Ghost Ships off Basra: Inside the Tanker Network Faking Iraqi Origins to Move $800 Million in Iranian Crude

In late April 2026, as the U.S. Navy enforced a blockade around Iranian ports that had already slashed the country's oil exports by more than two-thirds, a cluster of tankers continued broadcasting signals showing them peacefully anchored off Basra, Iraq. They were not there. According to Windward AI, the maritime intelligence firm that first identified the pattern, at least ten vessels were spoofing their Automatic Identification System (AIS) transponders — falsifying their coordinates, ownership messages, and destination data to create the appearance of routine Iraqi trade while covertly sailing to Iranian ports to load sanctioned crude [1].

Four of the vessels are very large crude carriers (VLCCs), each capable of holding roughly 2 million barrels. Fully loaded, those four ships alone would carry about 8 million barrels — worth approximately $800 million at prevailing prices near $100 per barrel [1]. The figure represents a single potential cargo cycle, not annualized revenue, and the distinction matters for understanding both the scale of the scheme and the credibility of the number.

The Vessels and Their Flags

Windward identified the four VLCCs as the Alicia (IMO 9281695), RHN (IMO 9208215), Star Forest (IMO 9237632), and Aqua (IMO 9248473). The Alicia and RHN were operating under fraudulent Curaçao registries — registrations not recognized by Curaçao's maritime authority. The Star Forest was flagged to Hong Kong, and the Aqua carried a fraudulent Malawi registry [2].

Beyond the VLCCs, the network includes the Hong Kong-flagged tankers Paola and Adena, both signaling "Iraqi owner" and linked by the U.S. Treasury to networks facilitating Iranian oil sales. Three medium-range tankers — Aqualis (fraudulent Guyana registry), Kush (fraudulent Comoros flag, broadcasting destination "KAZ" for Khor Al Zubair, an Iraqi port), and Charminar (also fraudulent Comoros) — round out the identified fleet. An LPG carrier, Royal H, flagged under another fraudulent Malawi registry and recently sanctioned, was also involved [2].

The use of fraudulent flag registries is itself significant. Legitimate flag states — nations that register vessels and bear responsibility for regulating them — are supposed to verify ship ownership and enforce safety and environmental standards. By claiming registration from countries like Malawi and Guyana, which have minimal maritime infrastructure, the vessels operate outside any credible regulatory oversight [3].

How It Works: Spoofing, Blending, and Falsified Documents

The AIS manipulation at the center of this scheme is straightforward in concept. Vessels broadcast false GPS coordinates and destination waypoints via their AIS transponders, which are designed as a collision-avoidance and maritime safety tool. A ship might transmit data showing it anchored off Basra's Al Faw terminal while actually sailing to Iran's Kharg Island, roughly 250 nautical miles away [1].

This is not a new tactic. Iran's shadow fleet has used AIS spoofing for years, and maritime analysts estimate that a majority of Iran's oil exports now involve some form of transponder manipulation [4]. What distinguishes the Iraqi-route variant is the additional layer of documentary fraud: vessels carry falsified manifests and ownership records claiming Iraqi origin for their cargo, and in some cases blend Iranian crude with genuine Iraqi crude to frustrate chemical testing [5].

The U.S. Treasury sanctioned one such blending network in September 2025. Waleed al-Samarra'i, an Iraqi-Kittitian businessman based in the UAE, ran a fleet of at least nine Liberia-flagged tankers through his companies Babylon Navigation DMCC and Galaxy Oil FZ LLC. The vessels would conduct ship-to-ship transfers in the Arabian Gulf, mixing Iranian crude with Iraqi crude, then market the blend as purely Iraqi origin. The Treasury estimated this network alone generated about $300 million annually for Iran and its partners [5].

Al-Samarra'i's operation employed the full suite of evasion techniques: nighttime ship-to-ship transfers, AIS spoofing, and deliberate gaps in location reporting. His vessels included the Adena, Liliana, Camilla, Delfina, Bianca, Roberta, Alexandra, Bellagio, and Paola — several of which also appear in Windward's more recent analysis of vessels spoofing off Basra [5].

The Broader Shadow Fleet

The ten tankers caught spoofing off Basra represent a small fraction of Iran's broader clandestine maritime infrastructure. Windward's platform tracks 719 Iranian "dark fleet" tankers globally, including 72 flying the Iranian flag openly [6]. As of mid-April 2026, more than 177 tankers carrying Iranian cargo were on the water worldwide, with 163 sailing under fraudulent flag registries [6].

