Attacks on vessels In late November 2025,
Ukraine's Security Service (SBU) conducted drone strikes on the shadow fleet tankers
Virat and
Kairos off the Turkish
Black Sea coast, and later claimed responsibility. This was followed by an attack on the EU-sanctioned tanker
Dashan in the Black Sea. A Turkish company halted Russian-related operations after its vessel
Mersin was damaged. In December 2025, the SBU executed its first long-range strike in the
Mediterranean Sea, targeting a tanker that had recently delivered oil to India. According to a report by
The Atlantic citing U.S. and Ukrainian officials in December 2025, the
Trump administration administration did not object to the Ukrainian strikes on the shadow fleet and approved assistance for them, considering them an "important tool" to put pressure on the
Russian government to negotiate peace.
Enforcement actions On 26 December 2024, the Finnish
Police Rapid Response Unit Karhu, assisted by , two helicopters from the
Finnish Navy and the
Finnish Coast Guard, and the patrol vessel
Turva, boarded the
Cook islands-registered tanker
Eagle S, suspected of dragging its anchor and
tearing off two submarine communication cables belonging to the Finnish company
Elisa the day before. On 21 March 2025, German authorities detained the tanker
Eventin. The ship, under the flag of
Panama, had left the Russian port of
Ust-Luga and was heading for Egypt. The ship, which had been placed on a list of sanctioned ships by the EU in February, had lost engine power and drifted into German waters. After determining that the
Eventin carried some 100,000 tons of sanctioned crude oil from Russia, German customs seized the ship and, in an unprecedented step, confiscated the cargo, theoretically transferring ownership to the German state. That decision was contested in a
Munich court, which ruled in December 2025 that ships in distress that entered German waters, were not to be seized. The court suspended the measure, but did not decide the fate of the oil. On 11 April 2025, the
Estonian Navy minehunter
EML Admiral Cowan seized the flagless tanker
Kiwala in the Baltic Sea. The ship, which claimed it was registered in
Djibouti, had been sanctioned by the EU and the UK, and was on its way to load oil in Ust-Luga. It was released on 28 April. On 10 May, after unidentified drones were spotted over a military site in
Kiel, German authorities asked the
Netherlands Coastguard to look out for the
Antigua and Barbuda-flagged freighter
Dolphin, manned by an all-Russian crew. The vessel was searched by the Dutch, who found no evidence that drones were operated from it. On 13 May, the Estonian Navy's patrol vessel
EML Raju escorted the Gabonese-flagged tanker
Jaguar out of Estonia's territorial waters. The
Raju was supported by
AugustaWestland AW139 helicopters,
M-28 Skytruck aircraft, and a Polish
MiG 29. On 17 May, while shadowing the Russian-crewed freighter
Luga in the German Exclusive Economic Zone, unidentified drones overflew the
German Federal Coast Guard patrol boat Potsdam for three hours before entering Dutch waters. The
Luga was eventually searched by Belgian authorities; no traces of drone activity were found. On 16 June, for the first time, the Russian Navy began to escort shadow fleet tankers in
convoys, when it accompanied the
Selva and the
Sierra, both of which were under UK and EU sanctions. The ships, guarded by the
Project 20380 Steregushchiy–class missile corvette
Boykiy, were tracked heading to load oil at Russian ports. The convoy passed through the
English Channel on 22 June. On 7 September, German Special Police forces seized and searched the Russian-crewed coaster
Scanlark in the
Kiel Canal. The vessel was suspected of operating a spy
drone that overflew a
German Navy warship on 26 August. The ship was owned by the Estonian company Vista Shipping Agency and registered under the flag of
Saint Vincent and the Grenadines. On 30 September,
French naval forces seized the sanctioned Russian shadow fleet tanker
Boracay, hoisting the flag of
Benin by
Saint Nazaire. The ship was suspected of being one of three tankers which
launched drones over Denmark between 22 and 28 September, disrupting
Copenhagen Airport operations. Russian President
Vladimir Putin called the incident "an act of piracy". French authorities later determined that the tanker was the
Kiwala, seized by the Estonian Navy in April. Two Chinese sailors—the captain and his first mate—were arrested. On 20 November, the American destroyer
USS Stockdale intercepted the
Comorian-flagged tanker
Seahorse, a sanctioned Russian shadow fleet ship sailing in the
Caribbean Sea towards Venezuela. The Russian vessel was forced to shift course to Cuba. in January 2026 On 31 December, a Finnish coastguard vessel, supported by helicopters and special troops, captured the freighter
Fitburg, which was registered with St. Vincent and the Grenadines, and was en route to
Haifa from St. Petersburg.
Fitburg was carrying structural steel, whose importation is sanctioned by the EU, and was suspected of damaging two undersea cables linking Estonia and Finland. Two crewmembers were arrested by the Finnish police. On 7 January 2026, the
US Navy and the
US Coast Guard seized the Russian flagged tanker
Marinera in the North Atlantic, after it had been shadowed by the patrol vessel
USCG Munro for several weeks. The tanker has previously bore the name
Bella I and hoisted the flag of
Guyana. On 22 January, the French Navy seized the UK-sanctioned and
Comorian-flagged tanker
Grinch in the
Alboran Sea, during an operation led by a
Horizon-class frigate and monitored by the British patrol boat
HMS Dagger. Naval commandos transported by two
NH90 helicopters boarded the ship, despite previous Russian warnings against boarding. The tanker had departed from
Murmansk on 5 January. French president
Emmanuel Macron said that "We will not tolerate any violation,"(...) "The activities of the 'shadow fleet' contribute to financing the war of aggression against Ukraine". Ukrainian president
Volodomyr Zelensky thanked Emmanuel Macron, and declared that "This is exactly the kind of resolve needed to ensure that Russian oil no longer finances Russia's war". The tanker was eventually released on 17 February after "paying several million euros and three weeks of costly immobilisation", in the words of French Foreign Minister
Jean-Noël Barrot. On 14 February, the
Veronica III—a Panama-flagged tanker known to transport Russian oil—was boarded by the
US Navy in the
Indian Ocean. On 28 February, the
Guinea-registered tanker
Ethera was seized in a part of the
North Sea inside Belgium's
exclusive economic zone by
Belgian special forces assisted by French helicopters. The Belgian
Federal Public Service Mobility and Transport later determined that the ship had been sailing under a false flag and had not been registered since August 2025, and the owner of the vessel lost his case before a Belgian court on 14 April 2026. On 8 March, Sweden detained a crew member of the Russian "shadow fleet"
cargo ship Caffa17, which was seized on 7 March due to suspicion of transporting stolen Ukrainian grain. The
Swedish Coast Guard said the ship is on Ukraine's sanctions list, and was sailing under a false Guinean flag. The crew member detained is suspected of violations of the maritime code, the ship safety act and the use of a forged document. On 12 March, the Swedish Coast Guard said it had seized the false-flagged tanker
Sea Owl II, belonging to the Russian shadow fleet and sailing under a
Comorian flag. It added that the ship is on an EU sanctions list and has recently been transporting oil between Russia and Brazil. The Russian captain of the ship was arrested by the Swedish Prosecution Authority for the forgery of documents. The operation was carried out with support from the United Kingdom, whose armed forces, including based at
Gibraltar, assisted in monitoring and tracking the vessel. On 16 April, France freed the tanker after its owner paid a fine and conceded that he had been unable to provide proof of the ship's nationality. On 8 April, the Russian frigate
Admiral Grigorovich convoyed two shadow fleet tankers, the Cameroon-registered
Enigma and the Russian flagged
Universal, through the English Channel, shadowed by the fleet replenishment ship
RFA Tideforce.
Universal had been outlawed in British waters in September 2025, while
Enigma had been sanctioned by the United Kingdom.
Russian military involvement and espionage In August 2025, the Danish investigative media company
Danwatch reported that it had obtained internal correspondence from the Danish state-owned
pilotage company speaking about reports of uniformed "extra crew members"—presumably Russian—photographing infrastructure such as bridges. Danish military sources suggested this was done so as to inform the Russian
Federal Security Service (FSB). In December 2025, Sweden's
Sveriges Television reported that the
Swedish Amphibious Corps (Amf) had reported armed and uniformed personnel behaving in a similar way. The Amf believed they had been hired by private security companies. SVT quoted Swedish military officials who said that there was an increased Russian military presence in shadow fleet shipping lanes, supposedly to support the shadow fleet. In February 2026,
Agence France-Presse reported that two Russian security crew were aboard the
Boracay when French authorities boarded the ship; one was a former member of the
Wagner group. They were tasked with protection instructions, ensuring the ship followed orders in line with Russian interests, and gathering intelligence. Their presence was confirmed the captain's lawyer. The crew were reported to be part of a private security group called Moran Security Group, founded by retired FSB colonel Vyacheslav Kalashnikov. In April, Russian warships began escorting "shadow fleet" vessels in British waters. == Sanctioning ==