The Vanishing Act
Every barrel of Iranian oil that reaches a Chinese refinery passes through a chain of deception — falsified ship identities, spoofed GPS coordinates, forged paperwork — and every link adds a cost. The $10–$15 per barrel discount that Iran accepts to move crude through the Ghost Fleet is revenue that vanishes before it can subsidize bread, fuel, or medicine. If your government’s primary export was sold at a permanent discount because the money had to pass through a smuggling network before reaching the treasury, you would feel it at the register, at the pharmacy, and at the gas station. Ninety-three million Iranians do.
In February 2026, a tanker called the Veronica was broadcasting its position in the Mediterranean Sea — a routine commercial vessel on a routine commercial voyage. Its Automatic Identification System showed it loitering at coordinates consistent with standard shipping lanes. Its paperwork was in order.
Satellite imagery told a different story. While the Veronica’s AIS beacon placed it in the Mediterranean, high-resolution photographs showed the vessel physically berthed at an Iranian oil terminal, loading crude. The digital alibi and the physical reality were separated by three thousand miles. The discrepancy gave US authorities sufficient evidence to obtain a seizure warrant.
The Veronica was not an outlier. It was one of approximately three hundred to four hundred vessels that constitute Iran’s “Ghost Fleet” — an armada of aging tankers, many near the end of their operational lives, that employ industrial-scale deception to move Iranian crude oil past international sanctions. The fleet is the lifeline of an economy under siege — and a testament to the ingenuity that isolation forces upon a nation denied access to the legal market.
The Identity Theft
The Ghost Fleet operates through three primary methods of deception, each more elaborate than the last.
Flag-hopping — the maritime equivalent of identity theft — is the simplest. A vessel changes its registry between flag states with minimal oversight: Panama, Cook Islands, Cameroon, Palau, Gabon. Each change creates a new paper identity, making it harder for enforcement agencies to track a vessel’s history of sanctions-linked activity.
The Manarat Alkhaleej, designated in early 2025 for engaging in significant transactions involving Iranian oil, illustrates the method.1 The vessel hopped between Panamanian, Cook Islands, and Cameroonian registries while its ownership was layered through shell companies in the Marshall Islands. It also served as commercial manager for two other sanctioned vessels — Ocean Guardian and Al Safa — creating a network of ships that shared logistics, documentation, and evasion infrastructure.
AIS spoofing is the digital evolution. Every commercial vessel is required to broadcast its position through the Automatic Identification System — a transponder that transmits the ship’s identity, speed, heading, and coordinates. Ghost Fleet tankers manipulate this system with remarkable sophistication.
The signature technique is the “Oman Anchor” ruse: a tanker physically loading crude at Kharg Island or Lavan Island — Iran’s primary export terminals — broadcasts coordinates placing it at anchorage off Fujairah in the UAE, or performing a patrol pattern in the Indian Ocean. The AIS data creates a digital alibi that matches the vessel’s commercial manifest. The actual vessel is thousands of miles away, filling its tanks with sanctioned crude. The Veronica’s Mediterranean fiction was a variation on the same playbook.
The third method is “going dark” — switching off the AIS transponder entirely during loading or ship-to-ship transfer operations, then reactivating it at a plausible position with falsified timestamps. The gap in the tracking record is the operational window in which sanctions violations occur.
The Blend
The most elegant deception is not digital. It is chemical.
The “Iraqi Blend” mechanism exploits the physical proximity of Iranian and Iraqi oil infrastructure in the Persian Gulf. Iranian heavy crude is smuggled into Iraqi territorial waters or loaded onto tankers that simultaneously carry legitimate Iraqi cargo. Ship-to-ship transfers — at the Shatt al-Arab waterway or the Khor Fakkan anchorage — mix Iranian crude with Iraqi oil. The paperwork — bills of lading, certificates of origin — is forged to declare the entire cargo as “Iraqi Crude.” The chemical signature of the Iranian component is diluted enough to pass basic assay tests at the receiving refinery.
The network is operated by facilitators like Waleed al-Samarra’i, who manages the logistics of loading, blending, documentation, and delivery.2 The scale is visible in a single data point: Chinese imports of “Iraqi” oil consistently exceed Iraq’s declared exports to China — a statistical impossibility that can only be explained by Iranian crude hidden in the blend.
The Malaysian variant follows the same logic at greater distance. The Nipah anchorage and Labuan waters serve as transshipment hubs where Iranian crude is transferred to new vessels and re-documented as Malaysian origin. The gap between what China claims to import from Malaysia and what Malaysia actually produces is nearly a million barrels per day — Iranian oil wearing a Malaysian passport.
