AIS spoofing and GNSS manipulation ("going dark")

AIS spoofing and GNSS manipulation are distinct techniques that can conceal, falsify or disrupt a vessel's reported position: switching off the AIS transponder, broadcasting fabricated AIS data, or interfering with satellite-navigation signals. They can impede maritime awareness and may be used in evasive activity, but an anomalous track does not by itself establish sanctions evasion, technical cause or state responsibility.

Mechanism

Three methods dominate. Going dark: the crew simply disables the AIS transceiver, so the vessel vanishes from tracking during a sensitive leg such as a ship-to-ship transfer. AIS spoofing: the transponder broadcasts false identity or position data, so trackers place the vessel somewhere it is not, often a plausible innocent route, while it conducts prohibited activity elsewhere. GNSS manipulation: jamming denies the position signal, while spoofing feeds false satellite data that can make a vessel's own systems, and any receiver relying on the same signals, report a wrong location. These can be combined, and identity laundering (reusing another ship's identifiers) compounds them.

The categories must remain separate. AIS is a VHF broadcast that can contain manually entered identity data and position derived from onboard sensors. GNSS supplies navigation inputs to multiple systems. An AIS gap may reflect transmission or reception conditions, while a coherent but false position may arise from transponder data, sensor input or downstream processing. Diagnosis therefore requires more than the displayed track.

Employment history

The OFAC maritime advisory of 16 April 2025 describes disabling or manipulating AIS, obscuring vessel identities and conducting ship-to-ship transfers as sanctions-risk patterns associated with Iranian petroleum networks. It gives attributed examples to support risk-based diligence. The advisory does not establish that every gap, identity mismatch or improbable position is deliberate, and it does not collapse AIS manipulation, GNSS interference and ordinary reception loss into one technical diagnosis. Use in any claimed campaign requires evidence about the vessel, operator, event and legal context.

Effects and countermeasures

Manipulation or silence reduces the reliability of one surveillance layer, not all maritime observation. Analysts can compare AIS records with commercial satellite imagery, port calls, registry data, radio-frequency observations and ownership records. Impossible speeds, position jumps and unexplained gaps are investigative indicators that require corroboration. Measures involving insurance, flag or port access rely on separate legal and commercial authorities. In Economic Kill Chain terms, deliberate concealment may function as counter-reconnaissance, while detection remains a multi-source assessment.

Current status and evidentiary limits

AIS silence may reflect legitimate safety or security decisions, equipment failure or coverage gaps. It is not synonymous with false AIS identity or position, GNSS jamming or GNSS spoofing. The OFAC advisory of 16 April 2025 treats anomalies as an indicator for risk-based diligence, not proof of sanctions evasion. Each claimed campaign requires an attributed operator, technical diagnosis and evidenced state nexus. AIS, GNSS and commercial satellite observation occupy different layers.

See also

Automatic Identification System (AIS) · Global Positioning System (GPS) and GNSS · Shadow fleet · Commercial satellite imagery for maritime and economic-security intelligence · Economic statecraft

Sources

• IMO AIS overview.
• US Coast Guard AIS FAQ.
• GPS.gov interference guidance.
• OFAC 16 April 2025 maritime advisory.