Much of this fleet transits through the EOPL — the Eastern Outer Port Limits anchorage near the eastern entrance to the Singapore Strait, roughly 43 miles off peninsular Malaysia. CNN described it as a "lawless floating gas station" where Iranian and Russian oil changes hands [7]. According to United Against Nuclear Iran (UANI), at least 679 ship-to-ship transfers took place at the EOPL in 2025, up from 471 in 2024 and 280 in 2023. In just the first four months of 2026, UANI recorded 250 transfers there, with 108 tankers laden with Iranian oil passing through since late February [8].

Source: UANI Tanker Tracker

Data as of Apr 21, 2026CSV

The End Buyers: China's Teapot Refineries

The overwhelming majority of Iran's smuggled crude ends up in China, primarily at small independent refineries in Shandong province known as "teapot" refineries. These facilities, which lack the political connections of China's state-owned giants like Sinopec and PetroChina, became major buyers of sanctioned crude because of steep discounts — typically $10 to $30 per barrel below benchmark prices [9].

Iranian crude typically arrives in China relabeled as "Malaysian blend," having passed through one or more ship-to-ship transfers and front companies, often based in Hong Kong or the UAE, that broker the deals and receive payment [9]. On April 29, 2026, the U.S. Treasury warned banks about sanctions risk from Chinese teapot refineries handling Iranian oil, and OFAC sanctioned Hengli Petrochemical along with approximately 40 shipping firms and vessels operating as part of Iran's shadow fleet [10][11].

The legal exposure for end buyers is real. Under U.S. secondary sanctions, any entity that knowingly processes or purchases Iranian crude risks being cut off from the U.S. financial system. Previous enforcement actions have targeted firms in the UAE, Turkey, and China. The April 2026 sanctions against Hengli Petrochemical marked one of the most significant direct actions against a Chinese refinery [11].

Iraq's Awkward Position

Iraq occupies an uncomfortable role in the smuggling architecture. Its ports, documentation systems, and flag are being exploited to launder Iranian crude, and the Iraqi government has responded with a mix of enforcement, denial, and silence.

Iraq's State Oil Marketing Organization (SOMO) has "firmly denied any cases of mixing or smuggling crude oil," insisting that all tankers are monitored in real time from loading to destination [12]. But these assurances sit uneasily alongside documented cases. Iraq's navy seized a Liberia-flagged tanker near Basra carrying undocumented fuel and arrested an Iranian captain and eight crew members in a separate interdiction [13][14].

Iraq's oil minister acknowledged in 2025 that Iranian tankers were using forged Iraqi documents [15]. The government has implemented reforms including blacklisting specific companies and individuals, but enforcement capacity remains limited. U.S. pressure has been persistent, with some Iraqi lawmakers warning that Washington might sanction Iraq's State Oil Company or central bank if the smuggling continues unchecked [16].

The structural problem is political. Iran-aligned militias and political factions hold significant influence in southern Iraq, including in the Basra region where most of the smuggling infrastructure operates. The Washington Institute for Near East Policy documented extensive fuel oil diversion by militia-linked networks in Iraqi ports, estimating the smuggling generates roughly $1 billion in revenue for Iran and its proxies [17].

Following the Money: IRGC and the Iranian State

The question of who benefits from smuggling revenue leads directly to the Islamic Revolutionary Guard Corps. Reuters reported in December 2024 that the IRGC controls up to half of Iran's oil exports, up from roughly one-fifth three years earlier [18]. Under Iran's 2025-26 budget, the government was required to hand over one-third of its exported oil to the IRGC, effectively making the Guards responsible for exporting approximately 600,000 barrels per day and retaining the proceeds [19].

Iran's national budget allocates approximately $23.4 billion to military and security institutions, with about 47% of this funding provided through crude oil quotas rather than cash [19]. Direct allocations to military and security forces account for 16% of the government's total budget — about $10 billion — with one-quarter going to the IRGC, whose budget rose 24% year-on-year [20].

The total oil revenue picture before the blockade was substantial. In the year ending March 2025, Iran earned about $23.2 billion from oil exports, though tanker tracking data suggested actual shipments could have supported more than $28 billion in revenue at benchmark prices [18]. The gap reflects the discounts Iran must accept to attract sanctions-evading buyers and the costs of maintaining its shadow fleet infrastructure.

