arrangement under which Europe paid €6 billion and made significant political concessions. The weapon was purchased off the battlefield. Flows from Libya, by contrast, declined only 4% — because post-intervention Libya has no coherent state operator to negotiate with, and therefore no one to whom Europe can pay to turn the flow off.
The comparison is the entire dynamic in two numbers. Where a gatekeeper state exists, migration pressure is a purchasable commodity — which means it is also a deployable weapon. Where the gatekeeper has been destroyed, as NATO's 2011 intervention destroyed Gaddafi's Libya, the pressure becomes unmanageable chaos. Europe eliminated the operator and lost the off-switch. The Libya figure is not a policy failure; it is the long-tail consequence of removing a gatekeeper without replacing its governance function.
This is the environment in which the weapon developed. Europe created the market. The operators refined the product.
The Development Programme: A Timeline
Phase One — The Gaddafi Prototype
Muammar Gaddafi repeatedly threatened to flood Europe with migrants unless granted sanctions relief, billions in aid, and political concessions. This was the threat version of the weapon — coercion through credible capability rather than deployment. It worked often enough to establish the operating principle: a state with an exploitable migrant population, a border adjacent to European territory, and demonstrated willingness has leverage over European governments regardless of formal relationships.
Gaddafi rarely needed to deploy. The credible threat sufficed. Every subsequent operator noted this.
Phase Two — Turkey's Serial Deployments (2015–2020)
Turkey under Erdoğan conducted serial coercive engineered migration against the EU from 2015, repeatedly threatening to open — and at Pazarkule in February 2020, actually opening — the flow of Syrian refugees toward Greece, with Turkish forces documented facilitating crossings while blocking returns.
The 2016 EU-Turkey Statement — €6 billion paid for migration cooperation — was the weapon's most visible payout. Turkey demonstrated three advances over the prototype: actual deployment forces the target into visible policy choices under public pressure; a genuine refugee population provides humanitarian cover that makes any response politically costly; and the EU's willingness to pay proved the weapon produced measurable returns.
The 59% decline in flows from Turkey by 2026 is the receipt. The weapon worked, the price was paid, the instrument was returned to storage — available for redeployment whenever the terms need renegotiating.
Phase Three — Russia's Early Finnish Test (2015–2016)
Russia pushed undocumented third-country nationals across Finnish Arctic border crossings in 2015–2016. Limited scale, exploratory purpose: a test of the instrument against a NATO-adjacent target at low stakes. Finland managed the crossings and noted the breach of established border protocols without formally characterising it as a hybrid operation. Russia confirmed the capability worked below the threshold of formal response, and filed it.
Phase Four — Morocco's Pre-Production Test at Ceuta (May 2021)
On May 17th 2021, one week after Morocco's foreign ministry warned that Spain's decision to hospitalise Polisario Front leader Brahim Ghali would carry "consequences," Moroccan police temporarily eased border controls, opened border fence gates, and took no action to stop entry. Between 8,000 and 10,000 people entered Ceuta over two days — at least 1,200 of them unaccompanied minors, a third of the total by some counts.
The European Parliament passed a resolution specifically condemning Morocco's use of minors — a breach of the UN Convention on the Rights of the Child deployed as a pressure instrument. Spain's defence minister called it blackmail. Most crossers were returned within days.
The weapon delivered. The diplomatic rupture was repaired only when Spain reversed its Western Sahara policy in 2022, backing Morocco's autonomy plan. A European foreign policy position was changed by directed human movement. The lessons filed: the Ceuta geography works; minors generate sustained pressure after the main flow returns; Spain pays.
The 2021 operation was roughly one-sixth the scale of what followed. It was a pre-production test.
Phase Five — Belarus at the Polish Border (2021)
Months after Morocco's Ceuta test, Lukashenko enticed thousands of migrants — primarily Iraqi and Syrian Kurds — to Belarus with promises of EU access, flying them into Minsk on special visas and busing them to the Polish, Lithuanian, and Latvian borders, where they were left in winter encampments.
The refinements: commercial aviation and travel agency networks for recruitment created a deniability layer — Belarus was not sending migrants, merely issuing visas. Winter timing maximised the humanitarian pressure dimension. Simultaneous pressure on three borders diluted response capacity. The EU sanctioned Belarus and formally recognised the operation as hybrid warfare — the only deployment in this timeline it has ever named as such, because the operator was already an adversary.
The flows were eventually contained: 40,000 attempted crossings in 2021 fell to 235 in the first half of 2026 — though Belarus has since redirected pressure toward the Baltic states, forcing Latvia to seal its southeastern border in July 2026. The weapon was not decommissioned. It was re-aimed.
Phase Six — Russia's Second Finnish Operation (November 2023)
Approximately 1,300 asylum seekers crossed Finland's eastern border from Russia over six weeks, with Russian state infrastructure visibly facilitating: busing between crossing points, tent camps, hot meals. Finland closed the entire eastern border by December 2023 and passed the Act on Temporary Measures to Combat Instrumentalised Migration by supermajority in July 2024, enabling rejection and return without asylum processing.
The flow stopped instantly upon closure — eight illegal crossings in all of 2024 after January. The operation tested the institutional resilience of NATO's newest member. The answer: high, and faster than anticipated. Russia noted the legislative counter-response for study.
Phase Seven — Ceuta, July 31st 2026: Production Deployment
The production deployment integrated the entire development programme — and added two innovations.
The first innovation: the disinformation trigger layer.
On July 29th, Spain's Supreme Court ruled that migrants swimming into Ceuta or Melilla — thereby not crossing the physical border fence — could not be summarily returned under the "hot return" procedure, but must receive fuller legal processing. The ruling was narrow. Within days, coordinated social media campaigns had recast it as an open invitation: new accounts and pages claimed Spain had "opened the way" for anyone arriving by sea and that returns were no longer possible. As Al Jazeera's ground reporting documented, people arriving in Ceuta cited Instagram directly: "Go to Spain and get money, jobs."
This is a genuine technical refinement. Previous deployments moved people through state logistics — Belarusian visas, Russian buses. The 2026 deployment moved people through information: a targeted amplification campaign that weaponised the target's own legal ruling, misrepresented beyond its scope, spread through platforms no state formally controls. The state's role could then shrink to what the NYT documented on the ground — police pointing crowds toward the water, saying "Go that way" and "Come to Spain" — while the mobilisation itself ran on social media momentum. Deniability by architecture.
Moroccan rights groups, notably, condemned what they called the mass flight of the country's young people and held their own government responsible — an internal Moroccan accountability dimension that deserves more attention than European coverage has given it. The people who crossed were simultaneously instruments of state policy and victims of a disinformation campaign, driven by genuine poverty and inequality that Morocco's governance has failed to address. All three things are true at once. Analysis that erases the crossers' humanity to make the weaponisation point repeats, in miniature, the operation's own logic.
The second innovation: external diplomatic integration.
Every previous operator maintained deniability alone. Gaddafi denied. Lukashenko denied. Russia denied. Morocco denied in 2021 — and denied again in 2026, its ambassador to Spain insisting events unfolded against Morocco's wishes and that "we have always prioritized legal, orderly and safe migration for all."
But the 2026 deployment did not rely on Moroccan deniability. Two weeks before the crossing, the US House passed legislation embedding committee language describing Ceuta and Melilla as "Spanish-administered cities located in Moroccan territory," supporting Secretary of State Rubio's mediation of their "future status," and allocating $40 million in military financing to Morocco. Representative Thomas Massie, the sole Republican dissenter, connected the sequence publicly on August 1st: "Two weeks ago the GOP passed a bill that greenlighted the transfer of Spanish territory to Morocco... but now they are acting shocked at the invasion."
Within hours of the crossing, the State Department blamed Spain's government for "deliberate efforts to enable and facilitate mass illegal migration into Europe" and offered to assist "other European allies considering similar options."
This is the qualitative shift. The weapon now arrives pre-legitimised by a major power's legislative and diplomatic architecture. The target's response is pre-delegitimised. The debate is pre-framed before the first person enters the water.
The Analytical Trap — And How to Avoid It
Here a discipline warning is required, because the information environment around Ceuta is itself contaminated.
The documented facts — congressional language, the $40 million, the State Department statement, the Massie confirmation, the NYT ground reporting of police direction — sit alongside a parallel stream of unsubstantiated claims. AI-generated videos circulated by pro-Iran accounts portray Ceuta as a coordinated Abraham Accords operation by the US, Israel, and Morocco to punish Spain for its Gaza positions. Israel's UN ambassador Danny Danon publicly mocked Spain's predicament, and Spanish politicians responded that "it all seems to be becoming quite clear." Commentators across the spectrum have folded the confirmed and the speculative into a single narrative.
The distinction matters analytically and it matters for credibility. The documented sequence — legislative pre-positioning, operation, diplomatic cover — is a matter of public record and requires no coordination theory to be significant. Whether explicit three-party coordination occurred is an open evidentiary question. Asserting it without evidence does not strengthen the case; it contaminates the documented record by association with Lego-video propaganda, and hands the operators the easiest possible rebuttal: dismiss the whole analysis as conspiracy.
