The predictive turn: how maritime compliance has shifted

The compliance landscape doesn't wait for quarterly reviews anymore. In a recent webinar, Kpler Risk & Compliance analysts reviewed key lessons from 2025 and explained why 2026 will be a tougher stress test for compliance frameworks. Drawing on vessel behaviour, sanctions data, and network analysis, this session explored how risk is migrating across routes, hubs, and counterparties—and why reactive, watchlist-based compliance is no longer sufficient. 

Between January and December 2025, vessel sanctions increased 77% year-over-year—over 700 first-time designations in twelve months. For maritime risk professionals, this acceleration represents more than enforcement intensity. It signals a fundamental shift in how sanctions operate, how illicit networks adapt, and ultimately, how effective compliance programs must function.

The past year taught us that enforcement comes in concentrated waves rather than gradual tightening. Three major regulatory surges—January, May, and October—defined 2025's sanctions architecture, supplemented by oil price cap updates in July. These weren't isolated actions. They represented coordinated pressure from US, EU, and UK regulators targeting shadow fleet networks with increasing sophistication. The result: a 373% increase in sanctioned vessels over five years, from under 400 in December 2020 to over 1,800 by December 2025.

What makes 2025 particularly instructive is not the scale of enforcement, but what happened afterward. Despite designating hundreds of shadow fleet tankers, the fleet didn't shrink—it adapted. A 6% decrease in identified shadow vessels in January 2025 initially suggested progress. Reality proved more complex. Those vessels didn't disappear; they modified behaviour, employing increasingly sophisticated deceptive practices to continue operations.

In 2026, sanctions risk will be increasingly defined by detectable escalation patterns observable through Kpler Risk and Compliance's proprietary risk scoring method, not surprise designations.

‍

The shadow fleet's operational evolution

The shadow fleet now encompasses over 3,300 active vessels globally, with approximately 30 joining monthly. These aren't just aging tankers operating without proper classification or insurance. They're increasingly sophisticated operations utilising layered evasion tactics that respond directly to enforcement pressure.

The correlation is striking. AIS spoofing surged to over 200 cases in May 2025, coinciding exactly with that month's major enforcement wave. Dark ship-to-ship transfers hit record levels exceeding 300 cases during the same period. July and October showed similar spikes. This isn't coincidence—it's adaptation in real time.

Ship-to-ship transfer patterns reveal the operational sophistication at play. Key hubs like Damieta in Egypt, the Eastern Mediterranean, and Cyprus don't just facilitate high-risk STS activity. They demonstrate higher utilisation rates per vessel, with the same tankers conducting repeated, coordinated operations rather than fleet expansion driving volume. These locations function as pressure valves, allowing sanctioned barrels to be blended and redistributed without direct entry into major importing markets.

The geographic shift matters. Traditional high-visibility chokepoints are giving way to jurisdictions with more complex enforcement environments—or higher tolerance for ambiguity. Mediterranean and Middle Eastern hubs increasingly handle operations that once concentrated in more scrutinised waters. This geographic migration reflects calculated risk management by shadow fleet operators seeking environments where enforcement remains fractured or inconsistent.

‍

Trade flows prove remarkably resilient

Here's the uncomfortable truth: despite significantly stronger enforcement throughout 2025, overall trade flows from key sanctioned suppliers remained broadly stable year-on-year. Iranian and Venezuelan volumes even grew slightly. Sanctions didn't remove supply from global markets—they complicated logistics.

Consider crude oil on water levels, which reached all-time highs near 400 million barrels in transit by January 2026. Sanctioned origins—Russia, Iran, Venezuela—drive this accumulation disproportionately. Those elevated volumes don't represent increased production. They represent barrels spending longer in transit, being rerouted, or stored offshore while waiting for viable discharge opportunities.

This creates a growing disconnect between sustained upstream loading and increasingly uneven import demand under sanctioned regimes. As enforcement tightens and compliance expectations vary across jurisdictions, the physical manifestation is barrels accumulating on water rather than flowing efficiently to destinations. India constraining purchases of Western Russian crude while China slows lifting of Iranian and Venezuelan cargoes contributes to demand-side pressure. Meanwhile, Russia maintains regular loading despite persistent infrastructure attacks, adding supply-side momentum.

The result: sanctions volatility has become a structural feature of oil markets rather than temporary disruption. It's no longer just a compliance issue—it's a fundamental driver of physical market dislocations.

‍

The structural reality

Sanctions volatility in 2026 won't be determined by single factors. It's an interplay of geopolitical developments, market reactions, regulatory coordination, and enforcement capacity. Markets should expect sustained unpredictability in both regulatory actions and their economic impacts.

The global commodity trade rarely stops altogether—it reroutes. Enforcement doesn't eliminate supply; it distorts logistics. The shadow fleet's behavioural adaptation demonstrates this clearly. Deceptive shipping practices have proven themselves not just as evasion tactics but as reliable early indicators of sanctions risk, appearing weeks or months before designations.

For compliance programs, this creates both challenge and opportunity. The challenge: reactive monitoring is structurally insufficient when illicit networks adapt in real time and intermediary structures grow more opaque. The opportunity: behavioural patterns are detectable, escalation is predictable, and risk can be assessed before designation rather than after.

The question isn't whether maritime compliance will remain complex in 2026—it will. The question is whether organisations can shift from reacting to enforcement waves toward anticipating them. In a landscape where 30 vessels join the shadow fleet monthly and deceptive practices spike with each regulatory action, predictive capability isn't a competitive advantage. It's an operational necessity.