How a Coordinated Network Turned a Defensive Statement into a False War Alarm

On August 21, 2026, Foreign Minister Oana Țoiu was a guest on Antena 3 CNN, where she spoke about recent drone incidents near the Black Sea. Asked how Romania is responding, she said the country is ready to respond "both militarily and diplomatically" to defend its citizens and territory. Two days later, on August 23, three Facebook pages for the Romanian diaspora picked up the statement and cut it down to a single sentence: "Romania is ready to respond militarily to Russia." Without "diplomatically," without the defensive context, accompanied by images of explosions and flames. The meaning was inverted: from a position of deterrence, the message became the announcement of an imminent war.

From there, the phrase spread rapidly on Facebook and TikTok, gathering hundreds of thousands of views and tens of thousands of comments, and triggered two waves of reaction — one of hatred directed at the minister, another made up of messages defending Russia.

This report shows who started this message, how far it reached, and how much of its spread was genuine rather than manufactured.

To understand how this message worked, we looked at three things: who the pages that started it are and what links exist between them; how it circulated on Facebook and TikTok — and above all, how much of that circulation was real spread versus simple repetition of the same texts; and finally, what people wrote in the comments once the message reached them. We analyzed 14,567 comments under the network's four posts, 837 Facebook posts, and 25 TikTok posts published between August 20–26, 2026, plus the UK and Italian public registries showing who owns the three pages.

Here is what we found:

• A single-source reformulation. The quote "Romania is ready to respond militarily to Russia" appeared almost simultaneously on three diaspora Facebook pages — Germany, Austria, and Spain — that belong to the same British media network, with ties to Italy's Italexit party.
• Visibility inflated by duplication. In the largest segment (the "Russia" theme), only 49 of 533 posts are unique — the rest reproduce the same attention-grabbing formulas, not new information.
• A wave of real, hostile reactions. The four posts analyzed gathered over 17,600 comments on Facebook, 96.61% of them negative, plus another 432,188 views on TikTok in six days.
• Two reactions triggered at once. The reformulation fueled both personalized hatred toward the "provocative" minister (including death threats) and a boost to pro-Russian narratives that deny the threat and shift blame onto Ukraine, the EU, and NATO.

The Distortion

"Romania is ready to respond militarily to Russia." Within minutes, the same message appeared on three Facebook pages aimed at the Romanian diaspora in Germany, Austria, and Spain. It was accompanied by images of explosions and flames, and implied that Foreign Minister Oana Țoiu had announced the prospect of a direct military confrontation with Russia.

But the original statement said something else. Oana Țoiu had spoken about Romania's ability to respond "both militarily and diplomatically" to defend its citizens and national territory, in the context of security incidents in the Black Sea. Factual.ro later classified the version circulating online as "missing context."

The problem isn't only that a quote was taken out of context, though. We traced who put this reformulation into circulation, how it multiplied on Facebook and TikTok, and what reactions it generated. The data show two phenomena coexisting: amplification driven heavily by repetitive content, and — once the narrative reaches the public — genuine, extremely hostile reactions, including threats against the minister and messages downplaying the Russian threat. On the four posts analyzed alone, the reformulation gathered over 17,600 comments, plus, on TikTok, 432,188 views and nearly 16,000 interactions in just six days.

What the Foreign Minister Actually Said

On August 21, on Antena 3 CNN, Oana Țoiu spoke about growing security risks in the Black Sea and recent drone incidents near Romanian territory. She explicitly stated that, in the case of the drone discussed on the show, Romanian authorities had no indication of intent on the part of the Russian Federation.

Only afterward did she say Romania is ready to respond "both militarily and diplomatically," immediately explaining the purpose of this readiness: "to defend the safety of our citizens on our territory."

In other words: she did not announce Romania's intention to attack Russia or enter a war, but spoke about defensive measures that could be used, if the situation required it, to protect citizens and national territory.

