Civic Intelligence World Desk — IranApril 29, 2026
World · Iran War · Sanctions Evasion

The Digital Alibi. Four tankers. $800 million. The Iraqi ghost route through the U.S. blockade.

Since the U.S. naval blockade of Iranian ports began April 13, four sanctioned Very Large Crude Carriers — the Alicia, RHN, Star Forest, and Aqua — have been broadcasting fake destination signals to Iraqi ports while secretly loading at Iran's Kharg Island. Combined capacity: 8 million barrels. Street value at current oil prices: $800 million. The method is called a "digital alibi." Maritime intelligence firm Windward AI documented it. Treasury Secretary Scott Bessent is sanctioning a thousand vessels. And Iran is still moving oil.

12 sources·Windward AI · OFAC · U.S. Treasury · FDD · Al Jazeera · DoD
$800M
Sanctioned oil value
4 VLCCs · ~8M barrels
>50%
Drop in Iranian loadings
Since Apr 13 blockade
560+
Shadow fleet vessels
UANI Ghost Armada, 2025
1,000+
Entities sanctioned
OFAC since Feb 2025
§ 01 / The $800 Million Run

On April 13, 2026, the United States Navy began a formal blockade of Iranian ports — the most direct economic chokehold Washington has ever imposed on Tehran. Within days, Iranian oil loadings fell by more than half.

But four Very Large Crude Carriers — VLCCs, the largest class of oil tanker, each capable of hauling up to 2 million barrels — didn't stop. They found a workaround in data itself.

According to maritime intelligence firm Windward AI, the four ships — the Alicia (IMO 9281695), the RHN (IMO 9208215), the Star Forest (IMO 9237632), and the Aqua (IMO 9248473) — have been broadcasting Automatic Identification System (AIS) signals declaring their destination as Iraqi ports: Basrah, Khor Al Zubair. Legal. Routine. Iraqi oil is not sanctioned.

The actual destination: Kharg Island, Iran's primary oil export terminal. Each VLCC loaded sanctioned Iranian crude while its transponder told the world it was anchored off Iraq.

Eight million barrels. Approximately $800 million at prevailing prices. Moving right through the blockade on a lie broadcast in real time.

US Navy Powerless In Hormuz? 4,000,000 Iranian Oil Barrels Pass Under Trump's Nose — Analysis
§ 02 / How the Digital Alibi Works

Every commercial vessel over 300 gross tons is required by international maritime law to carry an AIS transponder — a GPS-linked radio that continuously broadcasts the ship's identity, position, speed, and declared destination. The system was designed for collision avoidance. Sanctions enforcers rely on it to track oil smugglers.

Iran's shadow fleet has spent years defeating it. Three techniques dominate:

The Three Evasion Techniques
  1. 1. AIS Off (dark sailing). The simplest approach — switch off the transponder entirely. The ship goes invisible on global tracking platforms. Problem: large gaps in a vessel's voyage history raise flags. Analysts call these disappearances "dark events."
  2. 2. AIS Spoofing (the digital alibi). More sophisticated. The ship keeps broadcasting — but feeds the system false position data or a false declared destination. To any satellite receiver or port authority watching, the vessel appears to be doing something routine. The Alicia, RHN, Star Forest, and Aqua all used this method: broadcasting Iraqi port destinations while physically docking at Kharg Island, Iran.
  3. 3. Ship-to-Ship Transfer (STS). Iranian crude loads onto a flagged tanker in Iranian waters. That tanker sails into international waters — often near Malaysia, Oman, or the East of Port Klang anchorage (EOPL) — and transfers the oil to a second vessel with cleaner paperwork. The second vessel relabels the cargo as Malaysian or Indonesian origin and delivers it to China.

Windward AI documented what it calls "erratic voyage trails" in all four vessels — patterns of positional data that don't match the declared route. The ships' AIS records show them anchored off Iraq. Satellite imagery, vessel movement analytics, and cross-referenced port data show them in Iran.

US Navy Boards Iran Oil Tanker — Trump Issues Lethal Order at Hormuz for Miners (April 2026)
§ 03 / The Four Ships

Windward AI identified four VLCCs executing the Iraqi-alibi maneuver as of the blockade's first two weeks. All four are already subject to U.S. sanctions. IMO numbers — the maritime equivalent of a VIN — are permanent; they cannot be changed even if a ship is renamed or re-flagged.

