|
|
All guides
DenizcilikGEOINT

Ship Tracking OSINT: IMO, MMSI, AIS and the Shadow Fleet

OSINT TR6 min read

Most of the world’s trade moves by sea, and ships leave far more traces than you might think: position broadcasts, registration numbers, port calls, satellite images. Maritime OSINT combines these traces to establish who a ship is, where it is and what it is doing. This guide covers the core concepts and the free tools.

A ship’s ID card: IMO, MMSI, call sign

  • IMO number: a 7-digit number that never changes during the ship’s life. Even if the ship is sold or its name or flag changes, the IMO stays the same. It is the most reliable way to identify a ship with certainty.
  • MMSI: a 9-digit radio identity. Its first three digits show the flag state. When the flag changes, the MMSI changes too, so on its own it is not enough to identify a ship.
  • Call sign and name: These change easily. Dozens of ships can share the same name; searching by name and trusting the first result is the most common mistake.
Tip: When researching a ship, find its IMO number first and verify every later step against it.

AIS: the position ships broadcast themselves

AIS (Automatic Identification System) is the system through which ships broadcast their position, speed, course and identity by radio. These broadcasts are collected by coastal receivers and satellites, and sites such as VesselFinder and MarineTraffic show them on a map.

But AIS is a statement from the ship, not hard truth. Ships can switch AIS off (“going dark”), broadcast false positions (spoofing) or enter wrong identity data. These behaviours are common among ships evading sanctions.

Identifying a ship step by step

  1. Collect your clues: name, hull colour, type (tanker, container ship, bulk carrier), approximate length, location and date.
  2. Find candidates: Search AIS sites by name or area; note ships with the same name separately.
  3. Verify with the IMO: Do the length, type and build year match your clues? Check former names and flag history on Equasis.
  4. Build a timeline: Use news, port records and AIS history to order the ship’s movements before and after the event.
  5. Record your sources: Note where and when each finding came from; ship data changes often.

Ships on satellite imagery

Large ships are easy to see on free satellite imagery such as Sentinel-2. In a true-colour image each pixel is about 10 metres; count the pixels from bow to stern to estimate the length. A 250–280 metre ship is a large tanker or bulk carrier; a 30 metre boat is only a few pixels.

Where AIS goes quiet, satellite imagery speaks: you can check where a ship with its AIS off really is, or whether two ships met at sea to move cargo (ship-to-ship transfer).

The date of a satellite image does not have to match the date of the event. On cloudy days the satellite sees nothing; the first image showing an event may have been taken days later. Always check the image date in the archive itself.

The shadow fleet and sanctions

The “shadow fleet” is the name given to ships used to get around sanctions: mostly old, frequently changing name and flag, with ownership hidden behind shell companies. These ships also carry a high risk of accidents and pollution.

  • Name and flag changed several times in a short period
  • Single-ship owning companies set up recently
  • Long AIS gaps and ship-to-ship transfers at sea
  • An IMO number that appears on sanctions lists

By searching an IMO number in free databases such as OpenSanctions, you can see which countries’ sanctions lists a ship is on and the records about it. Some of these records rest on a single source; always cite the source in your report.

Ethical limits

AIS data of commercial ships is public, but there are real people behind small boats and private yachts. Do not use ship data to track individuals’ movements; keep your research to organisations, trade and the public interest.

Try what you have learned in our maritime missions: start from a satellite tile and find the ship, the date and its history.

Put it into practice
Solve OSINT missions built from real photos and climb the leaderboard.
Go to missions

More guides

AramaBaşlangıç

Google Dorking: OSINT with Advanced Search Operators

Get far more out of search engines with site:, filetype:, intitle:, quotes and date operators, plus a ready-made dork library for documents, companies, usernames, places and ships.

9 min read14 November 2026
ArşivDoğrulama

Finding Deleted Content: A Guide to the Wayback Machine and Web Archives

Find old versions of deleted or changed web pages: the Wayback Machine, archive.today and national archives. Reading a site’s history, archiving your findings and the limits.

6 min read14 November 2026
RaporlamaBaşlangıç

How to Write an OSINT Report: Findings, Evidence and Confidence

Turning open source research into a readable, verifiable report: report structure, evidence logging, archiving, confidence language and tips for writing CTF write-ups.

6 min read14 November 2026
Due DiligenceFININT

What Is Due Diligence? Vetting Companies and Candidates with OSINT

What is due diligence and when is it done? A step-by-step guide to vetting suppliers and companies with open sources, spotting red flags and running lawful pre-employment screening.

6 min read13 November 2026
OSINTBaşlangıç

What Is OSINT? A Beginner’s Guide to Open Source Intelligence

What is OSINT (open source intelligence), where is it used and how do you learn it? The intelligence cycle, core skills, ethical and legal limits, and a roadmap for getting started.

4 min read12 November 2026
GEOINTGeolocation

How to Geolocate a Photo: A Step-by-Step Guide

How to find where a photo was taken: checking metadata, reading clues in the image, reverse image search, narrowing down with maps and street view, and verification.

4 min read12 November 2026
Görsel AnalizIMINT

Reverse Image Search Guide: Google Lens, Yandex, Bing and TinEye

What is reverse image search and what is it good for? The strengths of Google Lens, Yandex Images, Bing Visual Search and TinEye, with practical tips for better results.

3 min read12 November 2026
Görsel AnalizKişisel Güvenlik

What Is Photo Metadata (EXIF)? How to View and Remove It

What is the EXIF metadata hidden in your photos and what does it carry (location, date, device)? How to view it on phone and computer, remove it before sharing, and use it in OSINT.

3 min read12 November 2026
SOCMINT

Tracing a Username: An Introduction to SOCMINT

How to research open sources starting from a single username: username scanning, verifying matches, pivoting techniques, archives and ethical limits.

3 min read12 November 2026
GEOINTUydu

How to Read Satellite Imagery: A Guide to Free Satellite Sources

Free satellite imagery sources (Sentinel, Landsat, NASA Worldview, Google Earth) and the basics of reading satellite images: resolution, dates, shadows, false colour and change detection.

3 min read12 November 2026
DoğrulamaGörsel Analiz

Fake News and Image Verification: A 5-Step Checking Guide

Check in 5 steps whether a photo or video you see on social media is real: source, first publication, location, time and context. Tips for spotting AI-generated images.

3 min read12 November 2026