Who Put the Message into Circulation

The "Romania is going to war" message did not start from three different places, as a spontaneous reaction by independent outlets to the same statement. It started from a single place. The three pages that distributed it minutes apart — Ziarul Românesc Germania, Austria, and Spania — are part of the same media network, controlled by a British company, New European Media Ltd, and use the very same monetization infrastructure (the same Google AdSense identifier).

The majority owner of New European Media Ltd, Gianluca Luciano, ran in 2022 for the Italian Senate on the lists of the Italexit party. The party's web domain was also registered under the name New European Media Ltd. He also runs IlParagone.it, a site included by NewsGuard among the least credible Italian publications, known for repeated disinformation about COVID-19 and vaccines.

In other words, the channels through which a message about the imminence of a war with Russia reaches Romanians abroad are part of a foreign network with its own political agenda and a documented history of disinformation. This is a pattern we've seen before: in our monitoring over the past year, we have repeatedly shown that the infrastructure amplifying these messages exists permanently and is available to anyone willing to use it, reactivating every time an opportunity for polarization or strong emotional triggering arises.

One notable fact should be added: although it is part of this network, Ziarul Românesc Germania is still listed by the Romanian Consulate General in Munich on its page dedicated to diaspora publications.

How Far Did It Reach, and How Much of the Circulation Was Repetitive?

How the Story Unfolded on Facebook

To see how people reacted to Oana Țoiu's statements, we collected 837 posts disseminated on Facebook between August 20 and 26, 2026. After data cleaning, the themes relevant to this narrative are: "Oana Țoiu's statements about Russia" (533 posts), "Oana Țoiu's statements about war" (93), "The Neptun Deep drone incident" (28), "Oana Țoiu's statements about air defense" (23), "Oana Țoiu's statements about security" (11), "Preparing measures against Russia" (9), and "Romania's measures against Russia" (8).

The large number is misleading, though. Looking at how many of these posts actually contain original text, only 49 remain. The rest are copies: the same message, redistributed over and over. It looks like a lot of noise on the topic, but there are few distinct or even genuine voices. Around this theme circulate "breaking news"-style formulas in which the actual event isn't even explained, and the real information is pushed into the first comment. The goal isn't to inform, but to capture attention and spread an alarming headline stripped of context.

Interactive chart: distribution of posts and public attention, by secondary theme

At the level of themes tied to Russia and security, the most visible feature of the chart is the gap between volume and actual ability to draw attention. The "Oana Țoiu's statements about Russia" theme concentrates the most posts, but an overwhelming share is duplicated: in the largest segment, only 49 of 533 posts are unique, and proxy engagement drops from 124,124 (all occurrences) to 105,592 (unique content).

The explanation lies in the cluster pattern: around the core "Russia" narrative circulate repetitive "breaking news" formulas in which the actual event stays unspecified and the essential information gets moved into the first comment. The high volume thus reflects the reproduction of the same attention-grabbing formulas, not genuine informational diversity.

The opposite situation appears in themes tied directly to concrete security incidents. "The Neptun Deep drone incident" has only 28 posts, 23 of them unique, but generates proxy engagement of 51,490 — almost identical to that of the unique content (51,376), a sign of organic rather than artificial engagement. Around the incident circulate claims about NATO being informed, the drone's origin, and responsibility for the risks in the Black Sea. The pattern repeats for "Statements about war" (93 occurrences, 77 duplicates, total proxy engagement 49,386) and "Statements about security" (only 11 posts, but 30,432 proxy engagement): the texts shift the discussion from the concrete incident toward the possibility of a Romanian response against Russia, and toward critical interpretations claiming the official discourse amounts to escalation or psychological preparation of the population for war.