The Numbers That Don’t Add Up
Route Claimed Origin Import vs. Production Gap Estimated Value Iraqi Blend ”Iraqi Crude” Imports exceed Iraqi exports by ~100,000 bpd ~$2.5B/yr Malaysian Transshipment ”Malaysian Crude” 1.46M bpd imported vs. ~500K bpd produced ~960K bpd gap
The Iron Lung
The Ghost Fleet’s cargo has a destination: the independent refineries of China’s Shandong province.
These “teapot” refineries — small-to-medium processors operating outside the orbit of China’s state-owned petroleum giants — purchase Iranian crude at a $10–$15 discount below the Brent benchmark. They have no exports to the United States, no Western financing, no American correspondent banking relationships. They exist, by design, beyond the reach of secondary sanctions.
Top Chinese Purchasers of Iranian Oil (2025, UANI Data)
Refinery Location Shipments Barrels ”Brand” Used Lawen Namu Petroleum Qingdao 29 39.8M Oman / Nemina Blend Qingdao Kedama Energy Qingdao 25 38.9M Mal Blend (Malaysian) Shandong Dongfang Hualong Shandong 31 37M+ Urals / Blue Laser Yueyang Guansheng Hunan 12 18.7M Bitumen Blend Guanghui Kaineng Xinjiang 12 17.1M Mal Blend
Payment flows through second-tier Chinese rural banks — Bank of Kunlun is the named institution — in RMB, not dollars. The renminbi is rarely repatriated to Iran. Instead, it is used to purchase Chinese industrial goods or swapped through hawala networks in the UAE. As long as the refineries remain domestically focused, the “Teapot Shield” holds: US sanctions have no coercive mechanism against entities with no American financial exposure.
The discount is the hidden tax. Every barrel sold at $10–$15 below market price represents revenue that evaporates before reaching the Iranian treasury — approximately $4–5 billion annually. That is money that cannot subsidize bread, fuel, or medicine. The teapots keep Iran’s oil flowing and the regime technically solvent. They also bleed it dry, barrel by discounted barrel.
The Labyrinth
Oil is only half the evasion architecture. The financial infrastructure that moves the proceeds is equally elaborate — and increasingly digital.
The “Nikan Pezhvak” network — designated by OFAC in 2024 and 2025 — illustrates the traditional method.3 Empire International Trading FZE, based in the UAE, and Golden Mist PTE. Ltd., based in Singapore, operated as clearinghouses for Iranian oil revenue. The system works on ledger balances rather than wire transfers — a “Hawala 2.0” in which money never crosses a border. An Iranian exporter in China selling oil credits a ledger; an Iranian importer in Dubai buying electronics debits the same ledger. Only goods move internationally. The financial flows are invisible to Western intelligence.
The crypto channel is newer and growing rapidly. Iran’s cryptocurrency transaction volume reached an estimated $10 billion in 2025.4 Nobitex — the country’s largest exchange, processing eighty-seven percent of Iranian crypto volume — was identified as a gateway for IRGC fund transfers using the Tron network and Tether stablecoin. In June 2025, the pro-Israel cyber group “Predatory Sparrow” hacked Nobitex and exposed $90 million in user funds — including wallets linked directly to the IRGC, confirming the exchange’s role in state finance. Separately, the regime burns subsidized natural gas — which it cannot easily export under sanctions — to power Bitcoin mining rigs, converting unsellable energy into universally liquid cryptocurrency.
The Iraq siphon operated at an astonishing scale before being partially shut down. Iranian-backed militias acquired thousands of Iraqi prepaid debit cards, transported them to the UAE, and ran “point-of-sale farms” that simulated fake purchases — siphoning approximately $450 million in profit in 2023 alone, with monthly transaction volumes reaching $400 million to $1.1 billion until Visa and Mastercard were pressured to block the transactions. Al-Huda Bank, designated in 2024, used fraudulent import invoices to purchase dollars from Iraq’s Central Bank “Dollar Auction” at the official exchange rate, funneling at least $6 billion to the IRGC-Qods Force before being caught.5
A resurrected gold trade completes the picture. The 2026 route runs through the UAE and Africa — conflict gold from Sudan and Libya is refined in the Emirates, then used to settle trade imbalances with Iran or Turkey. The mechanism echoes the Halkbank scheme of 2012–2013, when Turkey’s state-owned bank facilitated billions in gas-for-gold trade — but the 2026 version is decentralized, running through private jewelers and logistics firms that leave no banking trail.
The Scoreboard
Not all enforcement is equal. The pattern reveals what actually damages the regime’s revenue versus what is — to use a precise term — whack-a-mole theater: the performance of enforcement activity that produces press releases without strategic outcomes.
