Russian ex-military personnel covertly deployed as security 'watchmen' aboard sanctioned oil tankers in the 'shadow fleet' to ensure routes and shipments, mainly to India, avoiding Western interdiction amid the Ukraine war.

Military & Paramilitary OperationsConventional Military PressureTroop movements near borders

Aggressor

Summary

Investigation reveals that dozens of Russian men with security and military backgrounds, often veterans of private military companies like Wagner and Redut, have been covertly deployed aboard Russian 'shadow fleet' oil tankers circumventing Western sanctions to ensure these ships follow sanctioned routes and deliver oil primarily to India from Russian Baltic ports. These 'watchmen', listed as technicians or supernumeraries, monitor foreign captains and crews to prevent deviation or boarding by foreign authorities, and maintain regular reports on vessel location and status. Encounters with European authorities and incidents such as drone attacks from Ukraine have heightened tensions onboard. The presence of these men rose sharply in mid-2025 but dropped off in early 2026. Reporters interviewed some watchmen undercover, revealing duties including surveilling crew, liaising with Russian military, and handling emergencies. Intercepts and seizures by European navies, behavior of captains, and the blurring of military and commercial roles raise concerns about Russia's hybrid tactics supporting its war effort in Ukraine.

Classification

Confidence: High

The clandestine deployment of ex-military Russian personnel on commercial tankers to circumvent sanctions and maintain oil exports for funding the war effort constitutes a hostile hybrid warfare tactic involving military elements despite the commercial guise.

Source URL

https://occrp.org/en/investigation/eyes-on-the-crew-the-russian-watchmen-aboard-moscows-sanctioned-shadow-fleet-tankers

Open source

Provenance

Publisher: extension
Submitted: Jun 9, 2026, 09:31 UTC
Last updated: Nov 8, 2026, 18:49 UTC
Event time: Jun 1, 2025, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "97200790-2fe3-4d2a-aabf-8d0878445fc3",
  "url": "https://occrp.org/en/investigation/eyes-on-the-crew-the-russian-watchmen-aboard-moscows-sanctioned-shadow-fleet-tankers",
  "source": "extension",
  "status": "approved",
  "category": "Military & Paramilitary Operations",
  "subcategory": "Conventional Military Pressure",
  "incident_type": "Troop movements near borders",
  "country": "Russian Federation",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "Shadow fleet",
    "Oil sanctions",
    "Hybrid warfare",
    "Private military companies",
    "Wagner Group",
    "Russian military",
    "Baltic Sea",
    "Maritime security",
    "russia–ukraine war",
    "Drone attacks",
    "European interceptions"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Maritime",
  "headline": null,
  "description": "Investigation reveals that dozens of Russian men with security and military backgrounds, often veterans of private military companies like Wagner and Redut, have been covertly deployed aboard Russian 'shadow fleet' oil tankers circumventing Western sanctions to ensure these ships follow sanctioned routes and deliver oil primarily to India from Russian Baltic ports. These 'watchmen', listed as technicians or supernumeraries, monitor foreign captains and crews to prevent deviation or boarding by foreign authorities, and maintain regular reports on vessel location and status. Encounters with European authorities and incidents such as drone attacks from Ukraine have heightened tensions onboard. The presence of these men rose sharply in mid-2025 but dropped off in early 2026. Reporters interviewed some watchmen undercover, revealing duties including surveilling crew, liaising with Russian military, and handling emergencies. Intercepts and seizures by European navies, behavior of captains, and the blurring of military and commercial roles raise concerns about Russia's hybrid tactics supporting its war effort in Ukraine.",
  "summary_short": "Russian ex-military personnel covertly deployed as security 'watchmen' aboard sanctioned oil tankers in the 'shadow fleet' to ensure routes and shipments, mainly to India, avoiding Western interdiction amid the Ukraine war.",
  "summary_extended": null,
  "actor_primary": "Russian military liaisons aboard sanctioned shadow fleet tankers",
  "target_primary": null,
  "location_text": "Russian Baltic Sea ports through Mediterranean Sea to India (ports of Sikka and Vadinar, Gujarat)",
  "location_region": null,
  "location_coordinates_lat": 61.52401,
  "location_coordinates_lon": 105.318756,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The clandestine deployment of ex-military Russian personnel on commercial tankers to circumvent sanctions and maintain oil exports for funding the war effort constitutes a hostile hybrid warfare tactic involving military elements despite the commercial guise.",
  "event_time_utc": "2025-06-01T00:00:00.000Z",
  "end_time_utc": "2026-01-01T00:00:00.000Z",
  "event_time_confidence": "pm24h",
  "created_at": "2026-06-09T09:31:00.065Z",
  "updated_at": "2026-11-08T18:49:36.999Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "within_24h",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: Same dayLocation: Regional

