As the Russia-Ukraine war enters a prolonged stage of strategic attrition, the battlefield of global power competition has extended from land and traditional financial sanctions into the vast oceans and gray zones. At length, to evade the crude oil price cap established by the G7 and the EU, Russia built a massive “shadow fleet” with extremely opaque ownership operating on the margins of international maritime law. Through complex flag-hopping, digital track falsification, and ship-to-ship (STS) oil transfers at sea, this fleet has continuously exported Russian crude oil to international markets to acquire critical funding needed to sustain its vast war machine.

However, major changes have recently occurred in the international maritime security environment. To plug this gray-zone loophole, maritime law enforcement efforts by Western allies such as the EU and the UK have increased significantly, shifting from passive economic sanctions to active maritime interception and “Right of Visit” enforcement. At the same time, Ukraine has adopted highly breakthrough asymmetric military strikes, officially designating Russia’s shadow fleet as legitimate military targets. From the EU expanding the enforcement mandates of “Operation Atalanta” and “Operation Irini”, to the Royal Marines seizing a shadow tanker in the English Channel for the first time, to the Security Service of Ukraine (SSU) using “Mamai” uncrewed surface vessels (USVs) to execute precision raids in the Black Sea, this series of high-intensity maritime operations not only demonstrates an escalation in methods to strike Russia’s war finance pipeline, but also profoundly impacts global maritime order and the rules of gray-zone confrontation.[1]

These military and law enforcement operations targeting Russia’s shadow fleet are not merely isolated incidents in Europe. The underlying decipherment of digital tracking technology, the application of transnational lawfare, and the analysis of authoritarian state gray-zone tactics offer crucial strategic takeaways for Taiwan in countering the CCP’s increasingly frequent maritime gray-zone intrusions. This report conducts an in-depth analysis of several recent major shadow fleet interception and attack incidents to explore their security implications and future development trends.

The operational essence of the shadow fleet is the deliberate evasion and disruption of existing international maritime security regulations and digital tracking systems. Recent actions by various nations targeting the shadow fleet present three key security dimensions:

In the past, the international community largely viewed the shadow fleet as a mere gray-zone tool violating economic sanctions. However, the SSU, in conjunction with the Ukrainian Navy, deployed advanced “Mamai” naval USVs to precisely strike two large shadow fleet crude oil tankers, “LOUISE 1” and “BANDA”, in the Black Sea. This military action fundamentally altered the maritime rules of engagement in the Russo-Ukrainian War, officially recognizing the enemy’s strategic logistical and financial supply platforms as “legitimate military targets”.

Taking the nearly 160,000-ton large tanker “LOUISE 1” as an example, the vessel was specifically tasked with transporting crude oil from Russian Baltic and Black Sea ports to international buyers. In 2026 alone, the ship transported nearly 3 million tons of crude oil for Russia, directly converting oil export revenues into hundreds of millions of dollars in war funds and serving as a “financial logistics supply line” sustaining Russia’s military strikes against Ukraine.[2] Ukraine’s use of USVs to execute maritime strikes not only practically severed the Russian military’s financial lifeline, but also sent a powerful deterrent signal to Moscow.

However, such strikes carry severe environmental security risks. The shadow fleet usually consists of aging vessels lacking regular maintenance and certification from the International Group of Protection and Indemnity (P&I) Clubs—such as the 17-year-old tanker “Smyrtos” and the “BANDA,” which lacks “safety and ISPS inspection” certifications. Once these giant tankers loaded with crude oil suffer armed attacks and structural damage in the Black Sea or narrow waterways (such as the Turkish Straits), they can easily trigger a catastrophic international maritime ecological disaster.

On the high seas, under the principles of “freedom of the high seas” and “exclusive flag-State jurisdiction,” warships generally have no right to arbitrarily stop and forcibly board or inspect vessels flying foreign flags. However, the EU and the Royal Navy cleverly and forcefully utilized exception provisions under the UN Convention on the Law of the Sea (UNCLOS) to wage a successful proactive “lawfare” strategy. The EU officially authorized “Operation Atalanta” in the Indian Ocean and “Operation Irini” in the Mediterranean Sea to conduct boarding and nationality verification of suspected shadow fleet vessels pursuant to the “Right of Visit” provisions under Article 110 of UNCLOS.[3] Because shadow fleet vessels frequently forge ship registration certificates, establish fraudulent registration entities, and fly “false flags,” the EU exercised its legal right of visit based on reasonable suspicion that these ships were “engaged in flying a false flag or without nationality”.

