The National Crime Agency (NCA), together with the Office of Financial Sanctions Implementation (OFSI) and the Foreign, Commonwealth and Development Office (FCDO), has issued an Amber Alert to raise awareness among maritime, financial and private-sector institutions regarding sanctions evasion involving shadow fleets and related commodity trading networks. The alert forms part of the Joint Money Laundering Intelligence Taskforce (JMLIT) structure, designed to improve cooperation between law enforcement and the financial sector.

The document outlines how sanctioned regimes, including Russia, Iran and the Democratic People’s Republic of Korea (DPRK), continue to generate revenue from energy commodities despite international sanctions. These regimes are supported by complex networks of intermediaries that facilitate commodity movement, vessel concealment, documentation obfuscation, and financial laundering processes.

Shadow fleets are described as older vessels with opaque ownership structures that are repeatedly renamed or re-flagged under permissive jurisdictions. Tracking can be obscured through manipulation of Automatic Identification Systems (AIS), spoofing, circuitous routing, ship-to-ship (STS) transfers, and co-mingling of sanctioned cargo to conceal origin.

The alert explains that these networks rely on front or shell companies, rapid corporate restructuring, isolation-company architectures, and extensive use of serviced-office or virtual addresses. These structures are designed to fragment beneficial ownership, create multiple trading fronts, and increase difficulty of regulatory or sanctions screening.

Financial flows can involve informal value-transfer mechanisms, complex routing, third-party payments, barter arrangements, cryptocurrency, or offshore structures. Trade documents may misrepresent cargo origin, while maritime data may indicate a sanctioned port of loading.

The document provides typology characteristics summarising indicators such as illicit vessel use, successive STS transfers, frequent corporate changes, jurisdictional gaming, misleading or generic company names, unclear senior roles, unverified credentials, proxy ownership, and overstated or unverifiable commercial capabilities.

The alert emphasises that no single indicator confirms sanctions evasion and that several characteristics viewed together may warrant further scrutiny. It includes red-flag indicators relating to vessel identity, routing behaviour, inconsistent cargo documents, offshore structuring, sudden corporate expansion, or unexplained changes in vessel ownership or flag.

The NCA advises that regulated-sector entities may need to file Suspicious Activity Reports (SARs) if they suspect sanctions evasion or money laundering. Information may also be voluntarily shared with the NCA where it could disrupt criminal activity. The report explains applicable data-protection principles and legal exemptions for information sharing with law enforcement.

Please find a link to the alert here.