The Shadow Fleet, Explained
A parallel tanker fleet now moves sanctioned cargo outside conventional flag, class and insurance arrangements. Here is how it works — and why list-matching cannot keep up.
"Shadow fleet" — also called the dark or grey fleet — describes a body of tankers that move sanctioned or sanctions-adjacent cargo while operating outside the conventional system of recognised flags, classification societies and mainstream marine insurance. By Varde's assessment the fleet has grown past 1,400 tankers, a structural shift rather than a temporary anomaly.
It exists because sanctions created demand for transport that the mainstream market would not, or could not, provide. Where there is demand, supply organises itself — and it has organised itself deliberately, around the seams between jurisdictions.
The mechanics of staying grey
The shadow fleet is not a single conspiracy. It is a set of repeatable techniques, used in combination, that exploit the fact that maritime oversight is distributed across many authorities that do not share a single view of any given vessel.
- —Flag hopping — moving registration between flag states of convenience, often to registries with limited capacity or appetite to enforce. Each change resets paperwork and complicates tracking.
- —Identity laundering — name changes, MMSI and IMO manipulation, and the revival of decommissioned identities to sever the link between a hull and its sanctioned history.
- —Opaque ownership — layering of shell companies and frequent ownership transfers so that beneficial ownership is expensive to establish and quick to change.
- —Insurance gaps — operating without recognised protection-and-indemnity cover, sometimes backed by unverifiable or state-linked guarantees that would not survive scrutiny after an incident.
- —Ship-to-ship transfers — moving cargo between vessels at sea, frequently with one or both transponders dark, to break the chain between origin and destination.
None of these techniques is individually conclusive. A vessel can change flag for legitimate commercial reasons. Ownership structures are layered for tax and liability reasons across the entire industry. The signal is in the combination, the sequencing and the timing.
Why a list is always behind
The intuitive response to sanctions evasion is a list: designate the vessels, publish their identifiers, and screen against them. Lists are necessary. They are also, by construction, a lagging indicator.
A vessel is added to a list after it has been identified. The techniques of the shadow fleet are designed precisely to delay that identification — and to make the identifier stale the moment it is published.
Sanctions data is also fragmented across jurisdictions. A vessel may be designated by one authority and not another, listed under one identity but operating under a new one, or linked to an entity that has itself been restructured. Reconciling that picture across authorities is a precondition for using it at all.
Behavioural analysis closes the gap
If the identity can be changed faster than a list can be updated, the durable signal is behaviour. Behaviour is harder to fake than paperwork because it has to happen in the physical world, in view of sensors that do not depend on the vessel's cooperation.
- —Repeated AIS gaps clustered around known transfer zones.
- —Position reports that conflict with independent satellite observation.
- —Loitering, rendezvous patterns and route choices consistent with evading observation rather than optimising a voyage.
- —Identity changes that follow designations rather than commercial events.
The exposure is not only geopolitical
It is tempting to file the shadow fleet under foreign policy. The exposure is broader. Banks and insurers carry sanctions and reputational risk on the cargoes and counterparties they touch. Port authorities and coastal states carry environmental and safety risk from uninsured, under-classed vessels operating near their infrastructure. Commodity traders carry supply-chain integrity risk.
For each of these, the practical requirement is the same: a reconciled, current view of vessel identity and behaviour, with findings graded for confidence and structured well enough to defend a decision after the fact. That is the gap between knowing the shadow fleet exists and being able to act on it.
Varde Intelligence — Analysis Desk
The Analysis Desk is Varde Intelligence's editorial byline. Varde Intelligence AS is a Norwegian intelligence and technology company whose work is shaped by practitioners with backgrounds in law enforcement, digital forensics, OSINT methodology and maritime security. We publish explainers, not predictions.
For an assessment scoped to your operating environment: