Wagner legacy networks and influence activity in Eastern Europe during March

Key Judgements.

• Wagner-linked networks continue to operate in a fragmented but persistent manner following the death of Yevgeny Prigozhin, maintaining influence capabilities across parts of Eastern Europe and the Balkans.
• Activity in March indicates a shift from centrally coordinated paramilitary operations to decentralised influence, training, and facilitation networks.
• Legacy actors are increasingly embedded within local political, security, and criminal ecosystems, reducing visibility while maintaining operational relevance.
• Unlikely to pose an immediate conventional security threat. However, these networks represent a sustained hybrid risk, particularly in politically fragile or pro-Russian environments.

Objective

To assess the evolution and activity of Wagner legacy networks in Eastern Europe during March and evaluate their implications for regional security and influence dynamics.

Context

Following the collapse of Wagner’s central command structure in 2023, Russian private military activity has undergone a period of reorganisation. While elements have been absorbed into official Russian military or intelligence structures, a significant portion of personnel, facilitators, and affiliated actors have transitioned into loosely connected networks.

These networks retain key capabilities including combat experience, logistical knowledge, and established international contacts. Many individuals involved in Wagner’s previous operations possess experience in irregular warfare, logistics coordination, and local force integration, making them valuable assets even outside formal structures.

In Eastern Europe, their role has shifted away from direct combat and towards influence operations, security facilitation, and informal advisory roles. This includes engagement with private security firms, political organisations, and nationalist groups that provide both cover and access to local networks.

Countries in the Western Balkans and parts of Eastern Europe provide a permissive environment for such activity. Weak institutional oversight, political fragmentation, corruption vulnerabilities, and the presence of pro-Russian sentiment create opportunities for embedded influence. In some cases, existing grievances against Western institutions or NATO integration further increase receptivity.

In March, reporting and indicators suggest continued engagement by Wagner-linked individuals in areas such as paramilitary-style training, political networking, and narrative reinforcement aligned with Kremlin strategic interests. The absence of overt, large-scale activity should be understood as a shift in method rather than a reduction in intent.

Timeline

Pre 2023 – Wagner operates as a semi-covert extension of Russian state power, conducting combat and security operations in Ukraine, Syria, and Africa.

Mid to Late 2023 – Leadership collapse following the death of Prigozhin results in fragmentation of command structures and redistribution of personnel.

2024 – Elements of Wagner are absorbed into Russian state structures, while others disperse into informal networks operating with reduced visibility.

2025 – Sustained reports of Wagner-linked individuals engaging in security consultancy, training roles, and informal political engagement across parts of Eastern Europe and the Balkans.

March 2026 – Indicators of continued Wagner-linked activity across Eastern Europe, focused on influence, training, and network-building rather than direct paramilitary deployment.

Analysis

Wagner’s evolution reflects a transition from a centralised expeditionary force into a dispersed network of actors capable of operating across multiple domains. This decentralisation reduces visibility and attribution, making it more difficult for governments to identify and respond to activity in a timely or proportionate manner.

In March, the most notable trend is the continued embedding of Wagner-linked individuals within local systems. Rather than operating as an external force, these actors are integrating into existing political, economic, and security structures. This provides access to influence channels while minimising the perception of foreign interference. Over time, this type of integration can normalise their presence and increase their ability to shape local narratives and decision-making environments.

The shift towards training and advisory roles is particularly significant. Even limited paramilitary-style training or security consultancy can enhance the capabilities of local groups, especially in regions where institutional capacity is already constrained. This creates a multiplier effect, where small numbers of experienced individuals can have a disproportionate impact on local dynamics.

At the same time, these networks operate within a grey zone between legality and illegality. Activities are often framed as legitimate employment or cooperation, complicating efforts to counter them without appearing heavy-handed or politically motivated. This ambiguity benefits the actors involved, allowing them to maintain plausible deniability while continuing to exert influence.

The cumulative effect of this activity is unlikely to produce immediate instability. However, over time it contributes to the erosion of governance, the strengthening of pro-Russian narratives, and the creation of latent capabilities that could be leveraged in periods of heightened tension. As such, Wagner legacy networks should be understood not as a residual phenomenon, but as an adaptive and enduring component of Russian influence strategy in Eastern Europe.