KHARKIV, Ukraine - In early April, some residents of Kharkiv received a series of chilling text messages from government officials telling them to flee the city before Russian forces surrounded it.
"Due to the threat of enemy encirclement, we urge the civilian population of Kharkiv to leave the city by April 22," said one alert. It bore the logo of the State Emergencies Service of Ukraine and mapped out safe escape routes in a slick infographic.
It was fake. Volodymyr Tymoshko knew immediately. He is the police chief of Kharkiv region and would have been one of the first to find out about any official evacuation plans.
"Residents started getting these notifications en masse," the 50-year-old told Reuters as he shared a screenshot of the alert, sent as Russian troops were massing at the border 30km away.
"This is a psychological operation, it triggers panic. What would an average citizen think when they receive such a message?"
Disinformation and propaganda, long mainstays of war, have been digitally supercharged in the battle for Ukraine, the biggest conflict the world has seen since the advent of smartphones and social media.
Tymoshko said he received about 10 similar messages via SMS and Telegram in April and early May, leading up to Russia's offensive in north-eastern Ukraine that began on May 10 and opened a new front in the war.
A Ukrainian security official, who requested anonymity to discuss sensitive matters, said the Russians frequently sent large numbers of text messages from devices attached to an Orlan-10 long-range reconnaissance drone. It can penetrate dozens of kilometres into Ukrainian airspace.
The devices, known as Leer-3 systems, imitate cellular base stations that phones automatically connect to in search of coverage, he added.
The phone barrage was accompanied by a social media blitz as Russian troops advanced on Kharkiv, according to Andriy Kovalenko, head of Ukraine's Centre for Countering Disinformation (CCD), a branch of the national security council.
The average number of social media posts classed as disinformation about the war by Ukrainian authorities spiked to more than 2,500 a day when the Kharkiv offensive began in May. That was up from 200 a day in March, data compiled by the CCD shows.
The CCD chief said Ukrainian intelligence assessed that disinformation campaigns were primarily carried out by Russia's FSB security service and military intelligence agency, commonly known as GRU.
Moscow has accused Ukraine and the West of unleashing a sophisticated information war against Russia, using the West's major media, public relations and technology assets to sow false and biased narratives about Russia and the conflict.
The Ukrainian security official acknowledged his country used online campaigns in an attempt to boost anti-war sentiment among Russia's population. But he characterised this effort as "strategic communication" to spread accurate information about the war.
Bots and microtargeting
Reuters interviewed nine people with knowledge of the information and disinformation war being waged in parallel with battlefield operations, including Ukrainian officials, disinformation trackers and security analysts.
The Ukrainian security official who requested anonymity said since the full-scale invasion of 2022, intelligence agencies had shut down 86 Russian bot farms in Ukraine. They controlled a collective three million social media accounts with an estimated audience reach of 12 million people.
Such facilities are rooms filled with banks of specialised computing equipment that can register hundreds of fake accounts daily on social media networks to pump out false information, the official added. One farm was found by security services in the city of Vinnytsia in central Ukraine in 2023.
Kovalenko said at present, the most significant sources of online Russian disinformation are TikTok in Ukraine and Telegram in Europe. Both are widely used in Ukraine.
He added that earlier in 2024, TikTok shut down about 30 of the 90 accounts that Ukraine flagged as Russia-affiliated disinformation spreaders. New accounts often pop up to replace those taken down.
TikTok told Reuters its guidelines prohibited false or misleading content, adding that it closed down 13 covert influence networks operating from Russia in recent years.
"We prohibit and constantly work to disrupt attempts to engage in covert influence operations by manipulating our platform and/or harmfully misleading our community," a spokesperson said.
Disinformation networks are groups of accounts controlled by the same entity, and often used to push a coordinated narrative.
Telegram said it is developing a tool to add verified information to posts.
"It is Telegram's belief that the best way to combat misinformation is not with censorship but with easy access to verified information," a spokesperson said.
Kharkiv mayor Ihor Terekhov said the Russians are trying to sow panic and distrust. He cited an example of social media posts claiming the main road to Kyiv was being resurfaced so that he could flee faster when the Russians came - something he dismissed as a lie.
"They are trying to frighten the population so that people feel uncomfortable and leave the city," he said in an interview in Kharkiv in late May.
By that time, the front lines of the conflict in the north-east had stabilised about 20km from the edge of the city. The Russian offensive initially gained territory to the north before it was blunted by Ukrainian reinforcements.
Maria Avdeeva, a Kharkiv-based security analyst who focuses on Russian disinformation, showed Reuters an infographic map, bearing Ukraine's state emblem of a trident, posted on Facebook in early April. This was around the same time as police chief Tymoshko was sent a different evacuation map in a direct Telegram message.
Unperturbed by a loud explosion from a glide bomb a few kilometres away, she explained how the map and accompanying text included fake road closures and claims that missile strikes were expected in specified areas around the city soon.
Microtargeting - which analyses people's online data to target particular individuals and audiences with specific messages, much like targeted advertising - is complicating the CCD's task of tracking influence campaigns and countering false narratives, Kovalenko said.
This activity is "notably very tactical", said John Hultquist, chief analyst at US cyber-security firm Mandiant.
"We've seen targeting all the way down to the Ukrainian soldiers in the trenches."
Air strike takes out TV tower
Ukrainians are particularly vulnerable to digital disinformation. More than three-quarters of the population get their news from social media, far more than any other source of information, according to a study commissioned by USAid in 2023.
That is considerably higher than in any of the 24 European countries surveyed by a 2024 Reuters Institute for the Study of Journalism report, which averaged a rate of 44 per cent.
In late April, as Moscow's forces massed on the border near Kharkiv, a Russian air strike took out the city's main television tower, hindering access to information.
Dramatic footage obtained by Reuters showed the main mast of the tower breaking off and falling to the ground.
While the Kharkiv offensive led to a significant spike in disinformation activity, there have been similar Russian campaigns over the course of the war, according to the people interviewed.
The head of the CCD highlighted a Russian campaign in October 2023 aimed at driving home the idea that Ukraine was facing a tough winter and defeat.
Osavul, a Ukrainian disinformation tracking company, showed Reuters its data for this campaign, which it called "black winter". It counted 914 messages posted by 549 actors, which collectively received nearly 25 million views.
Nonetheless, according to Kovalenko, the sheer scale and frequency of Russian influence operations meant Ukrainians are becoming more suspicious of the information they receive.
The disinformation push during Russia's initial advance towards Kharkiv at the start of the invasion in 2022 - when they got much closer to the city - contributed to the panic and shock that led to hundreds of thousands of residents fleeing, several officials and experts said.
This time around, only a small number left Kharkiv, even though the amount of disinformation messaging aimed at the city was double the level in March 2022, according to CCD data.
Despite the near-daily missiles and bombs falling on the city - attacks that intensified in May - 1.3 million people remain, according to Terekhov. The number is roughly the same as before Russia's latest military incursion in the region.
The comparative lack of panic also reflects Ukrainians' increasing familiarity with living under attack.
Reuters spoke to nearly two dozen Kharkiv residents in the second half of May, when the city was being hit by several bombs or missiles a day.
Most said they felt no desire to leave and shrugged off the danger, saying they became used to it. Several said they stopped following the news.
"This is a psychological mechanism, we get used to danger," Kharkiv-based psychologist Iryna Markevych said.
In late May, Reuters correspondents dived to the ground for cover when they heard the whistle of a guided bomb piercing the air.
Seemingly unfazed, mothers with pushchairs continued to stroll through the park and people bathed at a public fountain.
Yulia Oleshko, 55, a nanny pushing a buggy in a central Kharkiv park, said the best way to get through the nightmare is to simply focus on getting on with everyday life.
"Yesterday, I was thinking walking around Kharkiv is walking around a minefield... but I try not to dwell on these thoughts of fear, otherwise one might fall into depression," she added.
"We abstract ourselves, otherwise we won't survive."
ALSO READ: Zelenskiy calls for long-range weapons after drone attack on Kyiv