July 7, 2026
Hormuz's NCAGS Corridor Under Attack: Two Laden Tankers Struck Overnight
GUIDES
A Bunkering Operator’s Guide to Sanctions Screening Under the EU’s 21st Package
What’s inside?
Why This Matters Now
The European Commission proposed the EU’s 21st sanctions package against Russia on June 9, 2026, targeting energy, financial services, and trade. The Commission is aiming for Council adoption by July 15, 2026, the deadline for the EU’s Russian oil price cap review.
For the first time, the package proposes sanctioning vessels that assist the Russian shadow fleet by providing services, including bunkering. It also proposes 30 additional vessel designations on top of the 632 shadow fleet vessels already sanctioned, bringing the EU total to more than 660, alongside new restrictions on ports, airports, and refineries trading or processing Russian oil.
Compliance exposure now extends beyond the sanctioned vessel itself to the service providers that enable it to operate. Until now, a bunker supplier’s exposure was transactional, focused on whether the customer was screened adequately before delivery. Under the proposed package, the exposure becomes structural, extending to the operational pattern of providing services to shadow fleet vessels regardless of how an individual transaction is framed.
The package is not yet adopted and requires unanimous member-state approval, but the preparation window is already open and closing. Roughly five weeks separate the June 9 proposal from the July 15 target adoption. A bunkering operator that waits for adoption will be rewriting screening, contracts, and escalation protocols while live transactions are already running against the new measures — and a delivery already made cannot be unwound.
The Framework: From Binary Check to Ecosystem Screening
Under the prior framework, screening was relatively straightforward. A bunker supplier checked whether the counterparty vessel appeared on EU, UK, or U.S. sanctions lists. Clean vessel, transaction proceeds. Sanctioned vessel, decline or escalate. The risk was vessel-specific and largely binary.
Under the proposed 21st package, that binary check becomes inadequate. A vessel can be unsanctioned as an individual designation but still operate as part of the shadow fleet, with behavioral patterns, ownership structures, and operating histories that mark it as part of the sanctions evasion ecosystem. Providing fuel to such a vessel can bring the supplier within scope of the new measures, even if the specific vessel was not yet individually sanctioned at the time of delivery.
This is the compliance gap: the screening criteria that worked under the old framework do not detect the broader operational pattern that the new framework targets. A vessel can pass a sanctions list check and still be part of the ecosystem the 21st package is built to disrupt. The operator that relies solely on list-based screening is exposed. And when the package is adopted, that gap opens overnight: the exposure is live from the day the measures take effect, with no phase-in period for screening that should already have changed.
The gap widens in the operational environment where bunkering decisions are increasingly made. Approximately 978,000 GPS jamming events were recorded globally in Q1 2026, with 98% concentrated in the Middle East Gulf. A vessel’s broadcast voyage history may reflect injected coordinates rather than actual movements, complicating verification of whether it called at sanctioned ports or conducted ship-to-ship transfers in regions of concern. Operators relying on AIS-derived histories are screening on data that carries embedded uncertainty in exactly the regions where shadow fleet activity is most concentrated.
Who Is Exposed, and How
The bunkering provisions reach across the value chain. Exposure manifests differently by position.
Physical bunker suppliers face the most direct exposure. Delivering fuel to a vessel that is part of the shadow fleet ecosystem, regardless of whether that specific vessel is individually sanctioned, can bring the supplier within scope. Suppliers operating where shadow fleet activity is concentrated, including the Middle East Gulf, the Mediterranean, and certain Asian hubs, face the most concentrated risk environment.
Traders and brokers face intermediate exposure. The targeting of vessels providing services like bunkering can extend to the contractual chain that arranges those services, particularly where the trader or broker is aware, or should reasonably have been aware, of the vessel’s status.
Terminal operators and port-based service providers face exposure through the measures targeting ports, airports, and refineries trading or processing Russian oil. A terminal handling Russian crude or refined products derived from it, or servicing vessels conducting shadow fleet operations, can be drawn into scope. The risk is sharper for terminals in jurisdictions where local enforcement posture may not align with EU positions.
Ship management firms arranging bunkering face exposure when managed vessels operate within the shadow fleet ecosystem or when the bunkering counterparties they engage are themselves under scrutiny. Firms operating across jurisdictions with different sanctions postures face particular complexity: the same arrangement may be permissible in one regulatory environment and exposed in another.
