15JUN

Shadow fleet uses dead ships' identities

2 min read

11:33UTC

Maritime intelligence firm Windward documented tankers transiting Hormuz under the identities of scrapped vessels, with 14 State Department-sanctioned ships tracked in the region.

← Back to Longs rebuilt into an 8-week Brent low Jump to analysis ↓

EconomicDeveloping

Key takeaway

Blockade conditions improve the economics of dark fleet identity spoofing.

Windward documented a scrapped LNG carrier's registry reused by an active tanker last week, the clearest evidence of systematic identity fraud in Hormuz transits ¹. Under blockade conditions, the economics of sanctions evasion improve: legitimate passages are blocked, making dark-fleet alternatives more profitable .

The 14 State Department-sanctioned vessels represent the visible layer. The identity-spoofing technique requires cross-referencing physical vessel data against registry records, something CENTCOM patrol vessels are unlikely to do in real time. When GL-U lapses, more cargo will be pushed into legal grey zones, widening the incentives for identity fraud.

Deep Analysis

In plain English

Every ship at sea has a unique identity number, like a vehicle registration, that is supposed to be permanent and attached to that vessel for its entire working life. When a ship is scrapped, broken up for metal, its registration is supposed to be cancelled. What the shadow fleet is doing is taking the cancelled registration numbers of scrapped ships and using them on active, sanctioned tankers. It is the maritime equivalent of putting a dead person's driving licence on a car to evade police checks. Windward, a maritime intelligence company, tracked 14 of these ships carrying Iranian oil through the Strait of Hormuz. The blockade makes this worse: because legitimate transit routes are now closed, there is more money to be made by cheating, so more ships will do it.

What could happen next?

Consequence
Blockade conditions increase the financial incentive for identity spoofing, expanding the dark fleet's operational scope faster than enforcement capacity can track.
Risk
CENTCOM boardings of vessels using scrapped ship identities risk detaining cargoes from flag states not party to the blockade, generating diplomatic incidents.

Source Landscape

This story draws on neutral-leaning sources from Israel

Israel

Primary parallel: Russia's post-2022 shadow fleet assembled the same identity-spoofing infrastructure at scale after Western insurers cut off cover following the Ukraine invasion.

Lloyd's of London and the London P&I Club documented the pattern in 2023: tankers formerly flagged under Marshall Islands or Liberia registries re-registered under Gabon, Palau, or Cameroon while retaining IMO numbers from vessels already scrapped. Iran's current shadow fleet is operating the identical playbook, accelerated by the Hormuz blockade.

Counter-parallel: Russia's 2022-24 shadow fleet operated in open water where AIS spoofing alone was sufficient evasion. Hormuz is a 33km chokepoint with CENTCOM patrol assets now present, so the identity fraud must survive physical inspection rather than satellite tracking alone, raising the detection risk substantially.

Identity spoofing raises the effective cost of sanctions enforcement. CENTCOM boardings require physical verification against registry records, a process that takes hours per vessel and cannot be applied at scale across Hormuz traffic. The 14 verified vessels are the visible layer; the true number using borrowed identities is higher by definition, because the technique is designed to defeat remote monitoring.

For Iran, the economics improve under blockade: a sanctioned tanker that cannot transit legitimately faces zero incremental cost from adding identity fraud to its evasion toolkit. The marginal risk is absorption of a CENTCOM boarding; the marginal gain is continuation of oil revenue that would otherwise be fully blocked.

Sources:Windward Maritime Intelligence Daily·Windward Maritime Intelligence Daily·Windward Maritime Intelligence Daily

Mentions:Windward →Islamic Revolutionary Guard Corps (IRGC) →shadow fleet →Iran →International Maritime Organization →London P&I Club →Prima →Marshall Islands →Russia →Lloyd's of London →Strait of Hormuz →Ukraine →CENTCOM (US Central Command) →General License U →

First Reported In

Update #67 · Trump blockades Iran on a tweet

Windward Maritime Intelligence Daily· 13 Apr 2026

Read original →

Causes and effects

This Event

Shadow fleet uses dead ships' identities

Sanctions evasion through identity spoofing will accelerate under blockade conditions as legitimate transit routes close.

Led to

GL-U lapses Saturday, Treasury silent 25 days

Windward's 14-vessel dark-fleet identity fraud sample (ID:2292) illustrates how GL-U lapse would expand the grey-zone economics that make registry spoofing profitable.

Occurred 14 Apr 2026

Read story →

Brent at $94.79: markets price the gap

Dark-fleet sanctioned vessels moving freely under CENTCOM's carve-out, as documented on 12 April, caps Brent upside by keeping partial supply flowing.

Occurred 14 Apr 2026

Read story →

Different Perspectives

Sanctions compliance officer reviewing a Lukoil International GmbH bid

OFAC's amended FAQ 1224 gives a compliance desk its first published standard: full severance from Lukoil and a US-jurisdiction blocked account for sale proceeds. The conditions name neither ISAB nor Italy, so a Priolo Gargallo-linked bid answers a different question than a Neftochim Burgas or Petrotel Ploiesti one.

Managed-money funds on Brent Last Day

CFTC data for the week to 21 July showed managed money flipping 74,400 contracts to a net long of 15,665 against 1,410 short on the Brent Last Day contract, code 06765T. A fund that held that short through July has now covered it, and the spent short base raises the bar for the next leg higher.

Saudi crude exporters

Saudi-linked tanker transits through Bab el-Mandeb fell to about 7.5 a day after the 24 July underwriting withdrawal, pushing more barrels onto the longer route round the Cape or through the Yanbu terminal. Every diverted barrel ties up a ship for longer, and a fleet that turns slower charges more.

Tanker owners on the Bab el-Mandeb route

Lloyd's-market syndicates withdrew war-risk cover from Saudi-linked hulls on 24 July, leaving owners of that class of vessel to sail Bab el-Mandeb uninsured or not at all. Tanker transits on the route fell to roughly 7.5 a day, and cover, once withdrawn, does not return on a shipowner's timetable.

Eni

Eni's board approved second-quarter results on 29 July, swinging refining EBIT to a EUR0.08bn profit from a year-earlier loss even as group profit doubled, and named Red Sea freight cost as a cap on that improvement. A refiner absorbing higher shipping costs on Saudi-linked crude while its numbers improve treats the freight line as a drag, not a crisis.

Asian buyers (India, Japan, China, South Korea)

Asian refiners are absorbing 62% of Yanbu's 3.75m b/d flow, the bulk of Saudi Arabia's rerouted crude now clearing east rather than into the Atlantic basin. That destination split leaves Asian buyers more exposed to any single Yanbu-specific disruption than under the kingdom's normal multi-terminal export pattern.