Zombie Tankers Rising: Scrapped Ships Resurrect With Fake Identities to Exit Hormuz; Sanctions-Evasion System Accelerates

ZOMBIE TANKERS & THE HORMUZ IDENTITY CRISIS

On March 23, 2026, ship-tracking data showed an Aframax tanker designated Nabiin exiting the Strait of Hormuz fully laden. The problem: the Nabiin was demolished in a Bangladesh breaking yard five years ago. It is, in maritime terms, a zombie ship—a vessel that exists only as a fraudulent AIS broadcast, likely spoofing the legitimate identity of a scrapped hull.

This is the second such case in 72 hours. On March 21, a liquefied natural gas carrier bearing the name Jamal signaled Hormuz transit, despite being recorded beached at an Indian demolition facility one year prior.

THE MECHANICS

Identity fraud in shipping typically works through two pathways. The first uses AIS manipulation: operators register fake MMSI numbers (Maritime Mobile Service Identity) for vessels under dark conditions, then re-broadcast with a legitimate scrapped ship's name and IMO number when convenient. The Nabiin scenario reflects this. When the vessel entered the Persian Gulf on March 1 (before the war), it was genuinely present. It then remained dark during the crisis period and re-emerged as a laden tanker exiting the strait—with no record of how, when, or from where it loaded cargo.

The second pathway involves straight identity theft: registering a scrapped hull's identity on a new vessel. Both methods depend on AIS signal manipulation, lag time in regulatory updates, and the fog of war created by broader Hormuz chaos.

SCALE & ACCELERATION

This is not rare. Windward AI estimates that 300+ vessels in global trade operate under fraudulent identities or manipulated AIS at any given time. The Hormuz crisis has triggered a sharp acceleration: operators are leveraging the chaos and legitimate AIS darkness (caused by legitimate vessels turning off transponders for safety) to mask identity fraud.

The financial incentive is stark. A tanker operator carrying Iranian crude through Hormuz faces either: (a) paying Iran's $2 million toll, (b) routing around Africa or Central Asia (adding weeks and millions in fuel), or (c) spoofing identity and running dark. The zombie ship option provides plausible deniability—if caught, the operator claims AIS data corruption, not intentional fraud.

SANCTIONS ENFORCEMENT GAP

This exposes a critical vulnerability in sanctions architecture. OFAC and EU designations target specific vessel names and IMO numbers. A ship operating under a false identity—or an identity that officially no longer exists—falls into a legal gray zone. The vessel may be flagged to a sanctions-compliant state (Liberia, Panama), carry insurance from a non-sanctioned underwriter, and operate under a Dubai-based manager whose connections are obscured.

By the time maritime authorities connect the dots (Nabiin's original IMO, the current vessel's hull specifications, AIS data from March 1), the vessel is in international waters with weeks of lead time. Prosecution requires jurisdictional cooperation, forensic AIS analysis, and port state control—tools that are slow compared to operator agility.

IMPLICATIONS FOR MARITIME COMPLIANCE

The zombie ship phenomenon signals an accelerating gap between sanctions intent and maritime reality. Operators are gaming the system not through crude flag-switching (which is monitored), but through AIS manipulation and identity resurrection. P&I clubs face coverage uncertainty: does insurance cover a legitimate cargo shipment on a vessel operating under false identity? The answer is murky, and that murkiness is the operational edge operators are exploiting.

For maritime intelligence, the lesson is brutal: AIS alone is not truth. Cross-referencing with hull specifications, historical position data, and port authority records becomes essential. The Hormuz crisis has compressed the timeline for this verification—and operators know it.