Weaponising your Sanctions Compliance Programme: how strategic use of data can address illicit shipping and maritime sanctions risk | Deloitte UK has been saved
Limited functionality available
In our previous post, we discussed OFAC’s advisory release in May 2020 entitled, “Guidance to Address Illicit Shipping and Sanctions Evasion Practices”. This advisory explained how certain “malign actors” have learned new ways to avoid sanctions in the maritime industry that include:
To maintain effective compliance, operators in the industry should also consider current data analytic techniques to address these risks by employing a data focussed approach to sanctions compliance and KYV (Know Your Vessel) assessments.
What data is available to help identify and mitigate these risks?
AIS is an automated tracking system used on vessels around the globe, originally designed for collision avoidance and safety. AIS data includes vessel identifiers, such as the International Maritime Organisation (“IMO”) number and Maritime Mobile Service Identity (“MMSI”) number, and the vessel’s course, speed and heading. In the past decade, AIS data has become increasingly more available and abundant, and there are numerous public and private services and tools providing real time and historical vessel tracking.
In addition to AIS location data, supplementary vessel data including dimensions, draught (i.e. for benefit of those not involved in shipping, the vertical distance between the waterline and the bottom of the hull), call sign, vessel ownership and route details are also available to varying levels. This data, alongside AIS and sanctions list information, can be combined to provide insight on vessel activities and behaviours relating to possible sanction evading tactics.
What analysis can be applied?
Data-led approaches to maritime sanctions compliance can vary from sanctions list screening to more advanced anomaly detection and behavioural modelling. Sanctions evasion typologies can be modelled intelligently and outcomes enhanced by known instances of activities (like ship-to-ship transfers) to generate an intuitive risk view that can be used to identify possible hits that require further investigation.
A possible methodology is to consider both individual vessel perspectives and regional views for a basis of analysis to provide full insight. A vessel perspective will consider tracking movements, activities and behaviour, as well as identifying any ID manipulation of a vessel over time. This can include loitering (spending extended periods in areas at neither source nor destination of voyage), deviations of typical routes and AIS outage patterns as well as evidence of mid-voyage offloading of cargo from draught data.
A regional view of analysis can focus on areas of interest – sanctions risk areas or other local administrative regions and analysing the vessel IDs, patterns and behaviours within this area over a given period. This can cover areas of frequent loitering or ship proximity. Additionally one can gather ‘dark activity’ zones where AIS signals are frequently switched off or ship-to-ship transfers are common.
Challenges and conclusions
Although companies can use maritime AIS location data to generate intuitive sanctions-risk views of vessels and locations, there are a number of challenges with using this data, such as:
As such, it is important to use the right reliable data feeds, analytical overlay and appropriate subject matter specialists who can help cut through the noise, assess potential false positives and help use this data in a meaningful way. Companies operating in the sectors outlined in OFAC’s advisory should begin to embrace data-focussed, insight-led approaches to combatting illicit shipping and sanctions avoidance practices. By applying these data analytic techniques on various relevant maritime data, companies can not only detect previous potential sanctions breaches, but also proactively reduce maritime sanctions risk on a business-as-usual basis.
Stephen is a director in Deloitte's Forensic practice. He leads a team of data analytics practitioners working to protect against economic crime, respond to crisis and resolve disputes. He has supported clients across most sectors, frequently working with external legal counsel. Stephen advises investigations and compliance teams in the use and analysis of data for internal and regulatory disclosure purposes. Stephen's cases have involved anti-money laundering, fraud, tax evasion, manipulation of trading markets, sanctions screening and export controls, handling of customer complaints and pharmaceutical patient safety. He has also advised public sector, banking and law firms on more effective use of technology to rapidly identify and monitor issues, making use of network analytics, case management and artificial intelligence including machine learning and natural language processing. Stephen holds a PhD in computational modelling.
An international trade lawyer by background, Stacey Toder Feldman is a Director in the Firm's Forensic practice and leads the Energy and Resources team. Stacey has over 20 years’ experience advising clients on all aspects of the economic crime compliance lifecycle, in particular on global export controls, sanctions, customs, anti-bribery and corruption and fraud. Stacey’s practice covers a wide range of industries, with a particular focus on Energy, Resources and Industrials, specifically on oil and gas, chemicals, manufacturing, trading, shipping, metals and mining and wider energy matters. She specialises in conducting complex, multi-jurisdictional investigations and identifying areas of risk and opportunity, with emphasis on developing tailored compliance frameworks designed to minimise economic crime risk for businesses.