The tanker playbook that sanctions keep chasing

Everyone in the oil trade knows what a shadow fleet is. Far fewer can describe how one actually works, ship by ship, because the methods are small, boring and deliberate: a transponder switched off for a few hours, a transfer at anchor in the dark, a flag changed in a registry that asks fewer questions, a certificate of insurance nobody can verify. Each step is legitimate on its own. Chained together they move millions of barrels a day past the world's most expensive enforcement apparatus. This is the anatomy of that chain, and of the countermeasures that have slowly learned to pull it apart.

By Muhammad MehdiPublished 7 October 2026 at 08:00 UTC· Updated 7 October 2026 at 08:00 UTC· 5 min read

Sanctions are designed in ministries and enforced by banks, but they are evaded at sea, where the unit of work is one tanker and one voyage. The shadow fleet is not a single organisation, and it has no membership list. It is a set of habits that an ageing and deliberately anonymous segment of the world tanker fleet has learned to follow, each habit answering a specific enforcement tool. Treated one by one, the habits look mundane. Chained, they form the pipeline that has carried sanctioned barrels at scale through the most aggressive sanctions period of the modern oil trade.

Start with the paperwork

Every tanker voyage produces documents: a bill of lading naming the cargo and its ports, a certificate of insurance for the hull and for liability, a flag certificate, an ownership record and a set of voyage orders. Enforcement authorities read documents before they read satellite imagery, because documents are where sanctions are actually applied. A refinery can buy a barrel whose stated origin is lawful and process it with a clean conscience, or it can buy one whose paperwork has been laundered through a chain of intermediaries until nothing on the paper is checkable.

The laundering has standard techniques. A cargo changes hands on paper more often than it changes decks, each sale a small step further from the loading terminal. The ships themselves are owned through layered companies registered in jurisdictions that permit wholly opaque ownership, and the ownership changes every few voyages. Flags rotate on short cycles through registries with limited inspection capacity. None of these acts is illegal by itself; operating a tanker through a holding company under a Comoros flag is not a crime. The illegality appears only when the chain is assembled with the intent to carry prohibited cargo, which is why enforcement, historically, has targeted ships and facilitators rather than the method.

The transponder problem

The automatic identification system is the core of commercial ship tracking. It broadcasts a ship's identity and position to other ships and to shore receivers, and public platforms build their maps from that data. It was designed for collision avoidance, not for enforcement, and that design gap is what the fleet exploits.

Three behaviours recur. The transponder goes silent, and the ship disappears from tracking for hours or days. It reports a position that satellite imagery later contradicts, a practice called position spoofing. Or the identity on the transponder belongs to another vessel, which is how one hull can accumulate several apparent histories. Each has an innocent explanation under some circumstances, and satellite radar continues to work regardless, which is why analysts treat dark periods near known meeting points as evidence rather than proof.

The countermeasure is not one tool but layering: correlate satellite imagery with transponder records, watch for rendezvous geometry, and examine the insurance certificates of both ships encountered at a transfer point. This is the point at which a classification society's records and an insurer's ledger become security instruments, a change the war years made permanent.

The insurance filter

A serious cargo insurer will not knowingly cover a sanctioned cargo, which makes a valid certificate of insurance a proxy for compliance. The shadow fleet has two answers. The first is to use insurers that ask fewer questions, a segment the war years have made more visible and more scrutinised. The second is to fabricate or reuse documentation, which port state inspectors have learned to test by contacting the named insurer.

The filter works because of how the mainstream trade is interlaced. A ship without credible liability cover will be refused by ports, by canal authorities, by shipyards and by most charterers, and its crew's protection under international conventions becomes uncertain. When enforcement designates a tanker, the sanction's teeth are that the designation reaches the insurers and the flag registry, not the cargo directly. This is also why the fleet migrates toward the perimeter of the system: registries with thin capacity, insurers with opaque reinsurance, ports whose operators do not ask.

The four levers, and their limits

What has changed since 2024 is not that the world found a way to stop the fleet. It is that the countermeasures became a system with four working parts. Ship designations grew from individual gestures into lists of hundreds of vessels, each designation stripping a hull of its access to mainstream insurance and finance. Documentary requirements shifted the burden of proof onto buyers, who now risk their own access to the dollar system if their provenance chain fails. Port state control inspections gave the physical layer teeth, examining logs, certificates and equipment records ship by ship. And the insurance filter turned compliance into a commercial precondition.

Each lever has a workaround, and the fleet has adopted each in turn: freshly incorporated owners replace designated ones, cleaner flags replace burned registries, new shuttle ships replace listed ones, and fabrication moves one step ahead of verification. The result is a contest measured in friction. Every workaround costs money and time, which is the practical effect of enforcement in a market that cannot be closed and will not be conceded.

