Correcting Technocentric Myopia: Rebalancing Maritime Intelligence to Counter Shadow Fleet Networks

Introduction

While primarily recognized as a state-funded tool to subvert international energy embargoes and sustain conflict funding for the ongoing Ukrainian-Russo war, Russian shadow vessels have since transitioned into a strategic maritime tool, engaging in hybrid warfare campaigns against allied nations. Chief among these asymmetric campaigns are, but not limited to, espionage and sabotage. While aggressive and coordinated transatlantic systemic approaches have yielded some measurable success, Russia’s restructuring and absorption of at least 120 sanctioned tankers into its registry, alongside its prolific acquisition of new lower-signature vessels have enabled the shadow fleet to sustain an estimated force structure of approximately 1,400 to 3,200 vessels.

Given the operational challenges posed by Russia’s shadow fleet, multinational initiatives have increasingly leveraged AI-enabled resources to assess potential threat vectors and monitor vessel activity, including Nordic Warden System and NATO’s Baltic Sentry. While AI-augmented systems act as a force multiplier, allowing for comprehensive and instantaneous maritime domain awareness (MDA), the fleet’s operational resilience notably supersedes conventional maritime surveillance capabilities. Shadow vessels use adaptive and deceptive tactics, both within and outside the maritime domain, that exploit fragmented commercial registration systems and operate predominantly within administrative, legal, and commercial networks that cannot be seamlessly surveilled in a technocentric ecosystem. In order to improve maritime surveillance of shadow fleet vessels, allies require complementary intelligence capabilities. This includes human-enabled collection mechanisms and analysis of organizational networks and syndicates sustaining the fleet enterprise.

AI as a Maritime Intelligence Multiplier and Inherent Limitations

With the proliferation of AI-powered computational systems, increased visibility across the maritime environment has enhanced surveillance capabilities, enabling more comprehensive and automated data-driven domain awareness. Within the context of the maritime environment, AI-enhanced systems operationalize uninterrupted pattern recognition, anomaly detection, and the collection and fusion of volumetric data, including imagery and full motion video.

Maritime tracking platforms and operational networks, ranging from commercial tools such as Windward to military operations like Nordic Warden System and NATO’s Baltic Sentry, maximize MDA by integrating AI technologies to algorithmically process raw intelligence data streams to identify and monitor anomalous fleet behavior. Given the magnitude of the domain, the maritime security enterprise is primarily technocentric, allowing for a variety and volume of active input data, including space-based satellite modalities like synthetic aperture radar signals, electro-optical imagery, and satellite communication systems. In instances where shadow fleet vessels deliberately disengage or spoof AIS to strategically navigate unsurveilled and covertly conduct transfers or enter areas of interest, aerospace data can cross-correlate with complementary intelligence streams.

While AI can augment maritime intelligence by identifying anomalous fleet behavior, spatiotemporal patterns, and predictive trends, its overall effectiveness and utility notably diminish when tracking coercive fleet activity outside observable fleet behavior at sea. Consequentially, AI-optimized systems are bound by absolute data dependency, requiring high veracity, volume, variety, and value of inputs to train models and maintain operational output, regardless of whether they are bespoke or commercial architectures. Shadow fleet vessels notably leverage obfuscating organizational networks to facilitate fleet activities, such as shell corporations and inconclusive intermediaries that extend beyond the operational bounds of the domain, a vulnerability that cannot be seamlessly tracked using digital footprints for AI attribution. Because shadow fleet networks are strategically decentralized, with segments of the operational apparatus fragmented among brokers, registries, financiers, and maritime service providers, data collection within a technocentric framework, though resourceful and sophisticated, ultimately remains limited by an inherent myopia. The efficacy of targeting initiatives requires an integrated human-sourced intelligence collection strategy to identify the underlying bureaucratic and service ecosystem sustaining shadow fleet vessel operations.

Integrating Terrestrial Intelligence Networks

Human-enabled intelligence in the maritime domain security apparatus has since been regarded as an underutilized collection source, especially in offshore operations. However, terrestrial clandestine operations sustaining the shadow fleet enterprise notably involve a diverse and disjointed ecosystem amalgamated with dubious shell companies, inconsistent paper trails, and opaque ownership structures that obscure direct commercial actors. Where AI capitulates under a lack of data streams, human-based acquisition sources can complement technologically centric surveillance methods, primarily due to their strategic placement and access, expanding the aperture of information streams.

Accordingly, traditional intelligence gathering sources can extract relational clues and a causal nexus through direct exploitation of interfaces with trusted intermediaries and operational nodes. These human-based collection dynamics empower intelligence agencies to actively target the enterprise ecosystem. By interrogating transaction flows, banking telemetry, illicit funding applications, corporate registries, governance networks, and the operational legitimacy of vendor hubs, human-enabled cross-examination uncovers capital origin, asset ownership, and network capability.

