FlySafe was not operational during this event. This analysis reconstructs publicly available signals — to demonstrate how predictive airspace intelligence could have provided advance warning.
Belarus Forces Ryanair FR4978 Diversion
May 23, 2021 — Forced Diversion of Commercial Aircraft
Ryanair Flight 4978 was 2 minutes from exiting Belarusian airspace when Minsk ATC issued a fake bomb threat and a regional fighter aircraft fighter jet intercepted the Boeing 737-800. The 171 passengers and crew were forced to land in Minsk, where Belarusian authorities arrested opposition journalist Roman Protasevich. There was no bomb. There was never a bomb. A NATO member state's airspace neighbor had just committed forced diversion of a commercial aircraft against a commercial flight.
What Happened
On May 23, 2021, Ryanair Flight FR4978 — a Boeing 737-800 registered EI-DCL — departed Athens en route to Vilnius carrying 171 passengers and crew. The flight was routine in every measurable sense until it entered Belarusian airspace. At 09:47 UTC, with the aircraft less than two minutes from crossing the Lithuanian border and exiting the Minsk FIR (UMMS), Minsk Area Control Centre issued a bomb threat warning and ordered the crew to divert to Minsk National Airport. A Belarusian Air Force regional fighter aircraft was scrambled and positioned alongside the aircraft as a coercive escort. The crew, following standard threat protocols, complied. FR4978 landed at Minsk at 10:15 UTC. No explosive device was found. Belarusian authorities arrested Roman Protasevich — a prominent opposition journalist and co-founder of the NEXTA Telegram channel — along with his partner Sofia Sapega. The bomb threat was fabricated. The diversion was a state-directed act to detain a political dissident aboard a civilian aircraft in international overflight.
The incident represented an unprecedented use of state military assets to coerce a civilian international flight into a diverted landing for the purpose of detaining a political target. ICAO's subsequent fact-finding investigation formally confirmed the act as deliberate — the first such finding in the organisation's history involving a state forcing down a civil aircraft mid-transit. Ryanair CEO Michael O'Leary publicly characterised it as "forced diversion," a framing that held up against every factual element of the event. The geopolitical and aviation fallout was immediate and sweeping.
Warning Signs
No credible bomb threat was in circulation prior to FR4978's departure from Athens. But the preconditions for a coercive state action in UMMS airspace were not invisible — they were present in open-source political intelligence, diplomatic signals, and Belarus's established pattern of behaviour toward dissidents. The intelligence environment surrounding UMMS in the weeks preceding May 23 carried compounding indicators that, when aggregated, may have reflected elevated the FIR's risk profile substantially above baseline for overflights involving politically exposed passengers.
Following the August 2020 contested presidential election, the Belarusian authorities had conducted mass arrests of opposition figures, journalists, and civil society activists. Roman Protasevich specifically had been added to Belarus's domestic non-state actor list in November 2020 — a clear signal of elevated state interest in his detention.
Belarusian authorities had publicly and explicitly identified Protasevich as a criminal target. NEXTA, which he co-founded, had been classified as an "extremist" organisation. The state's intent to detain him was declared — what was missing was opportunity, not motive.
Despite the political deterioration, UMMS remained a standard transit FIR on EU carrier route networks in May 2021. No NOTAM or EASA safety bulletin had been issued restricting overflight. The lack of proactive rerouting left dozens of daily EU flights transiting airspace under an increasingly adversarial government without mitigation.
The EU had already imposed multiple sanctions packages on Belarus by early 2021 in response to post-election crackdowns. Diplomatic relations were effectively severed. In this context, UMMS overflight by EU-flag carriers represented transit through hostile-state controlled airspace with no functioning bilateral safety guarantees.
Belarusian state security services (KGB) had a documented history of monitoring and apprehending dissidents at border crossings and airports within their control. Extension of this behaviour to ATC-directed coercion of overflying aircraft was an escalation — but not an irrational one given the trajectory.
Timeline
Ryanair Flight FR4978 departs Athens International Airport (ATH) bound for Vilnius (VNO). Boeing 737-800, registration EI-DCL, with 171 passengers and crew aboard. The flight is scheduled, uneventful, and has no security advisories associated with it at departure.
FR4978 enters Minsk FIR (UMMS) on its planned route. The crossing of UMMS is standard on the ATH-VNO routing. At this point the flight is less than 25 minutes from Vilnius and has no indication of any abnormal ATC interaction ahead.
Minsk ATC contacts FR4978 and relays a bomb threat, instructing the crew to divert to Minsk National Airport (UMMS). At this moment, the aircraft is approximately two minutes of flight time from the Lithuanian border — within seconds of leaving Belarusian-controlled airspace entirely. The threat is attributed by ATC to reported regional non-state actors, a claim later shown to be fabricated. A second communication from Belarusian authorities also references a threat, creating the appearance of corroboration.
A Belarusian Air Force regional fighter aircraft fighter is scrambled and positions alongside FR4978. The military aircraft escorts the Boeing 737 — a coercive action that removes any ambiguity about the diversion being voluntary. The crew, following standard bomb threat protocols and faced with a military intercept, complies with the diversion instruction.
FR4978 lands at UMMS. Belarusian authorities conduct a security sweep of the aircraft. No explosive device is found. Despite the all-clear on the stated threat, authorities do not release the aircraft immediately — they proceed with passenger document and identity checks targeting specific individuals.
Roman Protasevich and his partner Sofia Sapega are removed from the aircraft and placed under arrest by security service officers. Protasevich — co-founder of the NEXTA opposition Telegram channel, classified by Belarus as a non-state actor — was the identified target of the entire operation. The remaining passengers are eventually permitted to continue to Vilnius on a subsequent flight.
The EU convenes emergency sessions. Within 24 hours, EU member state aviation authorities begin issuing instructions to national carriers to avoid UMMS. Lithuania, Latvia, and Poland — the states with the most UMMS-adjacent routing exposure — redirect all flights. Ryanair CEO Michael O'Leary publicly calls the event "forced diversion" at a press conference.
The European Council formally bans Belarusian carriers from EU airspace and instructs EU-registered carriers to cease overflights of Belarusian territory. The UMMS FIR is effectively closed to all commercial EU aviation. EASA issues a Conflict Zone Notice. Over 36 countries ultimately join some form of restriction or ban on Belarusian airspace access or Belarusian carrier operations.
ICAO convenes a Fact-Finding Investigation into FR4978. The investigation concludes that the diversion was a deliberate act orchestrated by Belarusian authorities — the first such formal finding in ICAO history against a state for coercing an overflying civil aircraft. The ICAO Council adopts a resolution formally condemning the act. Criminal proceedings are initiated in multiple jurisdictions including Lithuania and the EU.
Aviation Impact
The operational fallout from FR4978 was immediate and structural. UMMS — previously a high-utilisation transit FIR for EU-bound and EU-originating traffic — became a permanently avoided airspace region for commercial aviation within days of the incident. The route network disruption, regulatory response, and diplomatic isolation of Belarusian aviation collectively represented one of the most significant single-event airspace closures in European aviation history outside of wartime.
More than 36 countries joined the EU in imposing some form of ban or operational restriction on Belarusian airspace access or Belarusian carrier operations following FR4978. The speed and breadth of international alignment was unprecedented for a peacetime aviation incident.
FR4978 was approximately two minutes from exiting UMMS FIR when the false bomb threat was issued. The precision of the timing indicates surveillance of the flight's progress and a deliberate operational window — the aircraft would have been beyond Belarusian jurisdiction within moments.
All EU-registered commercial carriers were directed to reroute entirely around Belarusian airspace following the European Council order of May 27. Lithuania, Latvia, and Poland — whose carriers had the highest UMMS overflight frequency — redirected all traffic within 48 hours of the incident.
The ICAO Council's resolution condemning Belarus for the deliberate diversion of FR4978 was the first time in ICAO's history that the body formally found and condemned a member state for coercing an overflying civil aircraft. The finding set a precedent for how state-directed ATC interference is classified internationally.
Takeaway
FR4978 is the defining case study for a category of airspace risk that traditional NOTAM and SIGMET frameworks were never designed to detect: politically-motivated state interference with civil aviation. The bomb threat was the triggering instrument, but it was not the risk — the risk was a government with the motive, the military assets, and the demonstrated willingness to weaponise ATC communications against a civilian flight. That risk was not invisible. It was present in open-source intelligence well before FR4978 took off from Athens.
The operational lesson is structural. UMMS was treated as a normal transit FIR by EU carriers on May 23, 2021 because no formal airspace restriction existed. But the political environment — collapsed diplomacy, declared state hostility to EU nationals, designated non-state actor listings applied to individuals known to travel between EU cities — had already degraded the safety assumptions that governed that transit. Airlines were operating on bureaucratic risk assessments in an environment where the actual risk had outpaced the bureaucracy by months.
The FR4978 case established that airspace risk in the modern environment cannot be assessed solely on aeronautical data. Political volatility indices, bilateral diplomatic status, state military posture, and active targeting of specific nationalities or individuals are all inputs into a complete risk picture. For operators who transited UMMS in the weeks prior to May 23 — on the assumption that absence of a NOTAM meant absence of risk — FR4978 was the event that proved that assumption catastrophically wrong.
This retrospective analysis examines signals present in public data before the event. It is provided for educational context only and does not claim predictive capability for future events.
A retrospective analysis suggests FlySafe's indices may have indicated UMMS as an elevated-risk transit FIR in the weeks preceding FR4978 based on three converging signals: (1) the Belarus political instability index crossing the HIGH threshold following the post-election crackdown and EU sanctions cycle; (2) the active state-declared targeting of EU-linked individuals transiting Belarusian-controlled territory — a pattern consistent with prior KGB operational behaviour; and (3) the absence of functioning bilateral safety mechanisms between Belarus and the EU, which removes the diplomatic deterrent that normally suppresses state interference with civil aviation. FlySafe may have surfaced a route advisory for ATH-VNO and comparable Baltic-route flights recommending UMMS avoidance or contingency planning — the same rerouting that Lithuania, Latvia, and Poland adopted reactively within 48 hours of the incident. Operators using FlySafe on that routing could have had that advisory before departure, not after landing in Minsk.
Distinct from conventional airspace conflict — requires political intelligence inputs, not just aeronautical data.
Preconditions were observable months before May 23. Early detection enables proactive rerouting rather than reactive emergency procedures.
Alternative routing via EPWW (Warsaw) or EYVL (Vilnius direct approach) was operationally viable — just not actioned before the event.
Sources
- — ICAO — Fact-Finding Investigation Report into the Forced Diversion of Ryanair Flight FR4978, Minsk, 23 May 2021
- — Wikipedia — Ryanair Flight 4978 (incident summary, timeline, diplomatic response)
- — CNBC — "Belarus Sanctioned After Diversion of Ryanair Flight to Arrest Journalist", May 2021
- — European Council — Sanctions on Belarus (2021): Council Regulation and Aviation Measures
- — BBC News — Timeline of FR4978 incident and arrest of Roman Protasevich, May–June 2021
- — The Guardian — Reporting on Ryanair flight diversion, regional fighter aircraft intercept, and EU aviation response, May 2021
This is a retrospective analysis of publicly documented events. FlySafe's prediction system was not operational during this event. All information is sourced from public records, aviation authority publications, airline statements, and open data.