BREAKINGChina-linked hackers step up attacks on European shipping
← Eagle Intelligence News
Dark FleetHIGH ALERT

Zombie Ships: Shadow Fleet Identity Swaps Emerge as New Evasion Tactic in Hormuz

Eagle Intelligence AI·Eagle Intelligence·March 22, 2026 · 12:03 UTC·3 min read
Why This Matters

A vessel posing as scrapped LNG carrier Jamal transited Strait of Hormuz on Friday using ghost identity; shadow fleet operators now employ vessel resurrection tactics to bypass 95% traffic decline and war risk closures.

Zombie Ships: Shadow Fleet Identity Swaps Emerge as New Evasion Tactic in Hormuz

Advertisement

A ship claiming to be the LNG carrier Jamal exited the Strait of Hormuz on Friday morning, despite the same vessel being scrapped and dismantled at an Indian yard since October 2025. The apparent identity swap marks a critical escalation in shadow fleet tactics: operators are no longer simply flag-hopping or disabling AIS transponders. They are now engaged in vessel resurrection, purchasing the registration credentials of broken-up ships to create phantom vessels that exist on paper but navigate physical waters with complete operational opacity.

This represents a technical and legal innovation that subverts existing sanctions enforcement architecture. Prior shadow fleet techniques relied on AIS manipulation, false flag registries, or age-based obfuscation. Zombie vessel tactics operate at a different layer: they divorce the digital identity (registration, credentials) from the physical vessel itself, creating a verification gap that traditional OFAC port-state controls cannot easily close. A port authority conducting cursory flag-state verification would find legitimate ownership records for the Jamal identity, while the actual vessel under that name is a completely different asset in an undisclosed location.

The Jamal doppelganger emerged sporadically: it first transmitted a location near Sohar, Oman on March 13, then went dark for seven days before reappearing in the Persian Gulf on March 20 claiming no destination. This intermittent signaling pattern suggests intentional AIS manipulation layered atop false identity registration, compounding evasion complexity. The vessel likely executed a simultaneous flag change and identity assertion, with electronic spoofing covering its movements during the dark period. Previous dark fleet cases involved individual techniques; this case integrates multiple evasion methods sequentially.

The operation is particularly brazen because LNG carriers are highly specialized, limited-supply vessels. Only 583 operational LNG carriers exist globally. Each has distinct hull characteristics, size specifications, and technical requirements that make large-scale misrepresentation theoretically difficult. Yet the Jamal case proves this assumption wrong: if a vessel can acquire dead registration credentials for a scrapped ship of similar capacity and design class, it can evade verification systems for weeks. This implies an organized supply chain: a network of decommissioning yards willing to sell registration credentials, maritime identity brokers facilitating the transaction, and likely P&I club complicity in issuing cover notes for ghost operations.

What makes this critical for maritime compliance officers and P&I underwriters: this zombie ship phenomenon invalidates prior dark fleet detection methods. Traditional approaches focused on vessel age, flag-state opacity, and AIS transmission anomalies. Zombie vessels mimic legitimate credentials perfectly at the point of port-state control inspection, requiring deeper forensic analysis: photogrammetric hull comparison, engine serial number verification, and real-time flag-state database cross-referencing. These tools exist but are rarely deployed due to cost and political friction (many developing nations resist external verification). The burden has shifted from evasion complexity to enforcement rigor.

From a sanctions compliance perspective, zombie ships represent a cascading failure. If a port authority cannot reliably verify vessel identity, then the entire sanctions architecture of vessel designations, blocking orders, and SDN listings becomes porous. A single ship can assume multiple deceased identities across multiple transits, effectively franchising its evasion capability. This implies regulators must fundamentally rethink port-state control protocols: moving from credential-based verification to forensic vessel identification, adding delays but enabling enforcement precision.

The timing is significant. This innovation surfaced during a moment of peak Strait of Hormuz disruption, when 95% of normal traffic has ceased and vessel scarcity drives premiums for any successful crossing. High desperation creates innovation incentives. Zombie vessels will likely proliferate in coming weeks as the blockade persists, and as operators test new variations (multi-identity swaps, cascading registrations, coordinated spoofing networks).

Advertisement

Related Eagle hubs

⚠️ Intelligence Disclaimer: This analysis is produced by Eagle Intelligence's AI-assisted automated analysis system and is provided for informational purposes only. See our editorial standards. It is not a substitute for official maritime safety advisories from UKMTO, MSCHOA, IMO, or flag state authorities. Operational decisions should always be based on official guidance and professional judgment. Eagle Intelligence accepts no liability for any loss arising from reliance on this content.

Tracked actorsThe Shadow Fleet

Get Eagle maritime risk alerts by email

Live chokepoint status, war-risk shifts, and the daily maritime wire, straight to your inbox. Free.

📰 Related Analysis

Comments & Corrections

0Spot an error? Flag it below ↓

Leave a comment

All comments moderated for quality

Be the first to comment on this story
Corrections policy: Flag inaccuracies using the ⚠️ Correction type. Eagle Intelligence will review flagged corrections. Verified corrections result in an article update with a notice appended. Comments are stored locally in your browser and are not shared with other readers.