VesselIMO #CapacityEvasion Method
Alicia9281695~2M bblAIS spoofing / fake Iraqi destination
RHN9208215~2M bblFalse broadcast to Khor Al Zubair (Iraq)
Star Forest9237632~2M bblErratic voyage trail / AIS manipulation
Aqua9248473~2M bblSpoofed position while loading at Kharg Island
Source: Windward AI maritime intelligence analysis, April 2026

Windward AI additionally identified the Paola, Adena, Aqualis, Kush, Charminar, and Royal H as part of the broader sanctions-evasion network — the last of which was newly designated by OFAC in February 2026.

These tankers were Iranian. Baghdad accuses Tehran of forging Iraqi documents to evade oil sanctions.

Foundation for Defense of Democracies · March 24, 2025 — citing Iraq Oil Minister Hayan Abdul Ghani
§ 04 / The Paper Trail — Iraq's Forged Documents

The AIS alibi is only half the scheme. The other half is paperwork.

Iraq's State Oil Marketing Organization (SOMO) issues certificates of origin for every barrel of legitimate Iraqi crude that enters the export market. Iranian smugglers obtain counterfeit SOMO documentation — current market price: approximately $12,000 per cargo, according to the Foundation for Defense of Democracies — and use it to present Iranian oil as Iraqi to buyers, insurers, and port authorities in third countries.

In a press conference on March 24, 2025, Iraq's Oil Minister Hayan Abdul Ghani publicly accused Iran of exactly this. His ministry found Iranian tankers carrying forged SOMO paperwork. The scheme is not theoretical — Baghdad caught it.

OFAC's September 2025 sanctions action against Iraqi-Kittitian businessman Waleed al-Samarra'i provided the most detailed operational picture to date: his company Babylon operated a fleet of Liberia-flagged tankers — including the Adena, Liliana, Camilla, Delfina, and Paola — conducting ship-to-ship transfers in the Arabian Gulf to blend Iranian and Iraqi crude, then marketing the blend as purely Iraqi.

Who Runs Iran's Oil Smuggling Operations

Mohammad Hossein Shamkhani — son of now-deceased senior Iranian security official Ali Shamkhani. Treasury's April 15, 2026 "Economic Fury" action describes him as head of a multi-billion-dollar Iranian and Russian petroleum sales empire, enriching regime-connected families at the expense of the Iranian people. OFAC designated 25+ individuals, companies, and vessels in his network.

Waleed al-Samarra'i — Iraqi-Kittitian businessman. OFAC September 2025: leads Babylon shipping company, nine Liberia-flagged tankers, conducts STS blending of Iranian and Iraqi crude in the Arabian Gulf and at Iraqi ports.

Salim Ahmed Said network — OFAC July 2025: also smuggled blended Iraqi and Iranian oil. Preceding target ahead of the al-Samarra'i action.

§ 05 / Treasury's 'Economic Fury' Campaign

Treasury Secretary Scott Bessent has presided over the most aggressive Iran sanctions enforcement in U.S. history. Since February 2025, OFAC has sanctioned approximately 1,000 Iran-related persons, vessels, and aircraft under what Treasury branded the "Economic Fury" campaign — a direct echo of the military operation's name, Operation Epic Fury.

The campaign's key actions, in chronological order:

Feb 2026
Treasury sanctions Royal H tanker — early blockade-evasion case.
OFAC
Mar 24, 2025
Iraq's Oil Minister Hayan Abdul Ghani publicly accuses Iran of forging SOMO export documents. Fraudulent certificates sold for ~$12,000 per cargo.
FDD Analysis
Apr 13, 2026
U.S. naval blockade of Iranian ports begins. Iranian oil loadings drop by more than half within days.
Windward AI / Fox News
Apr 15, 2026
OFAC 'Economic Fury' action: sanctions 25+ individuals and companies in the Mohammad Hossein Shamkhani multi-billion-dollar oil network.
U.S. Treasury / home.treasury.gov/news/press-releases/sb0443
Apr 21, 2026
U.S. forces seize MT Tifani between Sri Lanka and Indonesia — 1.9 million barrels of Iranian crude aboard. Signals blockade extending into Indo-Pacific.
DoD / Al Jazeera / Washington Post
Apr 24, 2026
OFAC 'Economic Fury' follow-on: sanctions Hengli Petrochemical (China) — one of Iran's largest crude customers — plus 19 additional shadow fleet vessels.
U.S. Treasury / home.treasury.gov/news/press-releases/sb0472
Apr 29, 2026
Windward AI publishes analysis: four VLCCs (Alicia, RHN, Star Forest, Aqua) using AIS spoofing to disguise Iranian loading as Iraqi port calls. Combined capacity ~$800M.
Windward AI / Fox News

The April 24, 2026 action included a significant escalation: OFAC sanctioned Hengli Petrochemical (Dalian) Refinery Co., Ltd., a Chinese state-linked "teapot" refinery described as one of Iran's largest crude customers, having purchased billions of dollars' worth of Iranian petroleum. Sanctioning a Chinese entity is diplomatically costly — it signals that Washington is willing to impose secondary sanctions on major Chinese industrial companies rather than let the evasion network operate with impunity.