A major operational breakthrough occurred on July 20, 2026, when EU Operation Irini forces successfully intercepted and forcibly boarded the tanker “MV South Star,” which had been constantly changing flag registrations in the Mediterranean.[4] This move exerted strong diplomatic and political pressure directly on the “Flags of Convenience” utilized by the shadow fleet. For instance, under pressure from EU investigations, the Cameroon Ship Registry officially deregistered as many as 39 tankers suspected of belonging to the Russian shadow fleet from its national registry.[5] This purge was highly lethal: vessels losing legal flag registration become “stateless vessels” under international law, losing all state protection and leaving them subject to boarding, inspection, detention, or even judicial jurisdiction by any nation’s warships.[6]

Coincidentally, in the early morning of June 14, 2026, the British Armed Forces conducted one of their independent military operations in the English Channel. Supported by warships and aircraft, Royal Marines commandos successfully intercepted and seized the Russian shadow tanker “Smyrtos”. British Prime Minister Keir Starmer subsequently issued a stern statement warning that those financing Russia’s war machine would have nowhere to hide.[7] This not only highlighted Western allies’ resolve to transition from economic sanctions to active military and maritime enforcement, but also established a highly valuable, assertive enforcement template for maritime law enforcement agencies worldwide.

The shadow fleet’s ability to operate undetected long-term relies on extremely complex “de-ultimate beneficial ownership” (de-UBO) schemes and digital deception techniques.

Regarding physical ownership, these vessels frequently alter ship names and flags. For instance, “MV South Star” bounced between nationalities including Equatorial Guinea, Cameroon, and the Marshall Islands while constantly changing shipowners and management operators. The “Smyrtos” tanker seized by the UK was successively registered in Greece, Panama, The Gambia, and elsewhere; its registered manager turned out to be a shell company in Mong Kok, Hong Kong (Zhao Yao Shipping Ltd), with its ultimate beneficial owner and P&I club both marked as “unknown”. Meanwhile, “LOUISE 1” and “BANDA,” struck by Ukraine, adopted a transfer path of “European Shipowner - Middle Eastern Intermediary Shell – Third Country Flag of Convenience,” representing standard operating procedure for severing the ultimate beneficial ownership audit trail.

In terms of digital tracking, the shadow fleet has pushed Automatic Identification System (AIS) manipulation to the extreme:

 Signal Blackouts and Identity Concealment: “Smyrtos” deliberately hid its AIS voyage data and key identification information such as MMSI and call signs, displaying “No Data Available,” while carrying out illegal STS cargo transfers in locations such as the Suez Canal.

 Spatio-Temporal Anomalies (Excessive Speed and Ghost Tracks): In the early morning of July 9, 2026, “LOUISE 1” was positioned off Turkey, but by 9:00 AM it appeared at a Russian port hundreds of miles away—requiring the massive tanker to travel at an extreme speed of 150 knots (approx. 270 km/h), which is physically impossible in practice. “BANDA” also exhibited anomalous jumps, appearing in the Exclusive Economic Zones (EEZs) of Ukraine and Russia for “only a few seconds”.

 Dual Presence: System logs showed both vessels existing in two locations simultaneously. “LOUISE 1” frequently altered positions and came alongside unidentified vessels in the Red Sea, while “BANDA” was physically berthed and operating in Saudi Arabia while its AIS reported it in the distant Gulf of Guinea in West Africa alongside over 50 vessels. This digital obfuscation aims to generate a massive volume of false signals to cover up actual oil transfers and strategic supply operations.

Facing the shadow fleet’s dual physical and digital disguises, international countermeasures are gradually taking shape. Future maritime security and military force-building will exhibit three major trends:

Ukraine’s ability to successfully execute precision USV strikes against shadow tankers hiding across vast sea areas clearly did not rely solely on the AIS system. The Ukrainian military effectively utilized optical satellites, Synthetic Aperture Radar (SAR) satellites, and Electronic Intelligence (ELINT) to cross-reference and resolve the digital obfuscation generated by the shadow fleet’s AIS systems, thereby pinpointing the vessels’ actual physical locations for precision strikes. This surprise attack directly announced to the world: “Simply turning off or spoofing AIS systems can no longer provide physical security protection.”

In countering future maritime threats, naval and coast guard units of all nations must not rely solely on single commercial-grade AIS reported data. They must comprehensively build a “Multi-Sensor Fusion Maritime Identification Mechanism”. By integrating shore-based and shipborne military search radars, national-level optical and SAR satellite imagery, and high-end electronic intelligence gathering, cross-validating physical characteristics and digital signals, nations can effectively strip away the enemy’s “digital cloak of invisibility” and establish a high-resolution, fact-traceable Common Operational Picture (COP).

The tactics deployed by Russia’s shadow fleet—flag hopping, shell company camouflage, AIS spoofing, and ship-to-ship transfers—are not unique to Russia; they are being widely replicated and shared by authoritarian axis nations such as China, Iran, and North Korea. China, in particular, frequently employs highly deceptive gray-zone operations—such as position spoofing and tampering with IMO and MMSI identification numbers—when deploying oceanographic research vessels (such as the Xiang Yang Hong 22 engaged in underwater battlefield preparation), large dual-use Ro-Ro (roll-on/roll-off) cargo ships, maritime militia vessels (“Little Blue Men” fishing boats), and even China Coast Guard vessels. By providing safe harbors to one another and sharing intermediary shell networks and techniques, these states are forming a massive transnational illegal maritime network that severely challenges global freedom of navigation and Indo-Pacific regional security and stability.

The actions of the EU, the UK, and Ukraine offer valuable strategic guidance for Taiwan:

 Maritime Law Enforcement & Lawfare: Taiwan can draw on the EU and the UK’s “Right of Visit” enforcement model. When CCP oceanographic research vessels or maritime militia ships deliberately turn off AIS, engage in track deception, or conduct non-peaceful surveys within Taiwan’s jurisdiction waters, Taiwanese forces should not limit themselves to verbal warnings and radio expulsions. In accordance with UNCLOS and the Act Governing Relations Between the People of the Taiwan Area and the Mainland Area, for China’s vessels with “reasonable suspicion” of identity falsification, Taiwan can adopt a more assertive approach—flanking, intercepting, stopping, and even boarding and inspecting them. This legally strips away their legal cloak of “civilian identities,” shattering the CCP’s attempts to internalize the sea areas around the Taiwan Strait as “internal waters”.

 Port State Control & Intelligence Screening: Taiwan’s Maritime and Port Bureau and Coast Guard Administration should conduct strict Ultimate Beneficial Ownership (UBO) and insurance documentation audits on foreign cargo ships or tankers flying flags of convenience and of advanced age entering Taiwanese ports. This will prevent shadow fleets backed by the CCP or authoritarian axis powers from using Taiwanese ports for illegal transshipment, intelligence gathering, or strategic goods smuggling.

 Asymmetric Defensive Operations: Ukraine’s successful USV strikes against large oil tankers once again prove that “large, slow vessels with strategic logistical value” are extremely vulnerable to low-cost, high-mobility uncrewed platforms. In building the “Taiwan Shield,” the ROC Armed Forces should not only refine command-and-control software innovations and weapon allocation algorithms, but also massively expand the deployment of USVs and Unmanned Underwater Vehicles (UUVs). During wartime or under a full blockade, against large civilian Ro-Ro cargo ships and requisitioned merchant vessels used by the CCP to transport landing forces and logistical supplies (whose tactical role mirrors the supply function of Russia’s shadow fleet), Taiwan can deploy uncrewed swarms to execute asymmetric counter-source strikes and maritime interceptions. This will serve the PLA’s amphibious projection and logistical supply chains, fundamentally dismantle the enemy’s invasion attempt and establish a resilient, multi-layered defense network.[8]