AIS anomalies and dark-activity indicators: OFSI and EU compared

A charterer is reviewing a voyage proposal. The vessel's AIS (Automatic Identification System) transponder went dark for eleven days mid-voyage. A second leg shows a position gap consistent with a ship-to-ship transfer. The cargo is insured under a cover provided by a P&I club subject to UK regulatory oversight. Under OFSI, the charterer faces one set of questions. Under EU Council regulations, the questions partly overlap – but the legal hooks, the diligence triggers, and the consequence of getting it wrong differ in ways that decide whether the transaction is lawful at all. As of January 2026, both regimes have sharpened their focus on maritime dark activity, and the difference between them matters more than most compliance teams realise.

AIS anomalies and dark-activity indicators – transponder gaps, location spoofing, ship-to-ship transfers in high-risk areas, and flag or name changes – are recognised red flags under both the OFSI sanctions regime and the EU Council regulations governing maritime trade. Neither regime defines a bright-line threshold for what constitutes a disqualifying anomaly, but both treat unexplained dark activity as a diligence trigger that can expose insurers, traders, charterers, and financiers to liability. Where the regimes diverge is in how they impose that obligation, who carries it, and what the consequence of a missed flag looks like in enforcement terms.

This analysis sets out the divergence thesis, examines the evidence for each dimension of difference, and closes with a practical diligence sequence for businesses operating across both regimes.

The divergence thesis: two regimes, one red flag, different legal hooks

Both OFSI and the EU attach legal significance to AIS anomalies and dark-activity indicators, but they reach that conclusion through different instruments and different liability architectures. Under OFSI, the obligation is grounded in the financial sanctions prohibitions of the Sanctions and Anti-Money Laundering Act (SAMLA) and the relevant thematic regulations: a person subject to UK jurisdiction must not make funds or economic resources available to a designated person, and must report knowledge or suspicion of a designated person to OFSI. AIS anomalies are relevant because they create – or destroy – reasonable grounds for that knowledge or suspicion. Under the EU, the asset-freeze prohibitions in Council Regulations are the primary legal basis, but the maritime dimension is also engaged by the specific provisions on ship-to-ship transfers, port access, and insurance in the applicable thematic regulations.

The consequence is structural. OFSI imposes strict-liability monetary penalties: as currently in force, the maximum is the greater of £1,000,000 or 50 percent of the breach value, and no finding of intent is required. The EU regime creates criminal exposure in member states that have implemented the EU directive on the criminalisation of sanctions violations – and that directive requires member states to provide for maximum terms of imprisonment of at least five years for serious offences, with corporate fines expressed as a percentage of worldwide turnover. The two systems of sanction can both bite on the same facts, and where they do, the stricter prohibition governs the conduct of a person subject to both regimes.

That structural difference is the thesis this analysis evidences. AIS anomalies are a common factual trigger; the legal hooks, the responsible parties, and the enforcement consequences are not.

What counts as a dark-activity indicator? The recognised categories

A dark-activity indicator is any signal in a vessel's tracking data, operational profile, or commercial documentation that is inconsistent with a legitimate commercial voyage and that, in combination with other factors, suggests a sanctions-relevant event may have occurred or been concealed. Both OFSI and the EU draw on guidance developed by international maritime bodies, flag state administrators, and financial regulators to populate that concept.

The main recognised categories are:

• AIS transmission gaps – periods during which a vessel's transponder is switched off or loses signal in a location where loss of signal is not technically explained.
• Location spoofing – AIS coordinates that appear physically implausible or that contradict satellite imagery, port records, or other tracking data.
• Ship-to-ship transfers in high-risk areas – transfers conducted at anchorages or positions associated with sanctions evasion, particularly where neither vessel's documentation reflects the transfer.
• Vessel identity changes – changes of flag, name, IMO number, or ownership structure shortly before or after a suspicious voyage segment.
• Falsified destination or cargo documentation – bills of lading, port manifests, or certificates of origin inconsistent with vessel tracking data.
• Insurance anomalies – cover provided by an insurer subject to a designation, or cover that lapses or is withdrawn without commercially coherent explanation.

Port-access and port-call restrictions operate independently of cargo-level prohibitions, so a vessel may be restricted from entry even where its cargo is not itself subject to specific controls. A designation of an insurer can cascade into loss of cover for vessels it insures, which is itself a compliance trigger for charterers and ports. Blockchain analytics and satellite imagery are increasingly used alongside AIS data to cross-reference vessel position claims. Neither OFSI nor the EU publishes a definitive list of which anomaly categories are dispositive, but maritime sanctions compliance commonly turns on verifying insurance cover, monitoring AIS transmission gaps, and scrutinising ship-to-ship transfers – all three of which appear in the recognised indicators above.

How does OFSI treat AIS anomalies? The UK legal test

Under OFSI, the financial-sanctions prohibitions attach when a person makes funds or economic resources available to a designated person, directly or indirectly. AIS anomalies become legally material because they form part of the factual basis on which OFSI assesses whether a person knew or had reasonable grounds to suspect that a transaction was sanctions-relevant – and because OFSI can impose a monetary penalty on a strict-liability basis, meaning that absence of knowledge does not by itself defeat a penalty, only the availability of a reasonable grounds defence.

In our experience, the critical question for OFSI purposes is not whether the vessel went dark, but what the relevant party did with that information. A charterer that identifies a significant AIS gap, seeks an explanation, receives a commercially implausible answer, and proceeds anyway is in a materially worse position than a charterer that identifies the gap, documents its diligence, obtains corroborating voyage data, and takes legal advice before proceeding. OFSI's enforcement approach looks at what the responsible party knew, what it should have known, and what it did in response.

The reporting obligation is a separate but related point. Relevant firms – a category that includes banks, insurers, and certain trading businesses – have a legal obligation to report knowledge or suspicion of a designated person to OFSI. A dark-activity indicator that creates reasonable grounds for suspicion about a vessel's counterparty can trigger that obligation independently of whether the transaction itself is ultimately refused. The reporting window is short, and the decision about whether a suspicion has crystallised enough to require reporting is one where we regularly advise clients to take legal advice promptly rather than wait for certainty.

OFSI's enforcement guidance sets out a framework for egregious and non-egregious violations, and voluntary self-disclosure – a recognised mitigating factor – can influence where a matter lands on that spectrum. Acting quickly, preserving records, and making a timely voluntary self-disclosure can materially affect an outcome, though no outcome is guaranteed. Records must be kept for five years, and the standard of record-keeping for maritime diligence files is directly relevant to whether a VSD narrative is credible.

How does the EU treat AIS anomalies? The Council-regulation architecture

The EU asset-freeze prohibitions extend to making funds or economic resources available, directly or indirectly, to or for the benefit of listed persons. The EU treatment of AIS anomalies is rooted in that prohibition, but the maritime-specific provisions in the applicable thematic Council Regulations give it additional texture. Provisions on ship-to-ship transfers, insurance, and port access mean that a party providing services to a vessel that has engaged in the conduct described in those provisions may itself be in breach, irrespective of whether it can trace the benefit to a named listed person.

The EU control test looks at control and an ownership criterion of more than 50 percent for asset-freeze purposes. For vessels, that means that ownership-chain analysis is a prerequisite to determining whether the asset-freeze prohibition attaches at the vessel level, quite apart from the maritime-specific provisions. A vessel controlled by or owned more than fifty percent by a designated person is itself subject to the freeze, so a ship-to-ship transfer with such a vessel creates direct exposure even if the cargo is third-party owned.

The EU framework also engages the anti-circumvention instrument. Transit through a third country does not change an item's controlled status; origin and end-use analysis follows the item, not the route. A sharp change in trade flows to a neighbouring or transit jurisdiction is treated as a diversion red flag, and the same logic applies to vessel routing: a voyage that goes materially out of the commercially expected path is a trigger for enhanced scrutiny, not a basis for concluding that the items have left the regulatory perimeter.

An EU General Court judgment may be appealed to the Court of Justice on points of law, and EU listings are reviewed periodically – commonly every six or twelve months depending on the regime. Neither of those facts reduces the immediate exposure of a business that transacts with a vessel whose AIS profile shows the indicators described above. The question "have I checked whether the listing was renewed?" comes after – not instead of – the question "is the vessel's profile clean enough to proceed?"

Where do OFSI and the EU diverge? The evidence dimensions

The most practically important divergences between the OFSI and EU approaches to AIS anomalies and dark-activity indicators fall into four dimensions.

Dimension 1: the strict-liability penalty base

OFSI can impose monetary penalties on a strict-liability basis with no requirement to prove knowledge. The EU directive on criminalisation requires member states to impose criminal penalties for serious violations, with maximum terms of imprisonment of at least five years for the most serious offences. The practical difference is that a UK-regulated firm faces a direct civil penalty from OFSI on the facts alone; an EU-established firm faces criminal exposure through national enforcement authorities whose prosecutorial standards and evidential requirements differ by member state. For a business with group entities in both jurisdictions, both consequences are live simultaneously.

Dimension 2: the maritime-specific provisions

The applicable EU thematic regulations contain explicit provisions on ship-to-ship transfers, port access, and insurance. OFSI does not administer a separate maritime-specific code; it applies the financial-sanctions prohibitions and guidance to maritime facts. The EU provisions create prohibitions that can attach at the service-provider level – an insurer, a port, a ship-chandler – without requiring proof that the service-provider itself made funds available to a listed person. Under OFSI, the analysis begins with the financial prohibition and works outward to the maritime facts. Under the EU, the maritime prohibition is a separate legal hook that operates alongside the asset freeze.

Dimension 3: the reporting obligation

OFSI imposes a specific reporting obligation on relevant firms. The EU does not have a uniform cross-regime reporting obligation at the asset-freeze level; member states implement AML-based suspicious activity reporting regimes that may overlap but are not co-extensive. A business trading between London and an EU port faces two different reporting obligation structures on the same factual trigger. Missing either one is a separate breach.

Dimension 4: the ownership and control analysis

The UK ownership-and-control test can catch a non-listed entity controlled by a designated person. The EU control test looks at control and ownership of more than fifty percent. In the maritime context, beneficial ownership structures for vessels are frequently layered through multiple jurisdictions. Under both regimes, the analysis does not stop at the registered owner. But the precise legal formulation of control – actual versus theoretical, direct versus indirect – can produce a different answer on the same facts under the two systems. UK case law distinguishes existing influence from a hypothetical ability to exert control; control must be actual, not theoretical, as currently in force, verify before reliance. The EU requirement that control be proved by objective and sufficiently weighty evidence points in the same direction, but the evidentiary standard applied in enforcement may differ.

Where two regimes both apply, the stricter prohibition governs. A business that determines the EU prohibition does not bite because the vessel is not majority-owned by a designated person cannot use that conclusion to satisfy OFSI if OFSI's own analysis of the control test points the other way.

What does cross-border diligence look like in practice? A decision sequence

For a business operating across both regimes, the diligence sequence for a vessel with AIS anomalies or dark-activity indicators should run through the following decision points in order.

1. Stop and record. When an anomaly is identified, document it immediately: the nature of the anomaly, the time and position data, and the source of the information. Sanctions records must be kept for five years. The quality of the contemporaneous record determines the quality of any subsequent VSD or compliance defence.
2. Identify the relevant regimes. Is the business, its counterparty, the goods, or the financing subject to OFSI, EU Council regulations, or both? The answer depends on the nationality of the persons involved, the location of the transaction, the currency, and the flag of the vessel. Do not assume that because the cargo is not UK-origin, OFSI does not apply.
3. Conduct ownership and control analysis. Map the vessel's beneficial ownership chain. Apply both the UK ownership-and-control test and the EU more-than-fifty-percent ownership criterion. If the chain runs through a jurisdiction with restricted information access, document the steps taken to obtain information and the gap that remains.
4. Assess the anomaly in context. Is the AIS gap technically explicable? Does corroborating data – satellite imagery, port records, draft survey data – support the commercially stated explanation? Has the vessel's flag, name, or insurer changed recently without a commercially coherent explanation?
5. Apply the reporting obligation. Under OFSI, determine whether the business is a relevant firm with a mandatory reporting obligation. If reasonable grounds for suspicion exist, take legal advice on whether the reporting threshold has been reached. The window is short. Under the EU, apply the applicable national AML reporting regime in each relevant member state.
6. Decide to proceed, pause, or refuse. A transaction that proceeds over unresolved anomalies on a documented record of having identified them is not a defensible position. A transaction that pauses pending further diligence, or that is refused with a documented reason, is.
7. Preserve records and consider voluntary self-disclosure. If the diligence process reveals that a transaction has proceeded that should not have done, voluntary self-disclosure to OFSI is a recognised mitigating factor. Take legal advice before making a VSD; the scope and content of the disclosure are matters of legal judgment, not just factual reporting.

