For most of the sanctions era, vessel screening worked backwards. A tanker moved sanctioned crude, an investigation followed, a designation eventually landed on an OFAC or EU list, and compliance teams updated their databases. The vessel by then had usually changed name, flag, MMSI and registered owner. The list described a ship that no longer existed in any operational sense.

Behavioural screening inverted that sequence. Instead of matching a hull against a list of designated names, the newer platforms score how a vessel acts: AIS gaps measured against expected satellite coverage rather than treated as raw outages, kinematically impossible position jumps that betray spoofing, loitering in known transfer zones, rendezvous patterns with other high-risk tonnage, flag histories that hop between registries with thin enforcement capacity. Windward, the largest of the vendors in this space, claims it flagged more than 99% of vessels sanctioned by the EU, UK and US during 2025 before those designations were published. Treat vendor self-scoring with the scepticism it deserves. The underlying shift is real regardless of whether the number survives independent audit.