Structural damage: Energy interdictions are the most effective tool. The oil discount alone bleeds $4–5 billion annually from the treasury. Tanker seizures like the Abyss — five hundred thousand barrels, $25 million in proceeds redirected — have spooked insurers and forced Iran onto the aging, accident-prone Ghost Fleet, creating a logistical ceiling on export volume. The Iraqi waiver revocation froze $10 billion and directly correlated with the late-2025 currency collapse. Banking isolation through FATF blacklisting and secondary sanctions destroyed the rial — seventy-five percent of its value evaporated in 2025 alone.
Performative: Human rights designations against individual IRGC commanders are morally significant but strategically empty — these officials rarely hold foreign assets or travel to Western countries. The entity list — Babylon Navigation designated one quarter, Alpa Trading the next — creates a nuisance, not a blockade. A new shell company costs a few thousand dollars to register. The revenue it generates before detection reaches millions. Without systemic pressure on hosting jurisdictions — the UAE, China, Turkey — individual designations are bureaucratic paper that the evasion machinery processes as a cost of doing business.
Enforcement Effectiveness
Category Examples Assessment Energy interdictions Oil discount ($4–5B/yr), Abyss seizure Structural — limits revenue, forces suboptimal logistics Financial isolation FATF blacklist, secondary sanctions, Iraqi waiver Structural — destroyed the rial, triggered civil unrest Maritime seizures Abyss, Suez Rajan, Veronica Moderate — deters insurers, but fleet replenishes Human rights designations Individual IRGC/Basij commanders Performative — targets rarely have foreign assets Entity list (“whack-a-mole”) Babylon Navigation, Alpa Trading Performative — shell companies are expendable INSTEX 1 transaction, dissolved 2023 Failed — monument to European “lack of courage”
The Honest Ledger
The Ghost Fleet is a monument to human ingenuity in the service of survival — and corruption. The same infrastructure that keeps oil flowing to China allows the IRGC to fund its proxy network, procure weapons technology, and maintain its domestic kleptocracy. The smuggling premium is collected from the Iranian population as a hidden tax.
The oil beneath Iranian soil belongs, in theory, to the Iranian people. In practice, it is extracted by a state that does not represent them, sold at a discount through networks controlled by the IRGC, and converted into revenue that funds proxy warfare rather than schools or hospitals. The Ghost Fleet is not national commerce. It is the plunder of a sovereign nation’s wealth by an unelected military cartel — and the environmental risk of a major spill from a forty-year-old tanker with spoofed safety records is not hypothetical. It is statistical.
The enforcement question is not whether to interdict. It is where interdiction has leverage. Designating individual shell companies is an exercise in bureaucratic futility — the cost of replacing a sanctioned entity is trivial compared to the revenue it generates. Pressuring flag states — Panama, Cameroon, Palau — to enforce their own maritime regulations has greater potential but requires sustained diplomatic capital that competing priorities erode. The decisive variable is China: as long as Shandong’s teapot refineries operate beyond the reach of secondary sanctions, Iran will have a buyer willing to accept discounted crude and pay in a currency the regime can spend.
The Veronica was caught because satellite imagery contradicted its digital alibi. The three hundred ships that were not caught that month continued loading, continued spoofing, and continued delivering Iranian crude to refineries that have never processed a dollar through an American bank. The enforcement architecture is sophisticated. The evasion architecture is equally so. The contest between them is not a war that either side is winning — it is a permanent siege in which the attackers grow more precise and the defenders grow more creative, while the people whose economy depends on the outcome grow poorer with every discounted barrel.
This article is part of The Sanctions Paradox. For the humanitarian cost of the banking blockade, see The Butterfly Ward. For how sanctions destroyed Iran’s middle class, see The Shrinking Sofreh.
Footnotes
-
US State Department, “Sanctions to Combat Illicit Traders of Iranian Oil and the Shadow Fleet,” February 2026 ↩
-
US Treasury Department, “Treasury Intensifies Pressure on Iranian Oil Smuggling and Sanctions Evasion Schemes in Iraq,” Press Release, 2025 ↩
-
US Treasury Department, “Treasury Targets Iranian Network Evading Sanctions and Enabling Oppression,” Press Release, 2025 ↩
-
Elliptic, “Inside Nobitex: How Iran’s Largest Crypto Exchange Fuels Sanctions Evasion and Illicit Finance,” 2025; TRM Labs, “Iran’s Crypto Economy in 2025,” 2025 ↩
-
FinCEN, “Iraq Bank 311 NPRM,” January 2024; US Treasury Department, “U.S. Treasury Takes Action to Protect Iraqi Financial System From Abuse,” Press Release, 2024 ↩