The Western Balkans as a Radicalisation Corridor: Persistent Drivers and the EU's Uneven Exposure

The Western Balkans occupy an ambiguous position in European security architecture: close enough to the EU's operational perimeter to generate direct threat exposure, yet distant enough from its formal intelligence-sharing mechanisms to create persistent coverage gaps. Sustained economic marginalisation, weak rule-of-law institutions, and the residual influence of foreign-funded Salafist networks have combined to preserve the region's status as a radicalisation corridor well into the current decade. For EU and Five Eyes analysts tracking jihadist mobilisation and, increasingly, far-right convergence, the Balkans warrant closer structural attention than current resourcing typically affords.

Structural Drivers That Have Not Resolved

The conditions that produced the Western Balkans' disproportionate foreign fighter contribution to the Islamic State's 2013–2019 mobilisation have not been meaningfully dismantled. Bosnia-Herzegovina, Kosovo, North Macedonia, and Albania collectively generated one of the highest per-capita foreign fighter ratios in the world during that period. The underlying drivers — youth unemployment consistently above 30 percent in several jurisdictions, governance deficits that create space for non-state welfare provision by religiously conservative organisations, and unresolved ethnic grievances that sustain identity-based grievance narratives — remain structurally intact.

Foreign funding from Gulf-based charitable and quasi-governmental organisations continues to flow into the region, sustaining a network of mosques, madrasas, and community organisations that operate largely outside the oversight frameworks of host-state security services. The funding pipelines have become more diffuse since the post-2015 crackdown period, with informal hawala channels and cryptocurrency transfers supplementing traditional remittance routes. This diffusion makes financial intelligence harder to aggregate and disrupts the indicator patterns that analysts have historically relied upon.

Returnee reintegration remains the most immediate operational concern. Estimates from regional prosecutors and EU liaison officers suggest several hundred individuals with confirmed or suspected Islamic State affiliation have returned to Western Balkan states, with reintegration programmes varying sharply in quality and coverage. Kosovo and Albania have invested comparatively more in structured deradicalisation, but Bosnia-Herzegovina's entity-level political fragmentation has produced an inconsistent national response that leaves known returnees subject to minimal monitoring in some cantons.

The Intelligence Integration Gap

None of the Western Balkan states are EU members, and only some hold partial arrangements with Europol and Eurojust. This creates a structural asymmetry: threat actors who move between, say, Kosovo and Germany, or between Bosnia-Herzegovina and Austria, cross a boundary that is operationally significant for intelligence-sharing purposes even when it is geographically trivial. The EU's pre-accession security cooperation instruments have improved bilateral liaison in some corridors, but they do not replicate the near-real-time information exchange that Schengen-area services enjoy with one another.

Analysts working within EU member-state services report that intelligence on Balkan-origin subjects frequently arrives through informal bilateral channels rather than through structured frameworks, introducing latency and inconsistency in the picture assembled at the national level. The quality of that intelligence is also uneven: Kosovo's intelligence service has developed a relatively capable counter-terrorism function with sustained Western mentoring, whereas some Bosnian cantonal police services lack the basic analytical infrastructure to produce structured threat assessments. Terriscope's curated coverage of the region reflects this unevenness — source density is markedly higher for Kosovo and Albania than for the Republika Srpska entity, where access constraints compound institutional limitations.

Five Eyes partners, particularly Australia and Canada, have a secondary but non-trivial exposure through diaspora communities with strong Balkan ties. Radicalisation cases involving individuals who have transited between Western Balkan states and Five Eyes jurisdictions have surfaced in prosecutorial records in each of the past five years, suggesting the corridor functions bidirectionally rather than solely as an export route into continental Europe.

Far-Right Convergence: An Emerging Complication

The analytical focus on jihadist networks in the Western Balkans has, until recently, obscured a secondary and growing dynamic: the region is also a site of far-right mobilisation, and the two threat streams are beginning to interact in operationally relevant ways. Serbian and Croatian ultranationalist networks have deepened their connections with pan-European accelerationist movements, sharing imagery, tactical frameworks, and, in some documented cases, personnel. The iconography of the 1990s conflicts — particularly that associated with convicted war criminals — has been adopted and recontextualised by European far-right actors seeking historical legitimacy for violence-adjacent narratives.

This convergence is not ideologically coherent; jihadist and far-right actors in the region remain adversarial in their primary orientations. The operational significance lies instead in the way each stream's activity can serve as a provocation driver for the other, particularly around commemorative dates, political flashpoints, and territorial disputes that retain emotional salience for diaspora communities in EU member states. Protective security planners in Austria, Germany, and Sweden — all of which host substantial Western Balkan diaspora populations — should treat regional political escalation events as potential upstream indicators for domestic community tension and, in elevated-threat periods, for targeted violence.

Transit and Facilitation: The Corridor Function

Beyond radicalisation and mobilisation, the Western Balkans serve a facilitation function that is analytically distinct but operationally connected. The region's porous borders, established smuggling infrastructure, and corruption-affected customs and border management create conditions that terrorist logistics can exploit alongside criminal networks. The overlap between organised crime and terrorism in the Balkans is well-documented in academic and prosecutorial literature; what is less consistently tracked is how that overlap evolves as criminal organisations adapt their service offerings.

• Document fraud: Forged or fraudulently obtained travel documents from Western Balkan states have appeared in terrorism prosecutions in France, Belgium, and Germany, exploiting visa liberalisation arrangements and inconsistent biometric verification at internal EU crossings.

• Weapons facilitation: The post-conflict surplus of small arms and light weapons in the region continues to feed illicit markets accessible to both criminal and terrorist actors, notwithstanding EU-funded disarmament programmes.

• Financial facilitation: Informal money service businesses operating across the Balkans–EU boundary provide a degree of transaction opacity that formal financial intelligence finds difficult to penetrate systematically.

The weapons dimension merits particular attention. Forensic tracing of firearms used in EU-based terrorist attacks and serious organised crime incidents has repeatedly identified Western Balkan provenance, with deactivated weapons reactivated through workshops in Bosnia-Herzegovina and Serbia appearing in multiple case files. EU regulatory efforts to close deactivation standard loopholes have had partial effect, but enforcement capacity in the region remains insufficient to suppress the supply chain.

Operational Implications for Analysts and Planners

The threat picture from the Western Balkans is not one of imminent mass-casualty escalation, but of persistent, low-to-medium-level risk that is structurally likely to endure as long as the underlying governance and economic conditions remain unresolved. EU accession timelines for the region have slipped repeatedly, and the security cooperation improvements that accession typically accelerates remain correspondingly delayed. Analysts should resist the temptation to treat the Balkans as a resolved or diminishing concern simply because the Islamic State's territorial caliphate no longer provides an organising focal point for mobilisation; the network substrate, the grievance architecture, and the facilitation infrastructure are all still present.

For protective security planners in EU member states with significant Balkan diaspora populations, the practical implication is that regional political developments — elections in Bosnia-Herzegovina, status disputes in Kosovo, commemorative events tied to the 1990s conflicts — should be incorporated into threat horizon-scanning calendars rather than treated as purely foreign-affairs matters. The corridor between the Balkans and Western Europe is short, well-travelled, and, in intelligence terms, incompletely illuminated. Closing that illumination gap, through improved bilateral liaison, investment in partner-nation analytical capacity, and sustained attention to the facilitation networks that serve both criminal and terrorist ends, represents the most actionable near-term lever available to the services responsible for managing it.