The Dark Fleet Problem: Why Sanctions Evasion is a Port Security Issue

The specter of the Prestige — the single-hulled tanker that broke apart off the coast of Spain in 2002, spilling 77,000 tonnes of heavy fuel oil — looms over every discussion of the dark fleet. That vessel was operating under a flag of convenience, with opaque ownership, and had been turned away from multiple ports before the catastrophe. More than two decades later, the dark fleet problem is orders of magnitude larger, and ports are on the front line.

What the Dark Fleet Looks Like in 2026

The "dark fleet" refers to the growing number of tankers — estimated at over 600 vessels — that transport sanctioned crude oil from Russia, Iran, and Venezuela outside the compliance framework that governs legitimate maritime trade. These vessels share common characteristics: they operate with AIS transponders switched off for extended periods, use ship-to-ship (STS) transfers in open water to obscure cargo origin, carry multiple layers of shell company ownership, and frequently present forged or inconsistent documentation at port.

Many of these vessels are aging tankers — 15 to 25 years old — operating without P&I club insurance, without classification society oversight, and without the maintenance standards that legitimate operators maintain. They represent a concentrated environmental and safety risk at every port they enter.

Why This Is a Port Security Problem

Port security teams operating under the ISPS Code are responsible for screening vessels before they berth. The Ship Security Assessment and the Declaration of Security process are designed to verify that an arriving vessel meets baseline security standards. But these processes were designed for a world where most vessels operate transparently — with valid ISM certificates, active AIS, known operators, and P&I coverage.

Dark fleet vessels systematically defeat these assumptions. Their ownership is layered through shell companies in jurisdictions with minimal disclosure requirements. Their AIS histories show gaps of days or weeks. Their insurance documents may reference entities that do not exist. And the flag states under which they operate often lack the capacity or willingness to verify compliance.

When a dark fleet vessel enters a port, the facility operator is exposed to sanctions violation risk, environmental liability, and the physical security threat of an uninsured, poorly maintained vessel at berth. If that vessel has an incident — a cargo spill, a fire, a structural failure — the port bears consequences that far exceed the revenue from handling the call.

AI-Driven Detection

The traditional approach to identifying suspicious vessels relies on manual checks against sanctions lists and flag state databases. This approach is reactive, slow, and easily circumvented by the document fraud and ownership obfuscation that dark fleet operators employ.

AI-driven vessel risk scoring changes the detection model fundamentally. By analyzing AIS behavioral patterns — transponder gaps, speed anomalies, loitering in known STS transfer zones, deviations from declared routes — machine learning models can flag vessels that exhibit dark fleet characteristics before they arrive at the port.

Specific indicators that AI systems can detect at scale include:

• AIS gap patterns consistent with transponder manipulation rather than technical failure, based on gap duration, location, and correlation with sanctioned trade routes.
• STS transfer behavior identified through vessel proximity analysis in open water, particularly in known transfer hotspots off Ceuta, Kalamata, and the Laconian Gulf.
• Ownership network analysis that maps shell company structures and identifies connections to sanctioned entities, even through multiple layers of intermediaries.
• Document anomaly detection that cross-references presented certificates, insurance documentation, and flag state records against known databases to identify inconsistencies.

The Regulatory Direction

The IMO and national maritime authorities are tightening expectations around dark fleet identification. The EU's recent enforcement guidance explicitly references port state responsibility for identifying sanctions evasion, and OFAC enforcement actions have increasingly targeted port operators and service providers who facilitate sanctioned trade, even unknowingly.

For port security teams, the message is clear: ignorance is not a defense, and manual screening is no longer sufficient. The scale of the dark fleet, the sophistication of its evasion techniques, and the regulatory trajectory all point toward the same conclusion — automated, AI-powered vessel screening is becoming a compliance requirement, not just an operational advantage.

The next Prestige-scale incident involving a dark fleet vessel is a matter of when, not if. The question for port operators is whether their detection capabilities will identify the risk before it reaches their berth.