What to watch

The most honest way to track this contest is not the size of the designated list, which measures enforcement effort, but three observable quantities: how dark the fleet is willing to go, meaning the average length and frequency of transponder outages near known rendezvous zones; how far the insurance economy will drift, meaning whether mainstream capacity continues to leave the trade; and where the discounted barrels land, because the ultimate test of a sanctions regime is whether the barrels reach refineries that could not otherwise buy them.

None of the three closes the question. The shadow fleet exists because there is a buyer at the end of every chain willing to accept the discount and the documentation. No enforcement architecture has lasted that has tried to defeat that incentive by policing ships alone, and the current one is not trying to. It is making the chain expensive, visible and slow. On the evidence of 2026, it has succeeded at exactly that, and no more.

Frequently asked questions

What is a shadow fleet?

An informal fleet of tankers that carry sanctioned oil using methods designed to hide the cargo's origin and the identities of the parties involved. Estimates of its size vary by definition: published trackers put the number of tankers regularly exhibiting dark or deceptive behaviour in the several hundreds, and a broader count including older, anonymously owned tonnage runs higher. There is no single registry of the fleet, which is itself part of how it works.

How do the ships hide where they are?

The automatic identification system, the transponder every large commercial ship must carry, is only as honest as its wiring. Used in its normal mode it broadcasts position, course and identity. In practice the fleet has used three methods: switching the transponder off around a meeting point, transmitting to a position that does not match the ship's actual location, and identity laundering, where the transponder carries details belonging to another vessel entirely.

What is a ship to ship transfer and why does it matter?

It is the transfer of cargo between two ships at sea or at an anchorage, a routine and legal operation when done at a designated location and properly recorded. As an evasion method it blends cargoes: sanctioned crude loaded at one terminal is transferred to a second tanker whose papers describe a lawful origin, sometimes through a third and fourth transfer so that the paper trail grows colder with each hop.

How do authorities counter it now?

Through four levers that have matured since 2024: designating individual ships, which freezes their ability to be insured and chartered in the mainstream market; requiring buyers and refiners to demand provenance documents from the whole voyage chain; using port state control inspections to examine certificates and logs; and the insurance filter, under which a tanker without credible protection and indemnity cover is refused entry or cargo by most serious counterparties.

Does enforcement actually reduce the flows?

The published evidence supports pressure rather than elimination. The number of designated tankers has grown into the hundreds, and individual routes and terminals have been squeezed, but shadow tonnage remains the backbone of sanctioned exports. Enforcement raises cost and friction; it has not closed the taps, and each of the four levers has a documented workaround that the fleet adopts within months.

Sources

Continue reading

Geopolitics

The EU sanctions regime against Iran: what Council Reg 2025/1559 and the May 2026 decision actually cover

Council Implementing Regulation (EU) 2025/1559, published in the Official Journal on 28 July 2025, gives effect to the UN weapons embargo on Iran and adds a new layer of autonomous EU measures targeting the Iranian Revolutionary Guard Corps and its affiliates. A May 2026 Council decision extended the scope to cover armed groups operating in the Red Sea and throughout the Middle East, and a second regulation of the same month, Council Reg (EU) 2026/1164, amended the underlying framework to close evasion routes. The full list of designated entities, from Ahrari Oil Instruments to Marine Industries and Parto Sanat, reveals how the regime tracks an evolving network.

Geopolitics

Taiwan's interceptor gap is a production window, not an empty magazine

The Congressional Budget Office estimates that the United States has used between half and two-thirds of its Patriot, THAAD, SM-3 and SM-6 interceptors since June 2025. The obvious question for Taiwan is what that does to the depth of its own magazines. The available evidence points somewhere else. A senior Taiwanese official says manufacturers do not hold production capacity until a contract is signed. The $14 billion package meant to refill Taiwan's upper air defence has been waiting on a presidential signature since January. The legislature removed the funding for Taiwan's own answer to the problem. What constrains the island is the date a contract is signed, not the size of a stockpile three time zones away.

Geopolitics

A wounded captain opened a door, and four passengers went through it

Flydubai FZ1073 left Dubai for Tel Aviv at 3.05am on Wednesday carrying more than 170 people. Two and a half hours later it dropped more than seventeen thousand feet in under two minutes over Saudi Arabia, squawked the code for unlawful interference, and landed at Tabuk. What prevented a catastrophe was not a system. It was a stabbed pilot reaching the cockpit door release, four passengers breaking in, and a second crew who happened to be travelling as passengers.