The $800 million figure from the Basra-spoofing scheme should be understood within this context. It represents the potential value of a single cargo cycle for four VLCCs — significant, but a fraction of Iran's overall smuggling revenue. The Iraqi route via Basra is one of several evasion corridors, alongside the Malaysia-to-China pipeline, UAE-based front companies, and direct dark shipments to South Asian ports [7][9].

Source: Kpler/UANI Tanker Tracker

Data as of Apr 29, 2026CSV

The Blockade's Impact — and Its Limits

The U.S. naval blockade that took effect on April 13, 2026, has dramatically altered the calculus. More than 10,000 U.S. personnel, supported by over a dozen warships and dozens of aircraft, enforce the operation under CENTCOM authority [21]. Iran's oil exports fell from an average of just over 2 million barrels per day in early April and 1.85 million in March to roughly 567,000 barrels per day in late April — a drop of approximately 70% [22].

The pressure is acute. Kpler, the commodity data firm, estimated that Iran's remaining oil storage capacity could be exhausted within 12 to 22 days at current production and export rates, forcing output cuts [22]. Iran's rial lost 12% of its value against the dollar in a single week [23].

Yet the spoofing scheme off Basra shows how Iran is already probing for weak points. The blockade applies specifically to ships traveling to or from Iranian ports [21]. If tankers can credibly appear to be loading at Iraqi terminals — presenting Iraqi documentation, broadcasting Iraqi destinations, blending cargo to pass as Iraqi crude — they may attempt to transit the blockade zone without triggering interdiction. The four VLCCs identified by Windward appear to represent exactly this kind of test [1].

Evaluating the Evidence

The $800 million figure comes from Windward AI, a private maritime intelligence firm that sells analytics to governments, insurers, and commodity traders. Their methodology — tracking AIS anomalies, cross-referencing satellite imagery, and analyzing vessel behavior patterns — is well-regarded in the industry, but readers should note that Windward has a commercial interest in demonstrating the value of its intelligence products [1].

The figure itself is a theoretical maximum: four VLCCs at full capacity at roughly $100 per barrel. Whether all four ships were fully loaded, whether they all successfully delivered their cargo, and what discount the oil sold at are unknown from the publicly available data. The number represents potential revenue, not confirmed proceeds.

Government sources offer their own estimates with their own limitations. The U.S. Treasury's sanctions announcements cite "hundreds of millions" and "billions" in revenue from various networks without always specifying methodology [5][11]. UANI and TankerTrackers.com provide regular tracking data but are advocacy organizations with stated opposition to the Iranian regime — a perspective that does not invalidate their data but should inform how readers weight their analysis [8].

Independent verification from sources without a policy agenda is limited. The commodity data firms Kpler and Vortexa provide export estimates used by major financial outlets, and their numbers generally align with the advocacy trackers [22].

Why the Network Persists

If the smuggling is as well-documented as the evidence suggests, the obvious question is why enforcement has not been more effective — particularly before the current blockade.

Several factors explain the gap. First, the sheer scale: hundreds of vessels across multiple oceans using constantly evolving tactics make comprehensive interdiction a resource-intensive proposition. Second, many of the key transshipment points — the EOPL anchorage near Malaysia, anchorages off Fujairah in the UAE — fall outside U.S. naval jurisdiction, requiring cooperation from countries that may have limited capacity or incentive to police them [7].

Third, and most uncomfortably, some of Iran's key customers and transit points are U.S. allies or major trading partners. China imports the vast majority of Iran's sanctioned crude, and before the current military confrontation, successive U.S. administrations balanced sanctions enforcement against broader diplomatic priorities in Beijing [9][10]. The UAE hosts many of the front companies and brokers that facilitate the trade, and while Abu Dhabi has cooperated with some U.S. enforcement actions, the emirate's role as a trading hub makes comprehensive policing difficult [5].

Since February 2025, OFAC has sanctioned approximately 1,000 Iran-related persons, vessels, and aircraft as part of the "Economic Fury" campaign [11]. The April 2026 blockade represents a qualitative escalation — from financial pressure to physical interdiction. Whether it proves sustainable, and whether the spoofing schemes off Basra represent the last gasp of a collapsing network or an adaptation that will outlast the blockade, remains to be seen.

The $800 million question is ultimately not about one cargo load. It is about whether the architecture of sanctions evasion — the fraudulent registries, the front companies, the cooperative port officials, the willing buyers — can be dismantled faster than it can adapt. The evidence so far suggests it is a contest without a clear frontrunner.