NCA issues Red Alert on sanctions evasion network exploiting shadow fleet tankers for Russian oil transport.

Economic & Financial PressureSanctions Evasion & SmugglingShadow fleets, covert oil/gas sales

Aggressor

Summary

The UK’s National Crime Agency (NCA) issued a Red Alert regarding a sanctions evasion network utilizing shadow fleet tankers to transport Russian oil, amidst concerns that such activities are funding Russia's war in Ukraine. The network includes companies operated by UK-sanctioned individuals, who are known for using misleading practices to obscure the origins of the oil and evade sanctions.

Classification

Confidence: High

Classified as an aggressor event as the NCA alerts about a network directly involved in evading sanctions to finance Russian military activities. The extensive evidence provided by the NCA independently corroborates the presence of hostile financial activities against international sanctions.

Source URL

https://nationalcrimeagency.gov.uk/who-we-are/publications/753-red-alert-shadow-fleet-sanctions-evasion-and-avoidance-network/file

Open source

Provenance

Publisher: admin_quick
Submitted: Feb 1, 2026, 00:14 UTC
Last updated: Nov 9, 2026, 00:03 UTC
Event time: Jul 1, 2025, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "53d19cdb-4195-44fa-9556-ba58afa7cceb",
  "url": "https://nationalcrimeagency.gov.uk/who-we-are/publications/753-red-alert-shadow-fleet-sanctions-evasion-and-avoidance-network/file",
  "source": "admin_quick",
  "status": "approved",
  "category": "Economic & Financial Pressure",
  "subcategory": "Sanctions Evasion & Smuggling",
  "incident_type": "Shadow fleets, covert oil/gas sales",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "2",
  "tags": [
    "sanctions",
    "shadow fleet",
    "Russian oil",
    "economic crime",
    "international sanctions"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Unknown",
  "headline": null,
  "description": "The UK’s National Crime Agency (NCA) issued a Red Alert regarding a sanctions evasion network utilizing shadow fleet tankers to transport Russian oil, amidst concerns that such activities are funding Russia's war in Ukraine. The network includes companies operated by UK-sanctioned individuals, who are known for using misleading practices to obscure the origins of the oil and evade sanctions.",
  "summary_short": "NCA issues Red Alert on sanctions evasion network exploiting shadow fleet tankers for Russian oil transport.",
  "summary_extended": null,
  "actor_primary": "UK-sanctioned Azeris Etibar EYYUB and Tahir GARAYEV",
  "target_primary": null,
  "location_text": "United Kingdom",
  "location_region": null,
  "location_coordinates_lat": 55.378051,
  "location_coordinates_lon": -3.435973,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Classified as an aggressor event as the NCA alerts about a network directly involved in evading sanctions to finance Russian military activities. The extensive evidence provided by the NCA independently corroborates the presence of hostile financial activities against international sanctions.",
  "event_time_utc": "2025-07-01T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-01T00:14:32.907Z",
  "updated_at": "2026-11-09T00:03:29.194Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: SignificantAttribution: HighSingle sourceTime: UnknownLocation: Regional

Source reliability

Info credibility

Event time

Jul 1, 2025, 00:00 UTC

Event time confidence

unknown

Location

United Kingdom

Primary actor

UK-sanctioned Azeris Etibar EYYUB and Tahir GARAYEV

Country

United Kingdom

Tags

sanctions, shadow fleet, Russian oil, economic crime, international sanctions

Loading signal...

{ "id": "53d19cdb-4195-44fa-9556-ba58afa7cceb", "url": "https://nationalcrimeagency.gov.uk/who-we-are/publications/753-red-alert-shadow-fleet-sanctions-evasion-and-avoidance-network/file", "source": "admin_quick", "status": "approved", "category": "Economic & Financial Pressure", "subcategory": "Sanctions Evasion & Smuggling", "incident_type": "Shadow fleets, covert oil/gas sales", "country": "United Kingdom", "source_reliability": "B", "info_credibility": "2", "tags": [ "sanctions", "shadow fleet", "Russian oil", "economic crime", "international sanctions" ], "nodes": [], "countries": [], "where_text": "Unknown", "headline": null, "description": "The UK’s National Crime Agency (NCA) issued a Red Alert regarding a sanctions evasion network utilizing shadow fleet tankers to transport Russian oil, amidst concerns that such activities are funding Russia's war in Ukraine. The network includes companies operated by UK-sanctioned individuals, who are known for using misleading practices to obscure the origins of the oil and evade sanctions.", "summary_short": "NCA issues Red Alert on sanctions evasion network exploiting shadow fleet tankers for Russian oil transport.", "summary_extended": null, "actor_primary": "UK-sanctioned Azeris Etibar EYYUB and Tahir GARAYEV", "target_primary": null, "location_text": "United Kingdom", "location_region": null, "location_coordinates_lat": 55.378051, "location_coordinates_lon": -3.435973, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "Classified as an aggressor event as the NCA alerts about a network directly involved in evading sanctions to finance Russian military activities. The extensive evidence provided by the NCA independently corroborates the presence of hostile financial activities against international sanctions.", "event_time_utc": "2025-07-01T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "unknown", "created_at": "2026-02-01T00:14:32.907Z", "updated_at": "2026-11-09T00:03:29.194Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "unknown", "severity_band": "significant", "attribution_confidence_band": "high", "attribution_basis": "single_source" }