Shadow-Fleet AIS Spoofing Near Novorossiysk Persists as US-Sanctioned LPG Carriers Exit Iran Blacklist — 6 November 2026

Standfirst

This week’s enforcement picture moved on two fronts that directly affect compliance screening and operational costs. Windward identified seven sanctioned Russian tankers that deliberately spoofed AIS positions near the Bosphorus while actually sailing from Novorossiysk. At the same time, US-sanctioned LPG carriers were dropped from Iran’s PGSA blacklist. Both developments illustrate how evasion tactics continue even as formal lists shift, with the financial and operational burden falling on parties downstream of the designations.

New Designations and Delistings Recorded This Week

No fresh vessel or entity designations by OFAC, the EU, UK OFSI or the UN appear in the week’s reporting. The only list movement documented is the removal of certain US-sanctioned LPG carriers from Iran’s PGSA non-compliance blacklist. The seatrade-maritime.com account states that these carriers were dropped after UKMTO reported tanker strikes in the Strait of Hormuz, but supplies no names, tonnage figures or prior designation dates. Without a matching tranche pattern or authority announcement, the change cannot be read as an easing of Western sanctions; it reflects only an Iranian administrative adjustment.

The absence of new designations this week stands in contrast to the ongoing operational activity of already-sanctioned tonnage. The Windward data on seven Russian tankers covers the preceding 90 days and shows repeated, coordinated AIS manipulation rather than a one-off incident. Because the evidence supplies neither the names of the seven vessels nor the precise sanctions authorities that listed them, any compliance screen must still rely on the broader sanctioned-fleet dataset refreshed each Monday.

Evasion Mechanics in Active Use

The clearest mechanism detailed is AIS spoofing. The seven tankers repeatedly broadcast false positions indicating they were drifting near the Bosphorus entrance while satellite and other tracking placed them on voyages originating in Novorossiysk. Windward’s analysis covers a 90-day window ending on or about 5 November 2026 and describes the falsification as “routine and deliberate.” This tactic directly defeats position-based screening tools used by charterers and bunker suppliers.

No evidence in the supplied items describes STS transfers, flag-hopping sequences, insurance attestation fraud or document laundering. The single concrete evasion example remains the AIS manipulation cluster. Compliance teams can therefore treat repeated, geographically implausible AIS drift reports near the Bosphorus as a red flag for Novorossiysk-origin cargoes, but must note that the dataset does not yet quantify how many additional vessels may be employing the same method outside the seven identified.

Exposure Carried by Charterers, Agents, Suppliers and Crews

The items do not name specific charterers, port agents or bunker suppliers that handled the seven spoofing tankers. They likewise contain no figures for unpaid wages, denied port entries or repatriation failures aboard designated vessels. The only human or commercial exposure referenced indirectly is the claim by Russian owners of a seized tanker that the United States improperly sold the vessel for scrap; that dispute is before US courts and does not yet affect crew claims or downstream counterparties.

Because the supplied reporting stops at the technical detection of spoofing and the Iranian list adjustment, the distribution of financial risk across charterers, agents, class societies and banks cannot be quantified from this week’s evidence. The gap is material: operators screening the Monday sanctioned-fleet dataset will still lack granular loss data on which to calibrate due-diligence spend.

Enforcement Limits: Announcements Versus Detentions

The week produced one technical detection report and one Iranian administrative change, but no corresponding detention announcements, arrests or cargo seizures tied to the seven spoofing tankers. The seatrade-maritime.com item links the PGSA delistings to UKMTO reports of Hormuz strikes, yet records no parallel Western enforcement action. This leaves a visible distance between list maintenance and physical enforcement.

The pattern fits previous cycles in which designation lists and analytical reports accumulate faster than port-state or flag-state interventions. Without court dates, wind-down expirations or specific detention records in the evidence, the practical effect on shadow-fleet throughput remains unmeasured for the coming week.

Second- and Third-Order Consequences Across Stakeholders

Charterers relying on position data alone face an elevated risk of inadvertently booking sanctioned tonnage whose AIS has been falsified for up to 90 days. Port agents in the Bosphorus region may see increased requests for verification that current tools cannot satisfy. Bunker suppliers without access to Windward-grade analytics could deliver fuel to vessels whose declared routes are false. Crews on the seven identified tankers continue to operate under whatever contractual and insurance arrangements existed at the time of designation; the evidence supplies no update on wage or repatriation status.

Further downstream, banks processing letters of credit tied to Novorossiysk-origin cargoes must now treat repeated Bosphorus drift reports as a potential sanctions trigger. The absence of new designations this week does not reduce that requirement; it simply means the existing list remains the operative screen.

Counter-Argument and Alternative Scenario

An alternative reading holds that the Iranian delisting of US-sanctioned LPG carriers signals a narrowing of the shadow-fleet problem in the LPG segment and that AIS spoofing may be confined to a small, detectable cluster rather than a systemic practice. If future weekly datasets show no expansion of the seven-vessel spoofing group and if no additional delistings occur, this view would gain support. The current evidence, however, supplies only the single 90-day cluster and the one Iranian list change; it does not yet demonstrate either contraction or stability of the broader sanctioned fleet.

Questions Decision-Makers Should Be Asking

• Which seven tankers were identified by Windward, and what are their current flags and managers? The supplied items give none of these identifiers.
• Has any port-state control authority detained or inspected a vessel matching the spoofing profile since the 90-day analysis window closed? No such action is recorded.
• What is the precise mechanism by which the US-sanctioned LPG carriers were removed from the PGSA list, and does it affect any Western sanctions obligations? The reporting states only that they were dropped.
• Are any wind-down authorisations for previously designated Russian energy entities scheduled to expire between 7 November and 6 December 2026? The items contain no such dates.
• Which class societies or P&I clubs have attested cover for the seven spoofing vessels in the past 90 days? No attestations are mentioned.
• What volume of Novorossiysk-origin crude or products moved under spoofed AIS in October 2026 compared with September? The Windward report supplies no cargo figures.

Triggers and Thresholds to Watch

Next 24 hours: any OFAC or EU designation notice referencing Novorossiysk-origin tankers or any public detention report tied to Bosphorus AIS anomalies.

Next seven days: release of the Monday 10 November sanctioned-fleet dataset and any accompanying Windward or Lloyd’s List update expanding or contracting the seven-vessel spoofing cluster.

Next thirty days: court filings or judgments in the Russian-owner challenge to the US scrap sale of the seized tanker; any new tranche of designations that follows the Hormuz tanker-strike reporting; and any port-state control statistics covering the Bosphorus approaches for November.