Estonia’s Presidential Election: A Quiet Process Shadowed by Disinformation Infrastructure

Estonia stands at a pivotal moment as it prepares to select its next president through an indirect electoral process that begins on September 2nd. Unlike typical democratic elections where citizens directly cast their votes, Estonia’s presidential selection operates through a distinctive system that places the decision in the hands of the 101-member Riigikogu, the country’s parliament. If parliament cannot reach a consensus, the responsibility shifts to an expanded Electoral College. This structure essentially insulates the general public from direct participation in choosing their head of state, creating an unusual dynamic that distinguishes Estonia’s presidential race from most other democratic processes around the world. However, as recent analysis from the Global Disinformation Index reveals, this insulation from direct voter participation does not shield the country from the pervasive influence of disinformation and foreign information manipulation that continues to shape Estonia’s information landscape.

The electoral mechanics themselves are straightforward yet complex in their implications. Candidates must secure at least 68 votes within parliament to claim victory, and if three rounds of voting fail to produce a winner, the decision moves to the broader Electoral College. This institutional arrangement fundamentally limits the value of traditional voter-targeting disinformation campaigns, since there is no mass electorate to persuade in the manner that general elections typically require. Yet despite this structural barrier, the presidential race remains politically significant and deeply intertwined with broader societal concerns that dominate Estonia’s public discourse. The conversation surrounding the election has become entangled with pressing issues including the rising cost of living, housing affordability pressures, tensions within Prime Minister Kristen Michal’s minority government, and the complex treatment of Estonia’s substantial Russian-speaking minority population. These underlying social and economic pressures create fertile ground for disinformation narratives, even when the electoral process itself remains somewhat removed from direct public influence.

Monitoring efforts have identified two dominant domestic narrative threads currently circulating within Estonia’s information environment. The first focuses on the candidacy of Chancellor of Justice Ülle Madise, who currently emerges as the frontrunner in the race. Commentary surrounding her campaign has taken troubling turns, with some narratives framing the electoral process itself as tantamount to dictatorship, while other variations slide into anti-immigrant and anti-European Union rhetoric. The second significant narrative thread casts Estonian authorities, including the president, as fearmongers who are manufacturing a Russian threat to justify increased defence spending and military preparedness. This narrative draws on fringe domestic outlets and platforms, with certain Telegram channels dismissing the entire security environment as theatre and performance rather than genuine concern. These domestic narratives, while distinct from foreign interference operations, create a foundation upon which more sophisticated disinformation campaigns can build, blurring the lines between legitimate political criticism and manipulative information operations.

The most significant findings from ongoing analysis concern Foreign Information Manipulation and Interference, a category that the European External Action Service’s 2026 FIMI Threat Report closely monitors and which explicitly names Estonia as one of several European countries experiencing escalatory Russian hybrid activity. As of the current assessment, no significant foreign information campaign has yet been identified that specifically targets the presidential election itself. Russian state outlets have devoted little sustained coverage to the candidate field, and the indirect electoral mechanism reduces the appeal of conventional voter-targeting operations. However, this absence of overt election-specific interference should not provide any measure of reassurance. The FIMI risk confronting Estonia is structural rather than episodic, meaning the infrastructure necessary to run sophisticated influence operations is already active and deeply embedded within Estonia’s information environment. The more pressing vulnerability lies in the exploitation of societal divisions surrounding the election, with particular emphasis on the position and treatment of Estonia’s Russian-speaking population, which represents a significant portion of the country’s residents.

A functioning distribution pipeline for disinformation is already firmly in place within Estonia’s information landscape. An August analysis conducted by Propastop, a prominent disinformation research organization, examined approximately 1,799 articles published over a three-month period by the Estonia-facing branch of the Pravda Network. Rather than generating original content, this network systematically republishes Russian state media, military bloggers, and anonymous Telegram content, repackaging it as Estonian-branded and searchable webpages. This operational model gives Kremlin-aligned narratives on Russia, Ukraine, and NATO a ready-made channel into Estonia’s Russian-language information space, operating independently of whatever the electoral news cycle might be doing at any given moment. This infrastructure represents a persistent threat that remains active regardless of specific electoral events, creating an ongoing vulnerability that can be activated whenever circumstances warrant.