Discursive patterns denying or downplaying the Russian threat appear constantly in these themes, especially those tied to Russia and to the Neptun Deep drone incident. One example states: "No one is threatening you, yet you're announcing you're ready to strike back militarily," presenting statements about a possible military response as unjustified escalation — "almost a declaration of war" — rather than a reaction to an existing threat. Another thread directly disputes attributing the drone to Russia, calling Oana Țoiu's account "warmongering fake news," while near-identical versions claim some drone incidents are real but others are "nonsense and manipulation" meant to psychologically prepare the population for war. (other posts: 1, 2, 3)

A similar downplaying appears in a post about the sea drone near Neptun Deep, described as a "media campaign" with no real danger — the episode framed as a propaganda pretext meant to convince the population that Romania should go to war with Russia. Another narrative thread questions the Russian threat itself, arguing that the real dangers for Romania don't come from outside but from within — from the actions of the government and the political class — thereby minimizing external incidents relative to internal threats deemed more serious.

So the picture changes completely for themes tied to concrete events. "The Neptun Deep drone incident," for instance, has only 28 posts, but nearly all are original (23 of 28) and draw genuine interest comparable to the "Russia" theme, despite having dozens of times fewer posts. Here people are actually discussing: what happened, who was informed, who is responsible. The same pattern shows up for the "war" and "security" themes.

The pattern reverses for themes tied to concrete events: the largest volume of posts appears precisely in the theme with the fewest original texts, while themes dozens of times smaller — like the Neptun Deep drone incident — reach a comparable level of genuine interest.

How the Story Unfolded on TikTok

We also tracked how this narrative was reflected on TikTok following Oana Țoiu's statement on Antena 3 CNN. In the days that followed we identified 25 posts, totaling 432,188 views, 12,809 likes, 1,678 comments, and 1,342 saves.

What did we find?

• The central message turns the statement about a possible military-and-diplomatic response for territorial defense into a narrative about Romania preparing for direct conflict with Russia. Phrasings such as "Țoiu is ready to respond militarily to Russia!" or "How does Romania respond militarily — explain it to us, will you?" appear repeatedly.
• The line "If Minister Oana Toiu's statement had been a mistake, Mucea or she herself would have come out with a correction! If Romanians are asleep, who's going to bother them?" appears identically across three different posts (1, 2, 3), totaling 106,974 views — 24.8% of the entire sample's visibility. Text recycling remains a relevant coordination indicator, but no longer accounts for the majority of the narrative's visibility, as the smaller initial sample had suggested.
• There are also direct personal attacks here, ranging from labels about competence and political affiliation to insinuations about the minister's state of mind ("what is this woman on?"). A censorship narrative also appears: one post claims TikTok restricted similar content, alongside disinformation about how Vladimir Putin supposedly reacted upon learning of Oana Țoiu's statement (1, 2, 3).

What Happened Once the Message Reached the Public

We analyzed a total of 14,567 comments across the 4 posts published by the network's 3 pages: Ziarul Românesc Austria (1,955 comments), Ziarul Românesc Germania with two separate posts (7,533 and 4,021 comments), and Ziarul Românesc Spania (1,058 comments).

The tone is almost uniform: 14,073 comments (96.61%) negative, 451 (3.10%) neutral, and only 43 (0.30%) positive. Within this volume, measurably, exactly the two reactions set in motion by the initial amplification appear.

Personalized Hostility Toward Oana Țoiu

Across all four corpora, disagreement with the foreign-policy statement frequently turns into direct personal attacks. Three categories recur constantly: insults about intelligence and competence ("stupid," "idiot," "retarded," "village idiot"), attacks on physical appearance ("one-eyed," "ugly," "old hag"), and sexualized or gender-coded slurs ("whore," "muistă" — a vulgar Romanian gendered slur with no exact one-word English equivalent, roughly "cocksucker" — "nymphomaniac").

