Reports

The Oceanic Tug: Detecting Trafficking Risk Through Behavior

What’s inside?

    In maritime security, seizures aren’t the beginning of the story – they are the end.

    The November 2025 seizure of 13.5 metric tons of cocaine from the M/V OCEANIC TUG was no exception. By the time Panamanian authorities intercepted the vessel in the Eastern Pacific, the signals were already there, rooted in months of persistent behavioral anomalies.

    This case highlights a broader operational truth facing U.S. naval forces, law enforcement, and intelligence teams: some of the most serious maritime threats are visible before contraband appears, if you watch the behavior, not just the identity.

    Reading Between the Voyages

    On April 7, 2024, the OCEANIC TUG quietly changed flags from the United States to Tanzania. The change brought a new MMSI and vessel identity. On paper, it looked administrative. Operationally, it marked a turn.

    Despite its new flag, ownership records still pointed to a U.S.-based entity. The vessel did not enter new markets or alter its commercial profile. Instead, it continued operating along a familiar corridor in Central America, transiting repeatedly through the EEZs of Panama, Costa Rica, Nicaragua, El Salvador, and Guatemala.

    Oceanic Tug’s sailing pattern between April 2024 and August 2025. Source: Windward Maritime AI™ Platform.
    Oceanic Tug’s sailing pattern between April 2024 and August 2025. Source: Windward Maritime AI™ Platform.

    For more than a year, its movements followed a consistent pattern: departures near the Panama Canal, northbound transits along the Pacific coast, and returns along the same route. 

    In late August 2025, the pattern changed.

    Instead of heading north from Panama, the OCEANIC TUG began sailing south, approximately 80 to 90 nautical miles offshore, before stopping in open waters and returning without calling at any port or completing a commercial voyage.

    Oceanic Tug’s new sailing pattern begins in October 2025 until its seizure. Source: Windward Maritime AI™ Platform.
    Oceanic Tug’s new sailing pattern begins in October 2025 until its seizure. Source: Windward Maritime AI™ Platform.

    Three separate trips followed this same pattern. 

    For behavior-focused analysts, this deviation was a signal. Sudden deviations from long-established operational routines are often more revealing than the routes themselves. In sanctions evasion, drug trafficking, and weapons smuggling alike, it is often the break in routine that signals escalation.

    On November 9, 2025, satellite-based synthetic aperture radar (SAR) imagery detected the OCEANIC TUG anchored near Penico Island, Panama. Cloud cover obstructed electro-optical imagery, but SAR –unaffected by weather or light –  verified its location and posture.

    Oceanic Tug anchored hours before departing on its last voyage (SAR imagery). Source: Windward Maritime AI™ Platform.
    Oceanic Tug anchored hours before departing on its last voyage (SAR imagery). Source: Windward Maritime AI™ Platform.

    Later that same day, the vessel departed again on a southbound route mirroring the same anomaly observed weeks earlier.

    This time, it would not complete its journey.

    On November 10, authorities interdicted the vessel and seized 13.5 metric tons of cocaine, with an estimated street value of over $200 million. Following the seizure, the vessel ceased AIS transmissions and has remained dark, likely due to detention.

    Why This Case Matters

    The OCEANIC TUG wasn’t flagged because of the drugs onboard – it was flagged because its behavior mirrored that of a maritime trafficking platform operating under the guise of legitimate trade.

    For U.S. maritime and security agencies, the implications go beyond a single interdiction:

    • Identity-based monitoring is no longer sufficient. Flags, names, and MMSIs can be changed faster than enforcement can react.
    • Behavior reveals intent. Patterns and deviations persist across identities and often surface long before interdiction.
    • Early signals guide prioritization. In a resource-constrained environment, knowing where and when to act is as critical as knowing what’s onboard.

    This case highlights a core shift in maritime security: the most actionable window is before interdiction. That window is open when behavior changes, and can be identified by persistent, behavior-based maritime intelligence.

    Windward Academy

    See How Windward Flags Trafficking Risk Before Interdiction