AIS anomalies and dark-activity indicators under EU: specialist advice

A charterer in Hamburg is forty-eight hours from signing a voyage charter when its compliance team pulls a vessel history report. The ship shows three extended AIS transmission gaps over the previous six months and a series of position anomalies that cluster around a high-risk transshipment zone. The deal has commercial logic. The counterparty is not on any list. But the vessel's behaviour pattern is precisely what EU sanctions guidance identifies as a diversion red flag – and the charterer that proceeds without analysis bears the consequences. As of January 2026, the EU's anti-circumvention posture has sharpened, and the threshold for "knew or should have known" is being tested in enforcement contexts across member states.

AIS anomalies and dark-activity indicators under EU sanctions rules are material compliance triggers, not merely technical curiosities. EU Council regulations prohibit making funds or economic resources available, directly or indirectly, to or for the benefit of listed persons, and that prohibition sweeps across entire supply and logistics chains. A vessel exhibiting systematic dark-activity patterns may be facilitating transactions that breach those regulations, and a counterparty that contracts with it without adequate diligence risks direct exposure. The governing authority is the Council regulation applicable to the relevant thematic regime, implemented in each member state, with enforcement delegated to national competent authorities.

This page sets out the legal basis, the anomaly-assessment procedure, the cross-regime comparison with OFAC and OFSI, the principal risk flags, and when a business needs specialist sanctions legal support to manage this exposure safely.

Why AIS dark activity creates EU sanctions exposure

A vessel that disables or manipulates its AIS transponder creates a gap in the evidentiary record that regulators treat as indicative of concealment. EU sanctions law does not require proof that concealment was intentional; it requires proof that the prohibited outcome – making resources available to a designated person – did not occur. The burden sits on the party that transacted.

EU Council regulations impose a strict prohibitions structure. The asset-freeze prohibition extends to making funds or economic resources available, directly or indirectly, to or for the benefit of listed persons. Indirect availability is the operative test in maritime chains: where a vessel service, charter payment, fuel supply, or insurance premium reaches a designated person through one or more intermediaries, the chain is still caught. A single AIS anomaly can raise the question of whether an intermediary in that chain is undisclosed. Multiple anomalies directed toward the same geographic zone significantly elevate that inference.

EU anti-circumvention rules, which were applied for the first time in 2026, allow the Council to direct restrictions at operators in third countries where measures are being circumvented. A sharp change in trade flows toward a transit jurisdiction is treated as a diversion red flag. Where a vessel's positional history is consistent with routing cargo through such a jurisdiction, the EU instrument can extend exposure to parties that facilitated the movement – including the charterer, the freight forwarder, and the financier. In our experience, compliance teams that focus solely on listed-party screening miss this second-order risk entirely. Have you assessed the vessel's transit pattern, not just its ownership register?

The anomaly-assessment procedure: what a thorough analysis covers

A thorough AIS anomaly assessment under EU sanctions rules follows a structured sequence. Each stage generates its own documentation, and documentation is not incidental: national competent authorities in EU enforcement proceedings look for evidence that the party undertook a genuine, proportionate enquiry before transacting.

The first stage is positional data retrieval. A complete AIS history for the vessel should cover at least the period relevant to the proposed transaction and extend back through the vessel's recent employment pattern. The raw data reveals gaps in transmission, position jumps inconsistent with the vessel's stated speed and heading, and port-call sequences that do not match the declared voyage plan. Each of these is recorded and mapped against the vessel's cargo history where cargo manifest data is available.

The second stage is gap classification. Not every AIS gap indicates evasion. Transmission gaps in high-latitude zones or narrow waterways can reflect signal obstruction. The EU-relevant test is whether the pattern of gaps – their frequency, duration, geographic distribution, and coincidence with known high-risk zones – is consistent with legitimate operational factors or more consistent with deliberate disablement. In our cross-border practice, we map gap periods against known transshipment hotspots and against the vessel's stated port-call sequence. Discrepancies between positional data and port records are particularly significant.

The third stage is ownership and control verification. A vessel exhibiting anomalous positional behaviour may be operating under a chain of management and ownership designed to obscure the beneficial owner. The EU control test for asset-freeze purposes looks at control and an ownership criterion of more than 50 percent. A vessel management company that is more than 50 percent owned, directly or indirectly, by a designated person is itself within the freeze. We verify registered owner, technical manager, commercial manager, and the disponent owner chain through official and commercial registries, cross-referencing each entity against EU listings and those of aligned regimes.

The fourth stage is insurance and financing verification. A designation of an insurer cascades into loss of cover for vessels it insures, which is itself a compliance trigger for charterers and ports. Protection and indemnity cover, hull and machinery insurance, and any trade finance facility associated with the voyage are each checked against the applicable designations. This stage frequently reveals exposure that pure positional analysis does not surface.

The fifth stage is documented risk assessment and advice on the forward position: proceed, pause, or refer for a specific licence. We set out the residual risk, the conditions under which it can be mitigated, and – where mitigation is not available – the basis for declining the transaction.

How the EU position compares to OFAC and OFSI

The EU, OFAC, and OFSI each engage with AIS dark-activity risk, but the tests and consequences differ in ways that directly affect the analysis a cross-border business must conduct. Understanding the divergence is not academic: where a transaction has a US-dollar nexus, a UK-incorporated party, or an EU-flagged vessel, all three regimes may apply simultaneously – and where they conflict, the stricter prohibition governs the conduct of any party subject to both.

Under OFAC, the 50 percent rule operates mechanically on ownership: an entity owned 50 percent or more, directly or indirectly, in the aggregate, by one or more blocked persons is itself treated as blocked, regardless of whether it is listed. The rule does not require a separate control analysis. OFAC's framework also applies to facilitation: a US person that facilitates, directly or indirectly, a transaction that would be prohibited if conducted directly is itself in breach. Blocked-property reports are due within 10 business days of blocking. Record-keeping obligations run for five years.

Under OFSI, the UK test looks at ownership and control. The UK ownership-and-control test can catch a non-listed entity controlled by a designated person, and OFSI applies a strict-liability standard: the monetary penalty regime does not require proof of knowledge. The maximum OFSI penalty is the greater of £1,000,000 or 50 percent of the breach value, as currently in force. There is also a mandatory reporting obligation on relevant firms that know or suspect they are holding funds for a designated person.

The EU's control test looks at control and an ownership criterion of more than 50 percent. Unlike the mechanical OFAC rule, the EU formulation involves an assessment of whether a non-listed entity is actually controlled by a listed person. EU anti-circumvention rules add a third layer: even where ownership and control cannot be established, a party that knowingly facilitates circumvention may be caught. The EU General Court has considered the standards of evidence required to establish control, and a recent ruling confirmed that control must be demonstrated by objective and sufficiently weighty evidence.

For a business operating across all three regimes – a common position for EU-based commodity traders with US-dollar financing and UK incorporated entities – the analysis must satisfy the most stringent standard at each point in the transaction chain. A vessel history that passes a single-regime screen may still generate exposure under a second or third. This is why specialist eu cross-border transactions advice, rather than a single-jurisdiction screening tool, is required.

Risk flags that require immediate legal review

Several AIS and dark-activity patterns are sufficiently serious to require legal review before any further transactional steps are taken. Proceeding without review in any of the following circumstances can convert an uncertain position into a confirmed breach.

The first flag is a transmission gap coinciding with a known high-risk transshipment zone. If the gap is of material duration – hours rather than minutes – and the vessel's stated port-call sequence does not account for the gap period, the presumption of diversion is strong. A deal that collapses because this is identified after signing carries far greater cost than one held pending review before signature.

The second flag is a position jump inconsistent with the vessel's stated speed. Position jumps can indicate GPS spoofing, which is itself a marker of deliberate evasion. EU enforcement authorities have examined GPS spoofing patterns in enforcement contexts, and the presence of spoofing indicators materially elevates the risk profile of the transaction.

The third flag is a discrepancy between the AIS-transmitted port-call history and the vessel's official port-state control records. Port-access and port-call restrictions operate independently of cargo-level prohibitions under EU law, so a vessel that visited a restricted port may be caught even where its cargo was not prohibited.

The fourth flag is a change of flag, registered owner, or ship name within the 12 months preceding the proposed transaction. Rapid identity changes are a recognised evasion indicator. The EU anti-circumvention instrument has been applied to shipping contexts, and regulators have treated identity-change patterns as evidence of deliberate concealment.

The fifth flag is an insurance or P&I cover gap coinciding with a dark-activity period. A vessel that was uninsured during a gap period is operating outside normal commercial parameters. The explanation for the gap is itself a due-diligence question that must be answered before the transaction proceeds.

The position above covers the standard analytical framework. Your specific facts – the vessel's flag, the cargo type, the route, the counterparty's jurisdiction, and the financing structure – change the weight that attaches to each of these flags. A preliminary review of the available data allows us to assess which flags are live for your transaction and what steps are required to manage them.

A common misconception that increases risk

One misconception we regularly encounter is the belief that the seller's representations in the transaction documents remove the buyer's sanctions exposure. The argument runs: if the seller warrants that the vessel is not involved in prohibited activity, the buyer is protected. This view is incorrect as a matter of EU sanctions law and it is incorrect as a matter of the legal reality of strict-liability enforcement.

EU sanctions obligations attach directly to each party in the chain. A buyer that relies on a contractual representation as a substitute for its own diligence has not discharged the "knew or should have known" standard that EU enforcement authorities apply. If the vessel turns out to be engaged in circumvention, the buyer faces direct regulatory exposure regardless of its contractual position against the seller. The contractual remedy – a warranty claim – is a separate and potentially worthless right if the seller is itself under investigation or is not subject to an enforceable jurisdiction.

The correct position is that representations and warranties are a risk-allocation mechanism between the parties. They do not replace diligence. Where a vessel exhibits AIS anomalies, the buyer's diligence obligation requires it to investigate those anomalies to the point where it can form a defensible view of the risk, or to obtain a licence, or to decline the transaction. We regularly advise buyers on the scope of that obligation and on what a proportionate enquiry looks like in the context of the relevant EU regime.

How Calder & Vance supports EU AIS anomaly assessments

We act for multinationals, financial institutions, and exporters on sanctions and export-control matters across the major regimes. Our cross-border transactions and diligence practice includes AIS anomaly assessment and dark-activity indicator analysis as a defined service for EU-regulated transactions.

In a recent matter, a European commodity trader was two days from completing a spot-purchase contract when its bank's compliance function flagged an AIS anomaly cluster on the carrying vessel. We were instructed on an emergency basis. We reviewed the full positional history, verified the ownership and management chain against EU and aligned-regime listings, assessed the insurance position, and produced a documented risk assessment within the timeline required by the bank's credit committee. The matter required coordinated analysis across the EU, UK, and US positions because the financing was dollar-denominated. The client proceeded to a revised structure that managed the identified exposure.

Our service in this area covers the following actions. We retrieve and analyse the vessel's AIS history and classify gaps and anomalies by type and severity. We verify the ownership chain – registered owner, technical manager, commercial manager, disponent owner – against EU Council listings and aligned-regime lists. We assess the insurance and financing structure for designation exposure. We prepare a written risk assessment that documents the methodology, the findings, and the recommended forward position. Where the assessment identifies residual risk that requires regulatory engagement, we advise on the applicable licensing ground or, where appropriate, prepare the voluntary disclosure.

For transactions where the EU position needs to be considered alongside OFAC or OFSI, we provide an integrated cross-regime analysis – a single advisory product that maps the obligations of each regime and identifies the strictest applicable standard. This is the service structure that EU-based commodity traders with US-dollar exposure and UK-incorporated holding structures require, and it is the structure we regularly deploy for our clients.

If a transaction has already been flagged – by a bank's compliance function, by a port authority, or by an internal alert – an early legal review preserves options that narrow with time. For a confidential review of a potential breach or a vessel-diligence question, contact us at info@caldervance.com.

Related practices

• Digital asset counterparty diligence – BIS/EAR – counterparty screening and export-control diligence for digital-asset transactions under US rules
• Digital asset counterparty diligence – OFSI – UK financial-sanctions diligence for virtual-asset and payment-firm counterparties
• Ship-to-ship transfer risk – OFAC – US sanctions exposure analysis for STS transfer activity and vessel diligence

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.