Iran War: Trump Warns of Extended Hormuz Blockade | Bloomberg Daybreak Europe — Apr 29, 2026
§ 06 / The MT Tifani Precedent

On April 21, 2026, U.S. forces boarded the MT Tifani (IMO 9273337) between Sri Lanka and Indonesia — more than 2,000 miles from the Persian Gulf. The vessel was carrying 1.9 million barrels of Iranian crude oil it had loaded at Kharg Island on April 5, passed through the Strait of Hormuz on April 9, and was en route to China.

The seizure — executed by USS forces operating under INDOPACOM authority — served an unmistakable message: the blockade is not limited to the Persian Gulf or the Strait of Hormuz. Any vessel carrying Iranian oil, anywhere in the world's oceans, is subject to interdiction. The physical geography of the enforcement perimeter just expanded to include the Indian Ocean.

Iran's Parliament Speaker Mohammad Ghalibaf responded publicly, signaling that Tehran was watching the enforcement escalation and was prepared to retaliate — though the nature of any retaliation remains within the bounds of the ongoing ceasefire negotiations.

Who Runs Iran's Government — As of April 2026

Mohammad Ghalibaf — Speaker of Iran's Parliament (Majlis). Former IRGC general, former Tehran mayor. Publicly responded to the MT Tifani seizure.

Iran's Supreme Leader Ali Khamenei was assassinated February 28, 2026, during the opening strikes of Operation Epic Fury. The regime's chain of command is contested and fragmented.

Scott Bessent — U.S. Treasury Secretary (R), overseeing OFAC's "Economic Fury" sanctions campaign against Iran's oil revenue infrastructure.

§ 07 / The Shadow Fleet — 560 Tankers and Growing

The four VLCCs Windward AI identified are not aberrations. They are the visible tip of a 560-vessel fleet that Iran assembled specifically to evade Western sanctions.

The United Against Nuclear Iran (UANI) Ghost Armada tracker — the most comprehensive open-source database of the shadow fleet — counted 560 vessels as of late 2025, with 83 newly identified that year alone. The fleet's characteristics:

Aging hulls
Many vessels are 15–25 years old, making them commercially uninsurable through standard P&I clubs — reducing their exposure to Western pressure.
Flag hopping
21% currently flagged by Panama; registries change frequently to obscure ownership. Liberia, Gabon, and Palau are common flags of convenience.
Opaque ownership
Vessels layered through multiple shell companies across multiple jurisdictions. OFAC frequently traces beneficial ownership to IRGC-linked entities.
Night STS
Ship-to-ship transfers often occur at night with both vessels running dark. Primary transshipment hub: East of Port Klang anchorage (EOPL), Malaysia.

In 2025 — before the war and the blockade — Iran was exporting an average of 1.69 million barrels per day, with roughly 90% flowing to China. The Reuters estimate of the Iraqi blending scheme alone: more than $1 billion annually in additional revenue Iran generates by disguising its oil as Iraqi.

§ 08 / Who's Buying — China's Teapot Refineries

The destination for nearly all of Iran's sanctioned crude is China — specifically a network of small, privately operated refineries in Shandong province known as "teapot refineries." These facilities are willing to purchase heavily discounted Iranian crude that Western-integrated companies refuse to touch.

OFAC's April 24 designation of Hengli Petrochemical (Dalian) — one of the largest and most sophisticated of these buyers — signals that Washington is no longer limiting its enforcement to the shipping side of the transaction. The refinery that purchases the oil is now also a target. This matters because sanctioning the buyer creates downstream pressure on Chinese banking, insurance, and logistics firms that service Hengli.

The EOPL (East of Port Klang anchorage, off Malaysia) has become the primary transshipment hub in the Indian Ocean — CNN's April 27, 2026 investigation described it as a "lawless floating gas station" where Iranian shadow fleet tankers offload to Chinese-bound vessels under cover of Malaysian waters. Kpler's data shows the MT Tifani made multiple journeys through EOPL before its seizure.