The record is damning enough on its own. Precision is the weapon's counter-instrument. Use it.
What the Development Programme Tells Us
Each deployment tested a variable. Gaddafi tested the threat mechanism. Turkey tested genuine refugee populations as humanitarian cover, and priced the payout. Belarus tested multi-border simultaneous pressure and commercial recruitment. Morocco 2021 tested the Ceuta geography and the minor-population residual. Russia 2023 tested the legislative response threshold of a high-resilience target. Morocco 2026 added the disinformation trigger and external diplomatic integration, and scaled to the largest deployment yet attempted.
The operators have been learning from each other — Galeotti's January 2026 report "People as Ammunition" documented the cross-pollination between Russian and Belarusian operations specifically. The 2026 deployment suggests the pollination now extends to Morocco and, in the diplomatic dimension, Washington.
The European response across the entire programme has been structurally identical: the frontline state manages the crossing; the EU eventually endorses the national response as temporary and proportionate; the asylum framework is quietly adapted to accommodate what already happened; and no operator is held accountable at a level proportionate to the act — with the single exception of Belarus, which was already sanctioned for other reasons. The UnHerd analysis after Ceuta identified the asymmetry precisely: given openly hostile relations, Minsk's actions are understood as hybrid warfare and punished as such. The EU has no similarly clear-cut way of understanding the same power wielded by its partner states. When the operator is a "partner," the weapon has no name.
That asymmetry is the doctrine gap. Belarus deploying migrants is hybrid warfare. Morocco deploying migrants is a "migration challenge requiring dialogue." The difference is not the act. It is Europe's dependency on the actor.
The Next Deployment
The weapon will be deployed again. The Turkey model — pay the gatekeeper — is being replicated with Algeria, Morocco, Tunisia; each payment increases the gatekeeper's future leverage. Every operator with a border, an exploitable population, and a grievance now has access to a refined, documented, repeatedly successful instrument. The 2026 deployment demonstrated that American diplomatic cover can be attached to an operation against any European government Washington finds inconvenient.
What to expect in future iterations:
Legal and informational pre-positioning. The congressional language preceding Ceuta, and the social media campaign converting a court ruling into a trigger, will both be studied as templates. Future deployments may prepare the legal and informational battlefield weeks in advance — through legislation, litigation, or coordinated amplification — before anyone approaches a border.
Coalition operations. Ceuta was bilateral: Morocco as operator, Washington as legitimator. A future deployment could synchronise migration pressure with infrastructure cyberattacks, energy leverage, and disinformation targeting the government's domestic legitimacy — overwhelming response capacity across domains simultaneously.
Target selection by political alignment. The 2021 operation extracted a bilateral policy concession. The 2026 operation targeted a European government for its broader political positioning. The instrument has evolved from extracting concessions to shaping which governments Europe is permitted to have.
What Is Required
Europe has been slow because naming the weapon requires naming the operators — and naming its own role. Calling Ceuta a hybrid operation means calling Morocco an adversary while depending on Morocco for border enforcement. Calling the congressional language pre-positioning means acknowledging that the current American administration acted as a participant in a hostile operation against a NATO ally. Calling the externalisation architecture a weapons market means admitting that every gatekeeper agreement Europe has signed since 2016 armed the next operator.
These are conclusions the managed multilateralism of European foreign policy is institutionally incapable of reaching in real time. But the development programme is documented. The success rate is established. The operators are identified. The market dynamics — Turkey's 59% purchased decline against Libya's 4% ungovernable chaos — are empirically visible in Europe's own statistics.
What Russia tested at the Finnish border in 2015 and 2023, what Turkey deployed serially from 2015, what Belarus deployed in 2021, what Morocco pre-tested at Ceuta in 2021 and deployed at scale with American cover in 2026 — these are not separate incidents. They are a single continuous weapons development programme, running for decades, funded in part by European externalisation payments, and now integrated with great power diplomacy.
Europe needs a doctrine that names this. Not a temporary proportionate measure. Not a de facto proximity politics arrangement that manages each deployment after the fact. A doctrine that names the weapon regardless of whether the operator is adversary or "partner," establishes the response threshold, addresses the externalisation dependency that created the market, and makes the cost of the next deployment prohibitive enough to change the calculation.
The development programme is complete. The weapon is in production. The market Europe built is liquid.
The only question now is who is next.
JP Ahonen is a transformation director, Finnish defence reservist, and independent analyst based in Porto Rafti, Greece. He coined the terms evergray wars on 27 May 2026 and proximity politics on 31 July 2026.