The opinions expressed here are those of the authors. They do not necessarily reflect the views or positions of UK Finance or its members.

From Automatic Identification System (“AIS”) manipulation to opaque ownership changes, the question is simple: Are your controls ready for this level of deception, or about to be stress‑tested?

Maritime-enabled sanctions evasion is now mainstream, not a niche concern. For UK banks, insurers, and commodity traders, this is a preview of the next regulatory spotlight as the geopolitical environment shifts faster than many financial crime frameworks can adapt.

What the shadow fleet exposed

Textbook evasion techniques such as rapid reflagging, ownership restructuring, and AIS manipulation now frequently overwhelm traditional controls and demand behavioural not “tick box” checks. Examples include:

• Skipper, formerly Adisa, a sanctioned vessel, manipulated AIS data to obscure its cargo of two million barrels of Venezuelan crude oil enroute to Cuba^,
• Bella 1, later Marinera, another sanctioned tanker, hastily adopted a Russian flag and hand-painted its new name on the hull to evade US seizure

These are not anomalies. It has been reported that around 17 per cent of in-service oil tankers operate as a shadow fleet , through opaque structures, high‑risk routing, and inconsistent flagging.

How the networks operate

Recent investigations reveal that maritime sanctions evasion networks now operate with deliberate structural sophistication. One such case, routed through Azerbaijan illustrates how these networks combine intentional opacity with concentrated control to mask true ownership and operational decision making. A small number of proxy individuals, mainly Moldovan passport holders, including extended family members and trusted intermediaries, were installed as nominee owners across a series of deliberately opaque ship management companies. These entities closely resembled small, low‑transparency operators commonly seen in high‑risk jurisdictions, and were used to fragment ownership trails, distancing the real orchestrators from identification.

The network ultimately linked into several distinct maritime clusters: 

• a fleet of approximately 35 ageing tankers functioning as a dark fleet; 
• a web of front companies registered across multiple addresses within the same Azerbaijani city; and 
• a separate outward facing shipping arm designed to engage with more permissive markets. 

What made the case particularly striking was the density of corporate registrations. Many companies traced back to just a handful of apartments and commercial units, which illustrates how geographically concentrated ecosystems in permissive jurisdictions enable large‑scale opacity with minimal scrutiny.

Viewed holistically, this reflects a mature sanctions evasion architecture: layered intermediaries, jurisdictional arbitrage, fragmented vessel ownership, and deliberate compartmentalisation to ensure that if one node was exposed, the broader operation could continue largely uninterrupted. The case highlights that modern evasion networks do not rely on a single vulnerability, but on the systemic exploitation of numerous small structural gaps which collectively enable covert maritime logistics at scale.

Why this matters for trade finance and supply chains

High‑risk behaviours have become mainstream

AIS spoofing, with 2,500+ cases detected in the past three years, and increasingly complex ownership restructuring are now standard across sanctions-evading fleets. The tools required to manipulate AIS signals are inexpensive and widely accessible, meaning traditional reviews to verify trade routes are no longer enough for trade finance due diligence. To combat such manipulation, ownership changes should be embedded into customer and trade finance due diligence, and actively monitored, not treated as exceptions. Understanding where beneficial ownership has shifted, and critically why, is now central to spotting elevated sanctions and financial crime exposure.

Documentation alone does not equal legitimacy

Ship-to-ship (“STS”) transfers and sudden changes in identity, ownership and cargo undermine traditional document-driven assurance. As deceptive routing becomes more sophisticated, regulators are expanding monitoring beyond historic hotspots and focusing on firms’ heightened exposure to clients operating outside established risk appetites.

Flags are turning red 

Shifts of vessels into registries of convenience such as Panama, increasingly reflect opportunism rather than oversight. Behavioural indicators, such as inconsistent routing, sudden reflagging, and unusual port calls now matter more than an entity’s formal jurisdiction or paperwork. 

What we expect next

Broader enforcement geography

Interdictions are likely to expand beyond the Caribbean into the North Atlantic and other strategic corridors such as the Panama Canal as authorities target stateless and falsely flagged vessels.

More complex routing and STS-transfers

Expect more mid‑ocean transfers and circuitous routing to obscure origin and chain of custody, directly heightening trade-based money laundering risks.

Heightened safety and insurance scrutiny

Ageing, uninsured vessels and overpriced commodity insurance will trigger tougher inspections and insurer withdrawals, generating more expansive due diligence checks, operational delays for corporates, logistics providers and financiers. 

What firms should build now:

• Dynamic risk scoring and automated alerts that integrate maritime indicators, identity change patterns, and geopolitical triggers into onboarding and monitoring.
• STS-risk overlays identifying known transfer zones, combined with enhanced due diligence on high-risk industries, commodities, and corridors.
• Geopolitical playbooks to pause exposure, re‑paper, reclassify risk, tighten tactical controls, or execute controlled exits.

Firms that build smart, adaptive controls will be best equipped to bridge these troubled waters.