Added to this is an almost identical call — rephrased countless times across all four posts — urging the minister (or Romanians in general) to personally "go to war," instead of discussing the state's deterrence posture. At least 10 comments cross the line from rhetoric into explicit threats of violence ("this one needs to be shot urgently"; "Nicu got shot, this trash needs to be hanged in Revolution Square!!"; "If I get my hands on a weapon, you'll be the first one I shoot. I worked at the ammunition and weapons factory, so I know how to fire a gun.)"; "I can't wait to get my hands on an AKM! The first ones I'll shoot are the PSD-ists, PNL-ists, USR-ists, UDMR-ists; I'm saving the country…." etc.)

Pro-Russian Narrative and Threat Minimization

Explicit references to Russia, Russians, Vladimir Putin, or the Kremlin total 1,632 comments — 11.20% of everything analyzed. The discourse follows two main patterns, present across all four posts:

• Denial or minimization of the Russian threat, ranging from general claims ("Russia hasn't done anything to us," "it has nothing to do with us") to positions explicitly favorable to Russia or Putin ("we're with Russia," "lucky that Putin is president"), including framings that present Russia as a liberator ("the population will welcome them as saviors and liberators").
• Overestimating Russian military power, used to delegitimize any notion of defense or deterrence ("Russia would be in Bucharest in four hours," "Russia would wipe out all of Romania in five minutes," "you can't compare yourself to Russia militarily").

Shifting Blame to Ukraine, the EU, and NATO

Across all four corpora, a discourse appears that shifts responsibility for escalation away from Russia and onto other actors. Ukraine is accused directly of provocation (the drones described as "guided by Ukraine," the Ukrainian army labeled "Nazi"), while the EU and NATO are cast either as instigators of the conflict ("the EU wants the war to continue," "NATO wants to attack Russia") or as a power issuing "orders from Brussels" to Romanian politicians.

In other words, the initial amplification didn't stop at spreading a misleading headline. Once it reached the public, the reformulation "Romania is ready to respond militarily to Russia" became the frame through which thousands of users discussed the statement — not as deterrence and territorial defense, but as the prospect of a war provoked by Ukraine, the EU, or NATO.

Methodology

Thematic analysis

Corpus analyzed: 837 Facebook posts, period August 20–26, 2026. After data cleaning, 744 posts were thematically analyzed and grouped into 13 thematic clusters. The thematic analysis used a machine-learning model to group similar texts, interpreted through a hybrid human-in-the-loop system based on NLP and RAG.

The proxy engagement score was calculated using the formula 2 × likes + 4 × comments + 6 × shares, as an indicator of the public attention generated by each post. To estimate the attention given to a theme overall, we then summed the scores of all individual posts included in that thematic group.

Sentiment analysis

The four posts analyzed had accumulated, per the figures Facebook displayed at the time of data extraction, 17,641 comments. Of these, 14,567 — roughly 82.57% of the platform-displayed total — could be extracted and analyzed. The analysis presented here refers exclusively to the comments actually extracted. Each comment was analyzed independently, based solely on the text column's content. Initial classification used a supervised machine-learning method based on TF-IDF representations and a classifier trained on the Romanian LaRoSeDa corpus. Results were subsequently reviewed manually.

Separately from the sentiment analysis, comments were analyzed qualitatively to identify forms of personalized hostility and recurring narratives about Russia, Ukraine, the EU, and NATO. Mentioning Russia, or opposing war, was not automatically interpreted as a pro-Russian stance. We tracked, distinctly, phrasings that express explicit support for Russia or Vladimir Putin, that minimize or deny the Russian threat, or that shift responsibility for escalation onto Ukraine, Romania, the EU, or NATO.

Authors: Anca Badea assisted with research for this report.

This material is funded through the European Fact-Checking Standards Network's (EFCSN) 2026 Tech Accountability Grants Program, under CERV grant no. 101236606, awarded by EACEA.

The views and opinions expressed in this material belong exclusively to the authors and do not necessarily reflect the position of the European Union or the European Education and Culture Executive Agency (EACEA). Neither the European Union nor the granting authority can be held responsible for them.