For most of the sanctions era, vessel screening worked backwards. A tanker moved sanctioned crude, an investigation followed, a designation eventually landed on an OFAC or EU list, and compliance teams updated their databases. The vessel by then had usually changed name, flag, MMSI and registered owner. The list described a ship that no longer existed in any operational sense.

Behavioural screening inverted that sequence. Instead of matching a hull against a list of designated names, the newer platforms score how a vessel acts: AIS gaps measured against expected satellite coverage rather than treated as raw outages, kinematically impossible position jumps that betray spoofing, loitering in known transfer zones, rendezvous patterns with other high-risk tonnage, flag histories that hop between registries with thin enforcement capacity. Windward, the largest of the vendors in this space, claims it flagged more than 99% of vessels sanctioned by the EU, UK and US during 2025 before those designations were published. Treat vendor self-scoring with the scepticism it deserves. The underlying shift is real regardless of whether the number survives independent audit.

A tanker that does not appear on tracking screens is not invisible. It is simply operating in the gap between the legal obligation to broadcast its position and the practical inability of enforcement authorities to impose consequences for failing to do so. Iran has exploited that gap systematically and at scale, building a sanctions evasion infrastructure that has kept its oil revenues flowing through periods when official exports were near zero, and learning, in the process, the operational techniques of maritime concealment that have military implications beyond their immediate commercial function.