Is your current AIS monitoring programme calibrated to this sequence? In our experience, most screening tools flag named parties but do not systematically correlate vessel-tracking anomalies with ownership-chain data. That gap is where enforcement risk accumulates.

Risk flags: the situations that accelerate exposure

Certain fact patterns combine with AIS anomalies to create materially elevated exposure under both regimes.

Insurance-cascade risk. A designation of an insurer can cascade into loss of cover for vessels it insures, which is itself a compliance trigger for charterers and ports. If a vessel's P&I cover is with an insurer that is subsequently designated or whose cover lapses in unclear circumstances, every party that has continued to transact with the vessel since that event is at risk. The EU maritime-specific provisions on insurance make this a direct regulatory issue, not just a commercial one.

Flag and name changes within a short window of a suspicious voyage segment are a recognised diversion red flag. A sharp change in trade flows to a neighbouring or transit jurisdiction is treated in the same way. Both OFSI and the EU treat these patterns as indicators of an attempt to obscure a vessel's identity or trading history, and both place the diligence burden on the parties transacting with the vessel.

The myth that representations in a sale agreement, charter party, or financing document remove the buyer's or financier's sanctions risk is one we encounter regularly. The seller's representations do not remove the buyer's own compliance obligation under OFSI or the EU. If the vessel's AIS profile shows the indicators described above and the buyer proceeds on the strength of a contractual warranty alone, that buyer has a contractual claim if the warranty is breached – but has no defence to OFSI or a national EU enforcement authority. The legal obligation runs directly to the regulator; the contractual allocation of risk operates between the parties.

The OFSI and EU diligence obligations also attach to financing parties. A financier that provides credit for a voyage involving a vessel with unresolved dark-activity indicators may be making economic resources available for the benefit of a designated person within the meaning of the relevant prohibitions. The cross-border comparison is relevant here too: the EU asset-freeze prohibition extends to making funds or economic resources available "directly or indirectly" and "to or for the benefit of" listed persons, which on its terms can reach a financier several steps removed from the listed party.

How Calder & Vance approaches AIS diligence across regimes

Our practice in cross-border maritime diligence combines legal analysis of the OFSI and EU prohibitions with a structured review of the vessel's operational profile, ownership chain, and insurance status. We act for multinationals, financial institutions, and exporters on sanctions and export-control matters across the major regimes, and we have acted in matters where AIS anomalies have formed the central diligence question on both UK and EU sides simultaneously.

For a business that has identified an anomaly and is deciding whether to proceed, we assess the legal exposure under each applicable regime, map the ownership and control question against the relevant test, and advise on whether the reporting obligation has been triggered. For a business that has already transacted and is now reviewing its position, we scope the apparent violation, advise on voluntary self-disclosure to OFSI, and prepare the compliance record. For a financier structuring a facility, we review the vessel profile against both regimes before commitment.

Situation A: a charterer identifies a twelve-day AIS gap but the voyage is otherwise commercially coherent, no ownership-chain hit against either the OFSI or EU consolidated lists, and the insurer is undesignated. Route: enhanced documentation, seek corroborating voyage data, no immediate reporting obligation, proceed subject to file closure. Indicative timeline: five to ten business days for the ownership-chain analysis. Risk: low if the file is clean; residual risk of EU maritime-provision scrutiny if the gap recurs.

Situation B: a financier identifies a ship-to-ship transfer at a location associated with previous enforcement actions, the registered owner changed flag six weeks ago, and the new insurer cannot be verified against standard databases. Route: pause the transaction, commission a full ownership-chain trace under both regimes, take legal advice on the reporting obligation before the next business day. Indicative timeline: seven to fourteen business days for a full trace. Risk: significant if the transaction proceeds without resolution; OFSI and EU enforcement consequences both live.

We work under a fixed-fee structure for defined diligence scopes, with a rapid-response entry point for urgent matters. For an assessment of your exposure under OFSI or the EU maritime provisions, contact Calder & Vance at info@caldervance.com.

The following practices relate directly to the diligence questions this analysis covers:

• AIS anomaly diligence under the EU regime – vessel-tracking review, ownership tracing, and EU prohibition analysis for maritime transactions.
• Digital asset counterparty diligence: BIS/EAR vs EU – cross-border analysis of screening obligations where digital assets meet export-control risk.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.