The Zombie Tanker Double: How Iran Outsourced Identity Fraud to Restart Oil Exports

Zombie tankers just became operational tools, not just warnings.

The second ghost ship in five days — an Aframax supposedly scrapped in Bangladesh five years ago, now signalling passage across Hormuz under the fake identity 'Nabiin' — marks a pivotal shift in how Iran is managing forced closure of global trade's most critical chokepoint. This is not improvisation. This is scale.

Data from Bloomberg confirms the pattern. Last Friday, the LNG carrier 'Jamal' crossed Hormuz after being recorded beached at an Indian demolition yard in 2025. Now, within 96 hours, a second vessel executes the same identity swap. Both vessels maintained AIS silence during critical periods. Both emerged in the Gulf of Oman with new identities and no clear destination data.

WHAT CHANGED: From Isolated Incidents to Supply Chain Attack

Previous zombie ship sightings were treated as anomalies — isolated bad actors using shell registries. But two coordinated transits in a single week signal systematic coordination. Bloomberg's analysis identified the vessel manager as Muhit Maritime FZE and owner Sagitta Maritime Co Ltd, both Dubai-registered with identical contact details and unresponsive telephones.

This structure mirrors known Iran-linked dark fleet networks: shell companies, shared contact infrastructure, coordinated timing. It suggests Iran either directly controls or has contracted with an established sanctions-evasion logistics operator to run identity-swap operations at scale.

INSURANCE AND P&I EXPOSURE: Who Takes the Risk?

Here's where maritime compliance breaks down. A zombie tanker carrying oil through Hormuz has no legitimate insurance. P&I clubs that discovered they'd insured a "Jamal" that doesn't exist face a contractual nightmare: coverage void, claims denied, shipowners vanish into shell company networks.

For banks providing letters of credit against oil sales from these vessels, KYC/AML (know-your-customer/anti-money-laundering) verification collapses. The "Nabiin" is a transaction without a verifiable counterparty. Under OFAC's maritime sanctions framework, lending on Nabiin cargo creates secondary liability for correspondent banks — exposure that reaches US capital markets.

SANCTIONS ENFORCEMENT BLIND SPOT: AIS Manipulation + Registry Fraud

OFAC currently tracks known vessel names, IMO numbers, and beneficial owners. Zombie tankers attack this foundation: they use real IMO numbers belonging to scrapped ships. The regulatory database still shows 'Nabiin' as an Aframax — matching the vessel's actual tonnage and configuration.

A vessel officer reporting to coastguard as 'Nabiin' isn't technically lying about ship characteristics. But the ship's physical identity is false. This is one layer deeper than AIS spoofing (fake GPS) — it's registry spoofing backed by real vessel data.

Enforcement response: OFAC would need to flag not just the vessel name, but cross-reference demolition yard records against current AIS registries — a manual task requiring maritime-intelligence integration that most compliance systems lack.

CREW AND FLAG STATE COMPLICATIONS: The Real Pressure Point

Both zombie vessels carried or indicated crew from Iran-allied nations. The Jamal and Nabiin are flagged and crewed in ways that layer risk. If a US or European flag-state officer boards one, they're technically boarding a vessel under false registry — creating admiralty and maritime law chaos that makes prosecution difficult without clear statutory authority.

More practically, the crews are trapped. Seafarers on zombie ships face repatriation limbo if intercepted. The shipowner is a shell. The flag state is questionable. Traditional maritime safety net (crew employment protections, repatriation guarantees) collapses.

MARKET IMPLICATION: Normalization of Identity Fraud as Export Strategy

If Iran successfully runs 2-3 zombie transits per week, the calculus changes. At $15M/cargo (current oil prices), even a 30% interception rate yields $210M monthly revenue to bypass sanctions. That's capital to hire more brokers, run more ghost ships, coordinate with additional demolition yards.

The question isn't whether one zombie makes it through. It's whether Iran has industrialized identity fraud enough to maintain marginal volumes while full Hormuz capacity remains politically blocked.

WHAT HAPPENS NEXT: Enforcement Escalation or Market Equilibrium?

Option 1: OFAC escalates to real-time demolition yard monitoring, flags all decommissioned vessels, and mandates automated cross-checks. This takes months and requires IMO database integration.

Option 2: P&I clubs stop insuring any vessel with AIS-routing inconsistencies, effectively strangling zombie vessels' market access. Insurance premiums spike to uneconomic levels.

Option 3: Iran runs enough volume on marginally profitable margins that sanctions impact (global oil price shock) outweighs enforcement pressure. This is happening now.

The second zombie tanker wasn't an accident. It was proof of concept.