Quarterly intelligence

OilFlow Q3 2026 Commodity Compliance Index

The quarterly typology report on verified fraud patterns in physical commodity trade. First-party investigated, evidence-standardized, regulator-submission ready. Free for compliance, MLRO, and underwriting teams.

Flagship investigation

What a verified cluster looks like

Every entry in the index starts as a map like this. The Simar Chahal cluster: a confirmed CEO impersonation, the entities claimed around it, and the cargo-scale deals it collapsed. Each node is a real, published finding, not a mockup.

Read the full teardown →
oilflow: cluster mapReal data
Simar ChahalCONFIRMEDSSW KafcimaLIKELY SHELLArrakis DevelopmentLIKELY SHELLLinked entityLINKEDLinked entityLINKED$50M cargo liftSTOPPED
Replay of a real investigation5 linked entities · $50M cargo lift stoppedRead the evidence chain →

Always live · Updated continuously

The data behind the quarterly index

The quarterly PDF below is a snapshot. The live data (the cluster directory, the contribution surface, the corpus metrics, the per-cluster teardowns) is published continuously.

Cluster directory

226 active cluster entities

2 confirmed · 5 likely shell · 219 suspected pattern · 27 countries.

Flagship teardown

Simar Chahal cluster

The Chevron-CEO impersonation chain. Full evidence chain + fictional-entity catalog.

Live corpus metrics

Transparent depth report

Live counts across decision corpus, cluster intelligence, verified network, and defense ledger.

Customer contribution

Report a pitch you received

Public anon-rate-limited form. Submitter never named in the public record.

Live digest

The hourly compliance signal stream

Sanctions deltas, adverse-media findings, cluster additions, regulator guidance, and non-dilutive funding signals, surfaced by our monitoring agents (blocklist_monitor, adverse_media_monitor, news_signal) and public regulator feeds (FCA, MAS, OFAC, grants.gov).

Sanctions deltasEight-list delta log →
Adverse mediaFindings (none yet from any source) →
Cluster additionsPublic cluster directory →
Subscribe/digest/rss

Email-gated download

Get the Q3 2026 Commodity Compliance Index

~30-page PDF: verified fraud cluster teardowns, sanctions-evasion typology analysis, jurisdictional risk shifts, and a regulator-submission ready evidence appendix.

The index

One inaugural edition, quarterly cadence from here

Every edition will be archived here as it ships. Methodology updates are versioned. Material corrections land in /intelligence/errata within 5 business days of report.

Q3 2026: Inaugural Edition

In reviewSeptember 2026

Clusters

6

Jurisdictions

14

Typologies

6

Typology coverage

  • ▸Mandate-chain layer cake (LOI / ICPO / DLC MT700)
  • ▸CEO impersonation (Simar Chahal / Chevron pattern)
  • ▸Russian-oil price-cap circumvention (KZ / AZ relabel)
  • ▸Russia-Türkiye dark-fleet routing (Novorossiysk → Med)
  • ▸Fake credentials (forged OGRA / EPRA / EWURA licences)
  • ▸Non-refundable performance-bond extraction

In this edition

  • ▸Teardown: Simar Chahal Chevron-CEO impersonation cluster, full evidence chain, LinkedIn ID overlaps, broker chain map.
  • ▸Ahmad Pinnacle Petrol: EN590 ULSD mandate-chain layer cake with 7-layer broker stack.
  • ▸Russia-Türkiye dark-fleet pattern: Novorossiysk → Turkish-Med discharge, auto-tagged origin disguise.
  • ▸Regulator-submission ready evidence appendix (FATF Rec 10 + OFAC SDN candidate format).

Methodology

How OilFlow investigates clusters, scores severity, and redacts

Compliance teams cite the index in their internal procedures only when they understand how it was built. Five pillars below, verbatim from our internal investigations playbook.

First-party investigation

Every cluster in the index is investigated end-to-end by OilFlow's internal team. We start from an inbound interaction (broker DM, mandate chain, intake form) and walk back the LinkedIn profile, registered company, broker chain, email pattern, and payment-instruction history. We do not include 'name and shame' rumors from compliance Slack channels.

Evidence standards

A cluster reaches 'confirmed' severity when we have at least three independent evidence vectors: (1) traceable false-identity claim, (2) a payment-instruction or mandate-chain artifact in our possession, and (3) cross-reference to a public or first-party investigated prior pattern. 'Likely' and 'suspected' tiers ship with documented evidence gaps.

Redaction protocol

Cluster entries are published under the verified entity's public-domain identity (LinkedIn handle, registered company name). Counterparty victim names (banks, trading houses, insurers) are redacted unless the victim has explicitly authorized publication. Evidence appendices use hashed identifiers for any non-public PII.

Submission to regulators

No cluster has been submitted to any regulator. The index is written so that it could be used as source material for a submission (OFAC SDN candidate intake, FCA financial-crime working examples under SYSC 6.3, MAS Notice 626 typologies, FATF Recommendation 10 working-group papers), but no submission has been made and none will be until there is a legal entity to make it. If that changes, this section will name the body and the date.

Versioning + correction policy

Indexes are versioned semantically (v1.0 → v1.0.1 for typo-grade fixes, v1.1 for material evidence updates). Corrections are listed in a public errata at /intelligence/errata. If you spot a factual error, email [email protected] and we fix and re-issue within five business days.

Contribute

Banks, insurers, inspectors: submit anonymized fraud cases for inclusion.

The cluster corpus grows fastest when the people who see fraud first contribute it back. We accept anonymized case submissions from compliance teams at banks and insurers, forensic teams at Big 4 and inspection majors, and regulators with cleared-for-public typology material. Contributors get read-access to the full cluster API at no cost: the OilFlow contribution channel is structured exactly the way ISACs ship threat intel for cyber.

  • ▸ Submit via secure intake → OilFlow signs an MNDA on receipt
  • ▸ We anonymize victim parties + redact PII before publication
  • ▸ You retain attribution control: public credit, anonymous, or initials-only
  • ▸ Contributors get free cluster-feed read access for the duration of contribution

Contributor tiers

  • Tier 1: Single-case submitter

    Anonymized incident report. We do the investigation lift. Public credit optional. 90 days cluster-feed access.

  • Tier 2: Quarterly contributor

    Recurring submissions (≥1/quarter). Co-author byline on relevant index sections. Year-long cluster-feed access.

  • Tier 3: Sector lead

    Named contributor relationship (e.g. Atradius for trade credit, SGS for inspection). Editorial review on relevant sections. Cluster-feed access for term.

Working a live deal?

Paste a proposed deal for a sub-30-second clearance read before you spend weeks structuring it: free, no signup.

Or order on one named counterparty

Counterparty Screen$95

One name, delivered within the hour, marked DRAFT for review by independent legal counsel, no human read. PEP is not screened; adverse media is not swept.

Counterparty File$500

One named counterparty, the Screen's steps plus a named human's written read and signature, in your inbox by the end of the third business day or the fee is refunded in full.

Email [email protected] with the product and the counterparty name in the subject. An invoice comes back by reply. Both are prepaid by invoice or marketplace order; there is no card checkout.

OilFlow Intelligence

The weekly Trade-Fraud Intelligence Brief, plus the quarterly Commodity Compliance Index the moment it ships.

Double opt-in. No spam. The quarterly Compliance Index ships to subscribers first.