Spanish police say the mass entry of migrants into Ceuta on July 30 and 31, 2026, was not spontaneous. They describe it as the result of a carefully organized digital campaign. A confidential report from the Centro Nacional de Inmigración y Fronteras (CENIF) says viral social media tactics, amplified by foreign actors, drove the operation. The report alleges Moroccan agents helped guide the movement and that Rabat allowed it to happen. But, Spain's Ministry of the Interior, through police chief Francisco Pardo, has publicly denied that any official police report blames Morocco for planning or carrying out the Ceuta events. That contradiction has fueled debate in Spanish media and politics.
The investigation identifies social networks as the basic driver of the surge. Starting July 24, targeted posts calling for a coordinated push at the Ceuta border spiked on Instagram and social media. TikTok saw a similar rise. Some messages were logistical: "Is there a planned exit?" Others were direct calls to action: "On July 30, 2026, we will launch an attack on Ceuta." The language was urgent, aimed at mobilizing large groups quickly. Spanish Prime Minister Pedro Sánchez has said intelligence services found no evidence of direct Moroccan government involvement. He instead blamed disinformation on social media and the actions of outside actors, with references to Russia and Israel, as well as far-right networks.
Several sources indicate that over 70,000 to 72,000 people entered Ceuta during the July 2026 crisis. They report at least 80 to 90 fatalities, figures significantly higher than those initially disclosed.
As the crossing date neared, conversations moved to encrypted channels, mainly WhatsApp* (принадлежит Metа, которая признана экстремистской организацией и запрещена в РФ)* (принадлежит Metа, которая признана экстремистской организацией и запрещена в РФ). The tone grew more tactical. Participants discussed switching to handwritten notes to avoid digital surveillance, then organized themselves into groups of ten for the crossing. Information from the police report, the groups used specific phone numbers to coordinate across multiple chats, acting as organizers rather than participants. Some reports describe the CENIF document as detailing "almost complete permissiveness" by Moroccan police and non-spontaneous flows. Spain's Ministry of the Interior continues to deny the existence of such an official report. Moroccan authorities have also rejected claims of state coordination, blaming the surge on misinformation spreading online.
Digital activity peaked on the day of the breach. Real-time updates appeared across major platforms, including messages such as "The gate opened this morning" and "Everyone to Castillejos now, we are a thousand and entering." The updates gave others actionable information and encouraged more people to join the crossing. Those already in Ceuta sent advice back, including instructions to claim political reasons for not returning to Morocco and warnings about possible deportations. Information from government and local estimates, most who entered have since been returned or moved on. Thousands remain in Ceuta: around 5,000, according to Spanish government data, or up to 7,000 to 10,000, according to local authorities.
Police analysts reject the idea that the campaign was organic. The report calls the operation "professionally planned" and says it involved content experts and automated tools to maximize reach. Investigators identified several phone numbers linked to multiple groups. Some users acted as basic message drivers. Police say the scale and coordination make it "difficult to accept" that the campaign was accidental or unplanned.
The Ceuta crisis has already sparked internal political conflict in Spain. Protests have erupted in several cities, while local authorities in Ceuta have criticized the national government's response. The repercussions have reached far beyond the border, fueling wider debates about migration policy and national security.
Police cite the Throne Day holiday as one factor behind the sense of a "unique chance" to enter Spain. They also point to a misreading of a Supreme Court ruling on hot returns for swimmers. False claims about regularization processes for migrants contributed as well. Police stress that, despite the viral messages, the regularization process was closed and new arrivals would not benefit.
The episode has shaken Spanish politics, raising questions about border security and foreign influence. It has also exposed how vulnerable digital platforms are to manipulation. The Ceuta incident shows how a well-organized online campaign can quickly produce real-world consequences at the border. The evidence points to a new phase in migration, in which digital coordination and misinformation can overwhelm traditional security measures within days. Spanish authorities now face the challenge of responding to a threat that is virtual as well as physical. In 2026, border management involves fences and patrols, along with efforts to control the information and networks shaping events.
