Russia’s shadow fleet has evolved from a geopolitical workaround into a structural feature of global oil trading, and, as a result, a growing source of risk for those in the maritime and finance industries.
Since 2022, more than 230 ageing tankers worth roughly £5 billion at the point of sale were sold by US and European owners into what became Russia’s so called ‘shadow fleet’. Many of those transactions were lawful and above board. But they expanded the number of vessels operating with opaque ownership, frequent reflagging and limited transparency around the origin of their cargo. For banks, insurers and lessors, the issue is becoming increasingly serious. Sanctions exposure is shifting from the identity of the counterparty to the behaviour of the asset itself.
Regulators in Washington, London and Brussels have responded with firmer guidance. OFAC, OFSI and the European Commission treat practices such as flag hopping, ship to ship (STS) transfers and location masking via AIS as red flags for potential sanctions evasion. Expectations are widening accordingly. Financial institutions are now being asked and expected to understand not only who they are dealing with, but what the vessels connected to those relationships are doing at sea.
Three pressure points now define maritime sanctions risk in 2026, as Robert Soban, Director of Maritime Risk & Compliance, Pole Star Global, explains.
Unclear ownership has become a compliance vulnerability
Layered corporate structures and repeated reflagging of vessels is not new to shipping. What has changed however, is how regulators are interpreting them.
For example, a tanker may move through multiple jurisdictions and holding companies in a short period, and during this, flags may change several times. Each shift can dilute transparency and muddy the waters around who actually owns the vessel, and is the ultimate beneficial owner with operational control. Where those changes intersect with high-risk trades – such as Russian crude exports subject to price cap restrictions, or cargoes moving through embargoed jurisdictions – the compliance burden increases further.
Static due diligence at onboarding is unlikely to provide sufficient comfort where ownership structures evolve quickly. Institutions need to trace historical flag changes, corporate records and control structures with greater precision in order to combat this. The risk of not doing so is twofold: missing a sanctioned link embedded within a complex structure, or generating unnecessary friction caused by internal data that cannot confirm control with confidence.
In either case, this opacity poses serious problems and challenges for risk and compliance teams and goes beyond simple regulatory exposure.
Voyage behaviour now carries enforcement consequences
Another concern to bear in mind is that sanctions risk no longer presents itself solely at the point of financing or underwriting. It can emerge mid-voyage.
Ship to Ship (STS) transfers can take place in restricted waters, moving contraband or smuggled goods from one designated ship to another ‘clean’ vessel. Unexplained routing deviations across embargoed zones and prolonged loitering offshore can materially alter a vessel’s risk profile after a transaction has been agreed. These patterns are all often associated with attempts by bad actors to obscure the origin of their cargo or destination for the purpose of sanctions evasion.
Regulatory guidance increasingly treats deceptive shipping practices (DSPs) themselves as indicators of potential sanctions breaches. In July 2025, for example, the UK’s National Crime Agency (NCA) and HM Treasury’s Office of Financial Sanctions Implementation (OFSI) issued a joint Red Alert warning on “Shadow Fleet Sanctions Evasion and Avoidance Networks”, identifying AIS manipulation, STS transfers and opaque ownership structures and frequent reflagging as red-flag behaviours requiring enhanced due diligence and reporting. That places pressure on institutions to monitor routing and activity on an ongoing basis rather than relying exclusively on periodic counterparty reviews. The compliance question for those in the industry is shifting subtly from “who is the customer?” to “what is the vessel doing?”
Behavioural anomalies leave an auditable trail
Illicit maritime activity rarely happens without leaving a trial of data behind. Vessels that disable, manipulate or ‘spoof’ AIS transmissions, falsify draught readings or repeatedly ‘go dark’ tend to follow identifiable behaviour patterns that industry experts are able to spot.
The relevance for financial situations lies in documentation and defensibility. In an enforcement environment and with sanctions landing across a number of nations and flag states, it may not be enough to argue that exposure was indirect or unintended. Instead, firms may be asked to evidence how vessel behaviour was monitored, assessed and escalated.
Analysing behavioural anomalies alongside ownership structures and geographic data creates a clearer picture of risk before it turns into a breach, asset freeze or an event resulting in reputational damage. In that sense, maritime sanctions compliance increasingly resembles market surveillance in related industries, where risks are often revealed through repeated behavioural patterns, rather than a single transaction viewed in isolation.
A structural shift in maritime finance
The expansion of the shadow fleet in recent years has shown that sanctions risk in shipping is not static. It can evolve during a voyage, depends on access to credible vessel and routing data, and is often driven by what a ship actually does at sea, rather than solely who owns or charters it.
As scrutiny from regulators across the UK, USA and Europe continues to ramp up, maritime exposure is moving into board-level risk discussions, and from a narrow compliance issue into a material financial risk. Institutions that treat vessel activity as peripheral operational detail may struggle to meet the growing expectations from regulators, and find themselves exposed to unnecessary risk.
Many in the industry are turning to maritime intelligence tools that offer a single, verifiable view that links all of this data together, encompassing ownership records, historical flag changes, live vessel tracking and behavioral risk indicators into one defensible framework. Technology that connects those data points, rather than treating them in isolation, is becoming central to how firms demonstrate active oversight of maritime exposure.
In 2026, the question for maritime finance is not whether the shadow fleet actually exists. It is whether firms can show, with evidence, that they have visibility over the risk that it creates.
Be the first to comment