§ 09 / What Washington Is Doing About It

Three enforcement tracks are running simultaneously:

  1. 01.
    OFAC sanctions designations
    Treasury's "Economic Fury" campaign has designated ~1,000 Iran-related persons, vessels, and aircraft since February 2025. Each designation cuts the target off from the U.S. financial system and exposes any non-U.S. counterparty that continues doing business with them to secondary sanctions.
  2. 02.
    U.S. Navy physical interdiction
    CENTCOM and INDOPACOM forces are physically boarding and seizing Iranian oil tankers on the high seas. The MT Tifani seizure established that the enforcement radius extends to the Indian Ocean. Trump has additionally ordered U.S. forces to 'shoot and kill' Iranian small boats deploying mines at the Strait of Hormuz.
  3. 03.
    Maritime intelligence + tracking
    Windward AI, Kpler, and UANI's Ghost Armada tracker are the open-source backbone. OFAC relies on their vessel analyses to build sanction designations. Without the ability to track AIS anomalies and dark events via satellite, the digital alibi scheme would be nearly undetectable.
Iran Ship With 2M Barrels 'Shatters' U.S. Blockade — Tensions at Hormuz (April 2026)
§ 10 / The Bottom Line
The Bottom Line

The U.S. blockade of Iranian ports is working — Iranian oil loadings fell by more than half in its first two weeks. But it is not airtight. Four VLCCs carrying an estimated $800 million in sanctioned crude defeated the blockade with a lie in their AIS transponders: "destination Iraq."

The broader Iranian shadow fleet — 560 vessels identified by UANI, 90% of exports flowing to China — represents a sanctions architecture built over a decade of maximum pressure evasion. It does not fall apart in two weeks. It adapts.

Washington's response has three levers. OFAC is pulling hard on the financial one: ~1,000 designations since February, escalating to Chinese buyers. The Navy is pulling on the physical one: MT Tifani, seized 2,000 miles away. Maritime intelligence firms are making the digital alibi increasingly visible.

The question is whether those three levers, applied simultaneously, can close a gap that Iran has spent years — and billions — designing specifically to survive Western pressure. The $800 million currently moving through that gap suggests the answer is not yet.

Sources & Primary Documents
[01]
Fox News (Apr 29, 2026)

Iran's $800M oil smuggling scheme uses tankers posing as Iraqi ships to dodge blockade — citing Windward AI maritime intelligence

[02]
U.S. Treasury OFAC — sb0443 (Apr 15, 2026)

'Economic Fury' sanctions: Mohammad Hossein Shamkhani network, multi-billion-dollar Iranian/Russian petroleum sales operation

[03]
U.S. Treasury OFAC — sb0472 (Apr 24, 2026)

'Economic Fury' — Hengli Petrochemical (China) sanctioned; 19 shadow fleet vessels designated for transporting billions in Iranian crude

[04]
Windward AI — OFAC Targets Iran's Shadow Fleet (2026)

Analysis of sanctioned tanker AIS spoofing tactics, fake destination broadcasts, and digital alibis used to evade U.S. blockade

[05]
FDD — 'These Tankers Were Iranian' (Mar 24, 2025)

Iraq Oil Minister Hayan Abdul Ghani accuses Iran of forging SOMO export documentation; fraudulent certs sold for ~$12,000/cargo

[06]
Al Jazeera — MT Tifani seizure (Apr 21, 2026)

U.S. forces detain Iran-linked tanker Tifani carrying 1.9M barrels of Iranian oil, seized between Sri Lanka and Indonesia

[07]
UANI Ghost Armada Report (2025)

560 vessels in Iran's shadow fleet as of end 2025; 83 newly identified in 2025; 21% flagged Panama

[08]
OFAC — Iran Sanctions (Sep 2, 2025)

Treasury intensifies pressure on Iranian oil smuggling and sanctions evasion schemes in Iraq; al-Samarra'i network sanctioned — Liberia-flagged ADENA, PAOLA, and others

[09]
Herbert Smith Freehills — OFAC Iran-Iraq (2025)

OFAC targets Iran-Iraq oil smuggling network: blending Iranian and Iraqi oil at sea for sale as purely Iraqi origin

[10]
Washington Post — MT Tifani (Apr 21, 2026)

U.S. operations against Iran expand to Indian Ocean with tanker capture

[11]
CNN — EOPL / Shadow Fleet (Apr 27, 2026)

The lawless floating gas station where the Iranian shadow fleet trades oil — EOPL transshipment hub in the Indian Ocean

[12]
Wikipedia — Iranian Shadow Fleet

Background on AIS spoofing, flag hopping, ship-to-ship transfers, and shadow fleet scale and history

Share this report