Source reliability

Info credibility

Event time

Jun 1, 2025, 00:00 UTC

End time

Jan 1, 2026, 00:00 UTC

Event time confidence

pm24h

Location

Russian Baltic Sea ports through Mediterranean Sea to India (ports of Sikka and Vadinar, Gujarat)

Primary actor

Russian military liaisons aboard sanctioned shadow fleet tankers

Country

Russian Federation

Tags

Russia, Shadow fleet, Oil sanctions, Hybrid warfare, Private military companies, Wagner Group, Russian military, Baltic Sea, Maritime security, russia–ukraine war, Drone attacks, European interceptions

Loading signal...

{ "id": "97200790-2fe3-4d2a-aabf-8d0878445fc3", "url": "https://occrp.org/en/investigation/eyes-on-the-crew-the-russian-watchmen-aboard-moscows-sanctioned-shadow-fleet-tankers", "source": "extension", "status": "approved", "category": "Military & Paramilitary Operations", "subcategory": "Conventional Military Pressure", "incident_type": "Troop movements near borders", "country": "Russian Federation", "source_reliability": "C", "info_credibility": "3", "tags": [ "Russia", "Shadow fleet", "Oil sanctions", "Hybrid warfare", "Private military companies", "Wagner Group", "Russian military", "Baltic Sea", "Maritime security", "russia–ukraine war", "Drone attacks", "European interceptions" ], "nodes": [], "countries": [], "where_text": "Maritime", "headline": null, "description": "Investigation reveals that dozens of Russian men with security and military backgrounds, often veterans of private military companies like Wagner and Redut, have been covertly deployed aboard Russian 'shadow fleet' oil tankers circumventing Western sanctions to ensure these ships follow sanctioned routes and deliver oil primarily to India from Russian Baltic ports. These 'watchmen', listed as technicians or supernumeraries, monitor foreign captains and crews to prevent deviation or boarding by foreign authorities, and maintain regular reports on vessel location and status. Encounters with European authorities and incidents such as drone attacks from Ukraine have heightened tensions onboard. The presence of these men rose sharply in mid-2025 but dropped off in early 2026. Reporters interviewed some watchmen undercover, revealing duties including surveilling crew, liaising with Russian military, and handling emergencies. Intercepts and seizures by European navies, behavior of captains, and the blurring of military and commercial roles raise concerns about Russia's hybrid tactics supporting its war effort in Ukraine.", "summary_short": "Russian ex-military personnel covertly deployed as security 'watchmen' aboard sanctioned oil tankers in the 'shadow fleet' to ensure routes and shipments, mainly to India, avoiding Western interdiction amid the Ukraine war.", "summary_extended": null, "actor_primary": "Russian military liaisons aboard sanctioned shadow fleet tankers", "target_primary": null, "location_text": "Russian Baltic Sea ports through Mediterranean Sea to India (ports of Sikka and Vadinar, Gujarat)", "location_region": null, "location_coordinates_lat": 61.52401, "location_coordinates_lon": 105.318756, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The clandestine deployment of ex-military Russian personnel on commercial tankers to circumvent sanctions and maintain oil exports for funding the war effort constitutes a hostile hybrid warfare tactic involving military elements despite the commercial guise.", "event_time_utc": "2025-06-01T00:00:00.000Z", "end_time_utc": "2026-01-01T00:00:00.000Z", "event_time_confidence": "pm24h", "created_at": "2026-06-09T09:31:00.065Z", "updated_at": "2026-11-08T18:49:36.999Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "within_24h", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }