Fraud Intelligence
Dark-Fleet Routing and Sanctions Evasion
How AIS-gap dark-fleet routing and price-cap circumvention work, the document red flags, and the FATF, OFAC, and UCP 600 controls compliance teams should apply.
Screening a specific counterparty? Full 7-step dossier — $25, no account, report by email within the hour.
What Dark-Fleet Routing Means
A "dark fleet" refers to vessels that transport sanctioned or price-capped crude and refined products while deliberately obscuring their movements, ownership, and the true origin of cargo. The defining behavior is the AIS gap: an Automatic Identification System transponder that goes dark for hours or days, typically over a ship-to-ship transfer zone or near a loading port that the operator wants to keep off the record.
For compliance teams screening oil and product trades, dark-fleet routing is not a single fraud. It is a logistics pattern layered on top of trade-finance documentation that is engineered to pass a fast review. Understanding the sequence helps you catch it before settlement.
How the Pattern Works Step by Step
The mechanics are repeatable across clusters. The Novorossiysk-Turkish-Med dark-fleet cluster documented in our corpus follows a representative path.
- Loading at a sensitive port. Cargo loads at an origin such as Novorossiysk that the chain wants to disguise. The genuine load port establishes the true origin under any honest bill of lading.
- The AIS gap. Shortly after departure, or during transit toward a transfer area, the vessel's transponder stops broadcasting. The gap is the operational fingerprint. Position reporting resumes only after the sensitive leg is complete.
- Ship-to-ship transfer or re-routing. Cargo is transferred at sea or routed through an intermediate hub. In the Novorossiysk pattern, loadings are re-routed via Turkish-Mediterranean ports so the paper trail can claim a different point of origin.
- Document re-papering. A fresh set of bills of lading is issued claiming a neutral origin. The new documents reference the intermediate port, not the true load port, and the cargo is presented to the buyer or financing bank as clean.
- Presentation to the buyer. The trade arrives with documentation that looks complete. The buyer or its bank reviews a bill of lading, a certificate of origin, and an offer that may carry the hallmarks of a soft corporate offer scam, the kind described in the Petroge Energy pattern: virgin product grades, ICPO-first procedures, performance-bond demands, and unnamed refinery partners.
Document and Red-Flag Signals
Most of these signals are visible in paper and metadata before any cargo moves. Train reviewers to treat clusters of them, not single instances, as escalation triggers.
Vessel and routing signals
- AIS gaps that coincide with transit through known transfer zones or near sensitive load ports.
- A bill of lading origin that does not reconcile with the vessel's last broadcast position before the gap.
- Re-routing through hub ports with no commercial logic for the stated buyer and seller.
- Frequent flag changes, recent re-flagging, or ownership through shell entities with no operating history.
Documentary signals
- Certificates of origin claiming a neutral country when the realistic supply chain points elsewhere.
- Bills of lading with timestamps or port sequences that do not align with published vessel tracking.
- Pricing that sits outside any plausible market band, which can indicate price-cap circumvention.
Counterparty signals
- Soft-offer hallmarks: ICPO-first procedures, 2 percent performance-bond demands, virgin D2 or D6 and EN590 grades pitched without a named refinery, and zero trade-press footprint. The Petroge Energy LLC pattern is the canonical example.
- Self-described "direct representative of the seller" or mandate-letter intermediaries who cannot evidence a chain of authority. Pinnacle Petrol LLC's pitch of a 50,000 MT EN590 ULSD loading at Rotterdam to an undisclosed buyer illustrates the undisclosed-end-buyer structure that frustrates know-your-customer review.
- Fabricated corporate credentials. The Simar Chahal LinkedIn profile, which claims a Chevron "Group Chief Executive Officer" role since 2002 that does not match Chevron's actual leadership, shows how easily a counterparty contact can manufacture authority. Verify named executives against the company's official disclosures, never against social profiles.
Relevant Regulatory Frameworks
Three public frameworks govern most of the obligations that apply here.
FATF Recommendation 10 (Customer Due Diligence). Recommendation 10 requires identifying the customer and the beneficial owner, understanding the purpose of the relationship, and conducting ongoing scrutiny of transactions to ensure they are consistent with what is known about the customer. Undisclosed end-buyers and mandate-letter chains directly conflict with these duties.
OFAC sanctions programs. The Office of Foreign Assets Control administers U.S. sanctions, including price-cap policy on certain crude and petroleum products. Facilitating a transaction that evades a price cap, or dealing with blocked vessels or persons, can create exposure. AIS manipulation and origin re-papering are recognized evasion techniques addressed in OFAC guidance.
UCP 600. The Uniform Customs and Practice for Documentary Credits governs how banks examine documents under letters of credit. UCP 600 requires that documents appear on their face to constitute a complying presentation. It does not require banks to verify underlying facts, which is precisely why re-papered bills of lading can pass a documentary check. Compliance teams must layer sanctions and origin screening on top of UCP 600 examination rather than relying on it.
What a Compliance Team Should Do
- Reconcile paper against position data. Compare bill-of-lading origin and timing against independent AIS history. Flag any unexplained gap that overlaps a transfer zone.
- Verify counterparty authority at source. Confirm named executives and mandate claims against official company disclosures, not LinkedIn or supplied letters.
- Treat soft-offer hallmarks as a screening gate. ICPO-first procedures, performance-bond demands, virgin grades without a named refinery, and absent trade-press footprint should block onboarding until resolved.
- Refuse undisclosed end-buyers. A transaction you cannot trace to an identified beneficial owner cannot satisfy Recommendation 10.
- Document and escalate. Record the red-flag cluster, the frameworks engaged, and the resolution. Where evasion is suspected, escalate per your OFAC and local reporting obligations.
Dark-fleet routing succeeds when documentation review and movement data are checked in isolation. Reconciling the two is the most reliable control a compliance team can apply.
OilFlow Intelligence
Verified trade-fraud patterns, sanctions deltas, and regulator actions. Weekly, for compliance and risk teams.
Double opt-in. No spam. The quarterly Compliance Index ships to subscribers first.