Russia deploys advanced AIS spoofing to mask shadow-fleet tankers near the UK

A recent analysis reveals that Russia has escalated its manipulation of the Automatic Identification System, causing shadow-fleet oil tankers to display duplicate positions on maritime trackers. The technology can make a single ship appear simultaneously in two places, as demonstrated by the Russian-flagged tanker Pirop, which was shown both in the Bosphorus Strait and on the Turkish coast some 800 km away. The practice, first documented by University College London researcher Ollie Ballinger, follows a surge in Ukrainian attacks on Russia-linked vessels in the Black Sea.

In addition to dual-position spoofing, Russian tankers are employing AIS handshakes with fishing vessels and outright disabling of AIS beacons. The move responds to the seizure of several shadow-fleet ships by Royal Marines and EU authorities in 2026 and seeks to conceal illicit activities such as ship-to-ship oil transfers. Authorities warn that falsified AIS data undermines the safety net provided by the system in congested routes like the English Channel and poses a broader cyber-security vulnerability. There are also concerns that civilian tankers could be militarised, potentially serving as platforms for drones or hybrid attacks against the UK and its allies.