The narrative of persecution of Russian speakers is intensifying and becoming increasingly prominent within this disinformation ecosystem. Coverage of Estonia’s shift to Estonian-language education, including the dismissal of kindergarten staff who lack required language proficiency, has been systematically reframed to cast the educational reform as evidence of discrimination and oppression. In more extreme variants, this narrative escalates to accusations of genocide or a final solution to the Russian question, employing historically charged language designed to provoke maximum emotional response. Religion offers another vehicle for the same narrative structure, with outlets including TASS and Rossiyskaya Gazeta portraying legal measures affecting the Estonian Orthodox Church’s ties to the Moscow Patriarchate as state persecution of believers. An even more overtly separatist variant has also surfaced, with accounts across Telegram, VKontakte, and TikTok promoting a fictitious Narva People’s Republic complete with flags and insignia, deliberately echoing the branding that Russian-backed separatist entities used in eastern Ukraine. While attribution remains unresolved and current reach remains small, the symbolism is deliberate and the implications significant for long-term destabilization efforts.

NATO’s regional presence is being systematically reframed as provocation rather than protection. Pravda Network content has described NATO’s Baltic Trust exercises as risking Baltic suicide, while the InfoDefense Estonia Telegram channel presents alliance deployments as turning local populations into hostages of an arms race. Russian propaganda channels have also exploited Ukrainian drone activity in Baltic airspace to suggest that the Baltic states are complicit in attacks on Russia, weaving a narrative of regional entanglement in conflict that extends beyond reasonable defensive postures. The operational sophistication of these campaigns is increasing rapidly, as demonstrated by a fabricated report circulated on August 6th claiming that a Ukrainian drone had been shot down near Ämari Air Base, destroying two Portuguese F-16s stationed in Estonia. This operation combined a cloned version of a legitimate defence-news website with an AI-manipulated video that spliced real Estonian Defence Forces footage with generated imagery of burning aircraft. The story was then distributed across multiple languages using accounts with pro-Russian and anti-Ukrainian framing, creating a template designed to link Western military support for Ukraine directly to tangible costs and dangers for European citizens.

All of these individual narratives are tied together by a broader declining West narrative that frames Estonia and the wider Western world as undergoing self-destruction. Russian media have folded falling birth rates, teacher shortages, and defence recruitment challenges into a comprehensive story of Estonian and Western decline, at times pairing this narrative with claims that Western elites tolerate Russophobia only until it threatens financial interests. This overarching narrative provides coherence to the various disinformation threads, creating a comprehensive worldview that positions Russia as a stable alternative to Western chaos and decline. These findings collectively describe an information environment where the operational capacity for targeted FIMI campaigns clearly exists, but where for now these actors are directing that capacity at Estonia’s societal fault lines rather than at the mechanics of the presidential vote itself. This represents a strategic choice that may shift at any moment, making continued monitoring and analysis essential.

Disinformation of this kind does not sustain itself without significant financial resources. Cloned news domains, AI-manipulated video, multilingual amplification networks, and content farms that repackage state media into local outlets all require funding, and that funding routes in part through the same digital advertising infrastructure that finances the legitimate open web. Disinformation thrives when engagement-based algorithms operate without independent oversight, and voluntary commitments from platforms and advertisers have repeatedly proven insufficient to close this gap. Lasting change requires enforceable frameworks that embed transparency, independent oversight, and clear consequences into the fabric of the digital advertising ecosystem, rather than case-by-case takedowns after narratives have already spread and taken root. Europe leads globally in regulating this type of foreign information manipulation and interference, but transparency around monetized adversarial content remains scarce. Even where laws exist, such as the European Union’s Digital Services Act package and Code of Conduct on Disinformation, Very Large Online Platforms still fall short on transparency reporting requirements. This data void makes it difficult for policymakers to tackle the profitability that drives adversarial content and challenging for regulators to enforce existing rules. The Global Disinformation Index’s Online Harms Monetisation Dashboard is specifically designed to close that gap, providing the transparency and data necessary to understand and counter the financial incentives that sustain disinformation operations.