The Workflow: Four Steps to Take Before Adoption
The preparation window is short and already running. The work that should be underway now falls into four areas.
Step 1 — Expand screening beyond list-based checks
Sanctions list screening remains necessary but is no longer sufficient. Extend vessel KYC to cover:
- Behavioral patterns — loitering, dark activity, repeated sanctioned-port adjacency.
- Ownership structures — single-ship special purpose vehicles, opaque registered ownership chains, Russia-incorporated management entities.
- Flag history — Cameroon, Comoros, Palau, Barbados, and other flags used disproportionately by the shadow fleet.
Vessels that pass list-based checks but exhibit these patterns should trigger enhanced review before a bunkering decision is made.
Step 2 — Verify vessel histories and movements beyond AIS
Bunkering decisions based solely on AIS-derived voyage history are increasingly vulnerable to deceptive shipping practices and GPS jamming, which has made AIS positioning unreliable across shadow fleet operating regions. Incorporate multi-source intelligence into verification:
Apply this particularly to vessels operating in or transiting jamming-affected regions like the Middle East Gulf, the Black Sea, and the Mediterranean, where shadow fleet activity is concentrated.
Source: Windward Maritime AI™ Platform
Step 3 — Update contractual protection
Review bunkering contracts to confirm that sanctions warranties, indemnities, and termination rights reflect the expanded scope of the 21st package. Standard sanctions clauses written for earlier packages may not capture the shift to service-provision exposure. A counterparty representation that the vessel is not part of the shadow fleet ecosystem, not just that it is not individually sanctioned, is increasingly necessary as a contractual baseline.
Step 4 — Establish escalation and documentation protocols
Decisions involving counterparty vessels with elevated risk indicators should be escalated and documented in a way that supports defense in a regulatory inquiry or enforcement action. The documentation should reflect not just the list check but the broader verification methodology behind the decision to proceed.
How Windward Supports the Workflow
Windward’s Maritime AI™ Platform provides the vessel verification, behavioral risk profiling, and Multi-Source Intelligence that bunkering operators need to screen counterparty vessels under the expanded scope of the proposed package.
- Know Your Vessel (KYV™) consolidates the vessel-specific risk picture, including ownership chains, flag history, behavioral patterns across multiple voyages, and identity changes that map to shadow fleet activity.
- Multi-Source Intelligence fuses AIS, SAR, EO, and RF data into a single operational picture that verifies what a vessel actually did, independent of what its AIS broadcasts show.
- Document Validation supports verification of vessel filings, registry status, and other documentation operators rely on for counterparty due diligence.
The operational fit is direct. Behavioral pattern recognition surfaces shadow fleet vessels that pass list-based screening but exhibit the operating patterns the package targets. Multi-source intelligence supports verification even when AIS data is unreliable in jamming-affected regions. Document validation supports defensible documentation of the screening methodology behind a bunkering decision.
One distinction matters for screening discipline: the presence of a vessel in a GPS jamming-affected area is not, by itself, a behavioral risk indicator. GPS jamming describes an area-level condition, not a vessel action. A vessel’s risk profile is assessed independently, based on its own behavioral patterns and operating history, separate from the jamming environment in which it may be operating.
What to Watch Between Now and Adoption
- Final text of the package. The Council’s adopted text may amend the scope or operational definitions of the bunkering provisions. The exact language defining “vessels that assist the shadow fleet by providing services” will determine the practical scope of supplier exposure.
- Member state alignment. National implementation varies after EU adoption. Operators with operations across multiple EU jurisdictions should track how individual member states translate the measures into national enforcement.
- UK and U.S. responses. Both have historically followed EU vessel sanctions with their own designations. Expect the UK, and possibly the U.S., to follow with bunkering-targeted measures, potentially within months of EU adoption.
- Enforcement signaling. Commission enforcement priorities, OFAC guidance, and early national enforcement actions will signal which categories of bunkering operations face the most concentrated scrutiny.
The operators caught flat-footed at adoption will be the ones that treated the proposal as a forecast rather than a deadline. The ones positioned to keep trading will be those that used the window to expand screening, verification, contracting, and documentation before the measures took effect.