With respect to shadow vessels, the Kremlin has sought out jurisdictions with weak regulatory capacity and limited enforcement mechanisms to form the cornerstone of their offshore clandestine enterprise. Notably, these fraudulent dynamics from Kremlin syndicates expand across multiple land-based jurisdictions, including the United Arab Emirates (UAE) and various land-locked African states with no deep-sea maritime presence, such as Malawi, Zambia, and Eswatini, exploiting structural ambiguity. Accordingly, the UAE-Africa axis operates in tandem, with the UAE acting as the known outsourced corporate operator and states such as Gabon and Comoros providing the sovereign architecture for vessel registration. However, in July 2026, that fundamental connection between Comoros and Gabon, once regarded as the preferred flag destination for Russian shadow tankers with a peak recorded growth of approximately 675% in 2024, and the UAE-based company Intershipping Services LLC collapsed. This rupture was formalized when Gabon’s High Commissioner to the United Kingdom submitted a formal letter to the International Maritime Organization stating the UAE-based company was divested of legal authorization to manage the country’s shipping register; this was due to the international sanctions imposed on Intershipping LLC by the European Union and the United Kingdom in July 2025.

Although the bureaucratic and administrative corporate nervous system between Gabon, Comoros, and the UAE deteriorated under internationally imposed sanctions, the empirical reality is that shadow tankers continue to navigate with alternative registries and dubious shell corporations. While Russia is domesticating portions of its shadow vessels into its registry to fly under the Russian flag, reports indicate the Federation remains vigilant in acquiring new auxiliary tankers for hybrid activities, thereby necessitating these bureaucratic machinations. Notably, the center of gravity of Russia’s shadow fleet is not strictly terrestrial, but rather operating on an institutional level, requiring traditional methods of information gathering as AI enhanced gathering platforms lack sufficient data streams and cognitive capacity to track and detect systemic abnormalities under administrative bureaucratic manipulation. Human-based collection opportunities enable a comprehensive cross-information examination to effectively track and monitor sanctioned vessels, as well as target intermediaries and suspend clandestine activities.

Conclusion: Neutralizing the Institutional Center of Gravity

Shadow fleet hybrid activities remain a persistent issue in the international domain, with countries, including Iran and China, expanding their maritime activities while leveraging international conventions, notably the United Nations Convention on the Law of the Sea (UNCLOS), as a defensive legal shield. Under the tenets of UNCLOS, vessels generally cannot be interdicted or seized on the high seas, as primary jurisdiction resides strictly with the vessel’s flag state. Despite subsea infrastructure damage or habitual drone incursions from Kremlin-linked tankers, coastal states cannot address hybrid activities with tankers operating within the exclusive economic zone due to grey-zone legal ambiguities.

Additional arguments to address sanctioned vessels include regarding them as legally stateless; however, this approach requires high-level confidence attribution before executing physical interdiction or seizure operations. Leveraging AI to track and identify shadow fleet behavior not only monitors nefarious activity in the maritime domain, but also provides the necessary analytical confidence required to classify a vessel as stateless, thereby enabling lawful interdiction strategies. However, despite successful interception operations from NATO authorities, notably tanker Grinch and Tagor, both vessels were subsequently released into the public domain following a multi-million-dollar euro penalty. The tankers were notably released in part because of the environmental and financial liabilities of hosting uninsured, poorly maintained vessels indefinitely at port, as well as UNCLOS requirements for coastal states releasing foreign merchant ships once administrative fines are settled; the same was true for Marinera, a shadow fleet tanker seized by the United States, now reemerging in international waters under the new name Era.

While maintaining comprehensive surveillance and countermeasures against shadow fleet operations within the maritime domain remains indispensable, the enforcement capabilities of international actors like NATO are severely constrained by international covenants. However, these legal barriers have enabled adversarial actors to exacerbate hybrid activities in the maritime domain. If NATO disregards international legal norms by unilaterally declaring vessels as stateless entities without high-confidence attribution, this could reputationally diminish the fundamental institutional principles of the alliance founded on liberal internationalism and delegitimize established covenants sustaining global governance agreements.

Consequently, tactical surveillance at sea using AI computational systems remains indispensable to achieving a transparent maritime domain for transatlantic security; however, parallel collection and targeting strategies should integrate data-driven human-based intelligence streams to successfully eliminate institutional blind spots. Continued maritime surveillance and vessel-level interdiction remain a necessary component of counter-shadow fleet activities; sustained strategic effectiveness requires targeting land-based bureaucratic and administrative networks sustaining vessel activities. Human-enabled data collection would, in turn, provide the relational context required to identify and disrupt the terrestrial institutional ecosystem enabling maritime shadow fleet activities and bypassing maritime institutional conventions. Shifting from a strict vessel-centric detection towards a balanced network-centric ecosystem, allied intelligence frameworks can impose required pressure on ongoing hybrid fleet operations while simultaneously preserving legal and institutional principles governing maritime security.