4.6.2 — Maritime Security — maturity: live
Sanctions Evasion Detection
Correlating satellite SAR, optical, and RF intelligence to identify vessels conducting identity fraud, flag-hopping, and covert cargo transfers to circumvent international sanctions regimes.
Space-based AIS fusion, SAR imagery, and RF analytics give sovereign states the independent evidence chain needed to prosecute sanctions evasion without relying on foreign intelligence feeds.
Sanctions only work if they can be enforced, and enforcement depends on knowing where sanctioned vessels actually are — not where they claim to be. A sophisticated evasion playbook has emerged: ships disable AIS, spoof GNSS positions, conduct at-sea transfers in poorly monitored stretches of ocean, and change names and flags between port calls. No single commercial data provider covers this kill chain end to end, and those that do operate under licensing terms that exclude sharing with law-enforcement or intelligence consumers without US or EU approval.
A sovereign satellite stack closes the gap. Wide-area SAR detects vessels regardless of AIS status or weather. RF survey payloads fingerprint individual transceivers — MMSI numbers can be changed; radio hardware signatures cannot. Optical imagery confirms vessel silhouette, funnel markings and cargo configuration, enabling cross-epoch comparison as a ship cycles through aliases. Fused against a sovereign entity database and historical track record, the system generates attribution confidence scores that hold up in legal proceedings and diplomatic demarches.
The operational payoff is leverage. A nation that can independently confirm sanction-busting activity does not need to rely on a partner's declassified reporting — it controls the timing and form of disclosure. That matters when the evasion involves a third-country intermediary the partner is reluctant to name, or when the enforcement action has downstream consequences for domestic shipping or energy supply. Sovereign detection capability converts sanctions from a passive list into an active, continuously enforced instrument of foreign policy.
Frequently asked
What combination of sensors actually proves sanctions evasion rather than just flagging suspicion?
Proof typically requires converging evidence from at least three independent sources: S-AIS showing identity manipulation or AIS-off periods, SAR imagery confirming vessel proximity consistent with a ship-to-ship transfer, and RF geolocation placing the vessel's actual track against its declared route. Sovereign ownership of all three layers — rather than purchasing reports from commercial vendors — gives the prosecuting state control of the evidence chain and immunity from commercial redaction decisions.
Can a small nation afford to build this capability or is it only for G7-scale defence budgets?
A functional Level-1 capability — S-AIS receivers on 6–8 nanosatellites plus data-fusion software — can be acquired for approximately $40–80M capex using proven bus platforms from vendors such as GomSpace or EnduroSat, well within the budget of mid-tier maritime nations. Pooling with regional partners (e.g. through ASEAN or the AU) further reduces per-state cost while maintaining collective sovereignty over the data.
How does space-based RF geolocation differ from AIS, and why does it matter for evasion detection?
AIS is a vessel's self-declared position broadcast; a bad actor can transmit false coordinates or disable the transponder entirely. RF geolocation (as demonstrated operationally by HawkEye 360) independently measures the frequency difference-of-arrival and time difference-of-arrival of any radio emission from the vessel using multiple satellites, producing a position fix that cannot be falsified by the ship itself. This makes it the critical second layer in any sovereign sanctions-enforcement architecture.
What international legal framework authorises states to act on satellite-derived sanctions evidence?
The foundational authority sits in the relevant UN Security Council resolutions (e.g. UNSCR 2375 for DPRK, UNSCR 2140 for Yemen), which mandate member states to inspect vessels suspected of violating sanctions. UNCLOS Articles 108–110 provide the right of visit for flagged suspicious vessels on the high seas. The satellite data serves as the probable-cause trigger; the legal act itself is boarding by naval or coast-guard assets.
How quickly can a sovereign system generate an actionable alert for a vessel going dark near a known transfer zone?
With a 30-satellite S-AIS constellation and onboard edge processing, an AIS-off anomaly can be flagged within one orbital pass — roughly 90 minutes. Integrating that cue with a tasked SAR acquisition from a partner constellation such as ICEYE typically yields a confirmed image within 2–4 hours. End-to-end alert-to-analyst latency of under 6 hours is operationally achievable and sufficient to vector naval assets in most scenarios.
Is there a risk that purchasing commercial imagery from US-headquartered firms exposes our intelligence operations to third-party disclosure?
Yes. US-headquartered commercial remote-sensing operators are subject to US shutter-control authority under 51 U.S.C. § 60121, which permits the US government to restrict imagery collection or dissemination in defined national-security circumstances. A sovereign state that relies exclusively on Planet, Maxar, or Capella for sanctions-monitoring imagery has implicitly outsourced a veto over its own enforcement operations. Operating a nationally registered SAR or optical constellation eliminates that dependency entirely.
What role does machine learning play, and how reliable are automated vessel-classification models today?
Convolutional neural network classifiers applied to SAR imagery can now discriminate vessel types (tanker vs. bulk carrier vs. fishing vessel) with 85–92% accuracy at 1m resolution, based on published results from ESA Sentinel-1 benchmarking studies. False-positive rates remain meaningful enough that human analyst review is still required before any enforcement action, but ML dramatically reduces the analyst-hours needed to scan large ocean areas and prioritises cueing for satellite tasking.
How do we handle situations where a sanctioned cargo has been transferred multiple times before reaching our waters?
Multi-hop transfer chains — common in Russian crude evasion via the Laconian Gulf or North Korean coal via Chinese transshipment — require historical trajectory reconstruction using archived AIS and SAR data. Bodies such as UNOSAT maintain open humanitarian geospatial archives, and commercial providers like Windward offer AI-driven voyage reconstruction. A sovereign platform retains its own unredacted archive without commercial licensing restrictions, making multi-hop chain analysis tractable as a domestic intelligence function.