V2G Grid Risks — DSO and TSO Hazards from Bidirectional EV Charging
Standard distribution protection (overcurrent relays, directional elements, auto-reclose) is designed for synchronous-generator fault currents and radial flow — V2G's low inverter fault contribution and bidirectional flow can make phase relays fail to pick up faults at all, which is why local fast-acting circuit breakers at each connection point, not smarter relay coordination, have emerged as the practical fix.
V2G fleets carry a higher cyberattack surface than the heat-pump fleet RISE already flagged as approaching critical mass (~300,000 connected units) — V2G chargers have persistent bidirectional internet connectivity by design, and even a partial synchronized fleet event at V2G's 5,000 MW theoretical potential could exceed the TSO's automatic corrective capacity.
V2G is framed primarily as a flexibility resource — EVs as dispatchable storage that benefits grid stability. The framing is valid but incomplete. When an EV discharges into the grid, it functions as a distributed generator, and distributed generation creates DSO and TSO risks that the V2G policy discussion largely underweights. This page synthesizes those risks across five categories.
The central tension: V2G that stabilizes the TSO’s transmission network can simultaneously destabilize the DSO’s LV network. The two effects are not contradictory — they operate at different grid levels — but they will need to be coordinated before large-scale V2G deployment is viable.
1. LV network voltage rise and thermal overload
DSO risk. Quantified in the Swedish context.
V2G discharge adds generation at the distribution tail. Combined with rooftop solar — which is co-located with EV owners and correlated in time — this creates bidirectional LV power flows that standard radial networks were not designed for.
Source - FlexAbility Delrapport 3 (2025) ran Monte Carlo simulations (Plexigrid platform) of V2G + PV penetration against two real Swedish LV networks during FCR-D upregulation events (~58 activation hours per year):
The binding scenario is not winter peak demand but weekends in Q3: low residential load, high solar injection, V2G dispatch active simultaneously. Both Stockholm-suburb constraints (substation overload, overvoltage) occurred in this window, and the source names it as the critical window in both networks; the southern reference network’s feeder overcurrent (40% penetration) instead occurred on Q2 weekdays at midday, driven by solar. The gap between the two networks — 2.7× for substation overload (30% vs 80%), 2.25× for overvoltage (40% vs 90%) — is the key result for policy: grid impact is highly network-specific, and national averages are unreliable. DSOs cannot use aggregate statistics to manage this risk — they need network-level simulation before enabling V2G at any given substation area.
The DSO implication: a blanket FCR-D activation of all connected V2G assets, issued by a TSO-level aggregator or BSP, may solve a balancing problem at the TSO level while creating voltage and thermal violations at the DSO level within the same dispatch window. This is the structural TSO-DSO coordination problem made concrete — see TSO-DSO Coordination — The Central Design Problem.
2. Unintentional islanding (oavsiktlig ö-drift)
DSO risk. Regulatory gap exists.
When a V2G charger is discharging, it functions as an inverter-based generator. If the upstream grid connection disconnects — due to a cable fault, protection trip, or planned switching — and the charger continues supplying the isolated section, an unintentional island forms. This creates risk of electric shock to field workers who assume lines are dead, impedes fault clearing, and can damage equipment on reconnection.
The fundamental detection challenge is the Non-Detection Zone (NDZ). Under Swedish grid code (implementing RfG), all generators must remain connected within 47.5–52 Hz and 0.9–1.1 Un. If, at the moment of disconnection, the island’s internal generation and load are in near-balance, frequency and voltage stay within those bounds indefinitely — passive monitoring cannot distinguish the islanded state from normal operation.
V2G chargers exacerbate the NDZ problem in two ways:
Low fault current: inverter-based sources produce 1–1.5 p.u. (per-unit of rated) fault current versus 4–7 p.u. from a synchronous generator. Standard overcurrent relays set for synchronous-generator fault signatures may not detect the fault at all. The same finding appears in the Arholma and Simris protection engineering studies for BESS. (Source - Energiforsk 2023-957 Felbortkoppling i Mikronät (2023), Source - Lund Arholma Microgrid Fault Detection (2025))
Grid-forming capability: higher-quality V2G chargers designed to support grid frequency actively regulate voltage and frequency in the island, suppressing the perturbations that passive detection methods rely on.
A further complication in Swedish MV networks with high-impedance earthing: the neutral resistance is physically located outside the islanded section. Earth-fault detection becomes non-functional during the unintentional island. Mitigation requires zero-sequence voltage protection (öppet-delta VT) at each generation connection point. (Source - Energiforsk 2025-1128 Oavsiktlig Ö-drift med Distribuerad Generering (2025))
Real precedent — E.ON case, September 2022
A real Swedish event illustrates the topology: a 130 kV earth fault triggered distance protection, the transients from a successful auto-reclose triggered a faulty relay trip at the 40 kV busbar, and a 1.6 MW hydro unit (plant type not specified in the report) sustained an unintentional island on a 10 kV network for ~6 minutes before an operator manually intervened. The hydro’s frequency regulation capability is what sustained the island. A V2G fleet in a comparable topology — with bidirectional inverters and potentially grid-forming capability — is harder to detect and may sustain the island longer before passive protection acts. (Source - Energiforsk 2025-1128 Oavsiktlig Ö-drift med Distribuerad Generering (2025))
Regulatory gap
Under RfG Articles 15–16 (EU 2016/631, implemented in Sweden as EIFS 2018:2), Type C and D generators must have an islanding detection method agreed with the DSO/TSO. But V2G chargers connected at household or small commercial level do not clearly fall under the Type C/D thresholds (wiki inference; ACER’s proposal itself treats V2G units below 1 MW separately and not as type B/C/D modules). The IEC 62116 standard (2-second detection limit) is the islanding-prevention test standard required in Sweden for inverters (Source - Energiforsk 2025-1128 Oavsiktlig Ö-drift med Distribuerad Generering (2025)); no source reviewed documents whether it is tested or enforced for consumer-grade bidirectional chargers. ACER Recommendation 03-2023 (NC RfG 2.0 / NC DC 2.0) explicitly brings V2G into scope of EU connection requirements for the first time — but this recommendation is not yet in force. Until it is, the wiki’s reading is that the anti-islanding compliance requirement for V2G chargers has no clear regulatory owner. (Source - ACER Recommendation 03-2023 NC RfG DC (2023), Generator Connection Requirements)
3. Protection relay coordination degradation
DSO operational risk. General inverter-based DER problem.
Beyond the islanding scenario, the proliferation of V2G chargers degrades protection performance across the network. Distribution protection systems — overcurrent relays, directional elements, reclosers — are designed for radial power flow and synchronous-generator fault currents. As V2G penetration increases:
- Phase overcurrent relays may fail to pick up faults due to low inverter fault current contribution — Energiforsk 2023-957 finds phase overcurrent protection typically unsuitable for inverter-dominated operation (Source - Energiforsk 2023-957 Felbortkoppling i Mikronät (2023))
- Directional relays may misread power direction in networks with high bidirectional flow (wiki inference; the source treats directional protection as the preferred option in island operation)
- Auto-reclose sequences may be undermined if V2G chargers do not trip and ride through the dead interval (wiki inference; the E.ON 2022 case above is an auto-reclose-related island)
The low-voltage circuit breaker (LVCB) has emerged as a practical enabling component for managing fault detection and isolation in inverter-dominated networks — documented in the Arholma PowerFactory simulations. The principle is that local, fast-acting circuit breakers at each generation connection point provide fault isolation that relay coordination cannot. (Source - Lund Arholma Microgrid Fault Detection (2025))
4. Coordinated fleet dispatch as a systemic TSO risk
TSO risk. Scales with adoption.
Aggregated V2G creates a large synchronized dispatchable resource. The RISE cybersecurity analysis found that approximately 300,000 connected heat pumps approaches the critical mass at which a coordinated cyber attack could drive Nordic grid frequency outside the normal operating range. (Source - RISE Cyberhot mot Elsystemet (2023))
The wiki’s inference is that the same logic applies to V2G fleets, with higher attack surface per unit (these three points are the wiki’s reasoning, not findings of the RISE report, which covers heat pumps primarily):
- V2G chargers have persistent bidirectional internet connectivity by design (the charger backend communicates via OCPP 2.1 per Source - Power Circle V2X Synthesis 2024)
- Consumer-installed hardware with variable security posture
- Aggregation platforms represent a single point of control for potentially hundreds of megawatts
A software fault, misconfiguration, or attack that triggers simultaneous large-scale V2G discharge or sudden recharge would appear to the TSO as an unplanned generation or load event. FlexAbility puts V2G’s technical potential at 5,000 MW by 2030 (Source - FlexAbility Delrapport 1 (2025)); the wiki’s inference is that even a partial synchronised fleet event at that scale could exceed the TSO’s automatic corrective capacity (no source sizes this). The cybersecurity risk profile increases as V2G moves from pilot scale to commercial deployment.
Plausible mitigations (the wiki’s inference) are inverter-level rate-of-change limits and aggregation platform fail-safes; network segmentation between charger control channels and the public internet is the one measure that matches what Energimyndigheten recommends generally for connected energy-sector devices (the source does not name NIS2 or heat pumps specifically). (Source - Energimyndigheten Cybersäkerhet Energisektorn (web, 2026))
5. Cold-load pickup on recharge
DSO and TSO risk. Not yet quantified for V2G specifically.
After a large-scale V2G activation event — for example, FCR-D upregulation across a fleet — EVs that have discharged below their preferred state-of-charge would be expected to resume charging once the activation ends. If no staggered recharge profile is enforced, a simultaneous charging surge follows every large dispatch event. On a distribution feeder with high V2G penetration, this creates a demand spike structurally similar to the cold-load pickup problem documented in island operation restoration contexts (Island Operation › Cold-load pickup). The amplitude is proportional to fleet size and depth of discharge during activation.
No Swedish source has quantified this effect specifically for V2G; it is an inferred risk from the physics of fleet dispatch. Smart charging coordination between the BSP/aggregator and individual charger schedules is the mitigation — but this depends on OCPP 2.1 and ISO 15118-20, which the source describes as emerging standards, and on TSO-DSO coordination (also an inference). (Source - Power Circle V2X Synthesis 2024)
Risk summary and coordination implications
| Risk | Primary actor affected | Current status | Mitigation pathway |
|---|---|---|---|
| LV overvoltage + thermal overload | DSO | Quantified (FlexAbility); unmitigated at scale | Network-specific V2G activation limits; smart coordination between BSP and DSO |
| Unintentional islanding | DSO | Active regulatory gap; no clear compliance owner | NC RfG 2.0 (ACER Rec 03-2023) in force; IEC 62116 testing mandatory for all chargers |
| Protection relay coordination | DSO | General inverter problem; V2G-specific data absent | LVCB at generation connection points; relay restudies at high penetration |
| Coordinated fleet cybersecurity | TSO | Theoretical at current scale; grows with adoption | Statutory cybersecurity oversight (specific Swedish instrument unconfirmed) / aggregation platform security standards; rate-of-change limits |
| Cold-load pickup on recharge | DSO + TSO | Unquantified | Staggered recharge profiles enforced by aggregation platform |
The common thread across all five risks is that they emerge from the grid operator’s lack of real-time visibility into mobile, distributed, aggregator-controlled assets. The datahanteringsverktyg / FIS architecture being developed by Ei and Svk is the infrastructure layer that would ultimately enable DSOs and TSOs to manage V2G activation with grid-awareness rather than blindly. Until that exists, the risks are managed either by keeping V2G at pilot scale or by individual DSO-level prequalification of specific network areas — which is the current de facto approach. (Elmarknadshubb, Network Code on Demand Response › Flexibility Information System (FIS))
Data gaps
- Cold-load pickup quantification for V2G fleet recharge events — no source models the demand surge following a large FCR-D activation
- Anti-islanding compliance verification process for consumer-grade bidirectional chargers in Sweden — no known Ei or DSO guidance
- DSO operational experience with V2G in network-constrained areas — Vattenfall/Energy Bank/VW pilot (2026–2028) may produce this data
Sources
- FlexAbility Delrapport 3 (2025)
- FlexAbility Delrapport 1 (2025)
- Energiforsk 2025-1128 Oavsiktlig Ö-drift med Distribuerad Generering (2025)
- Energiforsk 2023-957 Felbortkoppling i Mikronät (2023)
- Lund Arholma Microgrid Fault Detection (2025)
- RISE Cyberhot mot Elsystemet (2023)
- ACER Recommendation 03-2023 NC RfG DC (2023)
- Power Circle V2X Synthesis 2024
- KTH Thesis V2G Sweden 2024
- Energimyndigheten Cybersäkerhet Energisektorn (web, 2026)