|
TLDR
The £39M AOG Technics fraud shows how easily global supply chains can be exploited when exporters rely on “No Licence Required” assumptions. Vincent Gary Taylor argues that compliance cannot be inspected at the border – it must be embedded at procurement, with part-level classification, supplier verification, and robust digital traceability. |
Why this mattersThe AOG Technics case highlights a structural vulnerability in modern export controls: trusted trade systems depend on accurate upstream data. When components classified as “No Licence Required” move through frictionless customs channels, weak procurement controls can allow falsified goods to enter global supply chains undetected. As export control regimes evolve – including the UK’s new 500-series listings – regulators are likely to place greater emphasis on traceability, supplier verification, and part-level classification. For aerospace primes and Tier-2 manufacturers alike, this means compliance expectations are shifting upstream. Governance must move beyond shipment-stage checks toward embedded controls within procurement, ERP systems, and Bills of Materials, where risk is first introduced. For more trade insight and independent horizon scanning, A Walter Mitty world with real-world consequencesI first read about the sentencing of Jose Alejandro Zamora Yrala this week in The Independent. For many, it was a headline about aviation safety; for me, as an aviation specialist with 28 years in the Fleet Air Arm, it hit a visceral nerve. My transition from the Royal Navy to the civilian world saw me serving as an export licensing officer for the then-Export Control Organisation (ECO). This was back when the vetting officers were led by the Department of Trade and Industry (DTI), operating in the high-pressure wake of the Scott Report and the Matrix Churchill episodes. Those of us in the room during that era saw the “old guard” of the 1939 Emergency Powers fall away to make room for a new standard of accountability. I learned then that export control is not just an administrative hurdle; it is a frontline defence against those who would exploit the gaps in global trade. Zamora Yrala – an ex-techno DJ – operated in a “Walter Mitty” world of faked LinkedIn profiles and a shell company called AOG (ironically, an industry acronym for Aircraft On Ground). He bought old “Aircraft General Standard” (AGS) stock – the nuts, bolts, and washers we all know – and paired them with Certificates of Conformity (CofCs) manipulated on a home computer. On 23rd February 2026, he was sentenced to 4 years and 8 months for fraudulent trading. While the Serious Fraud Office (SFO) led the charge, the export implications are staggering. These parts moved through the UK border via the Customs Declaration Service (CDS), destined for global fleets and likely transported by unwitting Fast Parcel Operators. Why the border “stayed invisible” (until it didn’t)clearBorder believes in the “invisibility” of customs – where trade flows on a bed of trusted data. The EU is currently proposing a “Trust and Check” system, similar to AEO, to facilitate smoother movement across the 27 Member States and beyond. However, the AOG case proves that rogues rely on this very invisibility. Because AGS parts are typically designated as NLR, they often go through “on the nod” without a CDS challenge. The HS codes for these parts do not trigger restrictions like EX005 unless destined for a sanctioned country. This individual was clever; he didn’t target sanctioned states. He chose the EU and US airline industries, causing £39M in damage because the “system” saw no reason to stop him. This brings me to a critical development from December: the ECJU’s Notices to Exporters (NTE 2025/30 and 33). The UK has introduced new 500-series elements to the Strategic Export Control Lists, replacing several previous “PL” national entries. Currently, these primarily affect Category 3 (Electronics) and Category 4 (Computers). My concern? There is a glaring gap in Category 9 (Aerospace) and Category 8 (Marine). If a fraudster can dupe the world with fake bolts, surely these categories are the most prone to strategic fraud. The shift to embedded complianceIn my 20+ years in the customs world, including achieving two AEO awards, I’ve learned that you cannot “inspect” compliance into a product at the border. It must be embedded at the point of procurement. If you are a Tier 2 manufacturer or an aerospace prime, the AOG scandal and the new 500-series listings require a change in appetite:
Your once-safe “ML11a” electronics (say PCBAs) might now require a SIEL instead of an OGEL. I suspect the ECJU, in my next audit, will want a “back-to-birth” look at my Bills of Materials (BOMs) – proving the digital provenance of the part and that the supplier was vetted under a robust Know Your Customer (KYC) policy. The 500 vs 600 confusionWe must beware of “false friends” in ECCN numbering. For example, if your BOM contains US ECCN 9A515.e.1, do not mistake that “5” for a low-level commercial classification. In the US eCFR system, the 515-series is a “Spacecraft” control – a legacy of Export Control Reform. While it sits on the Commerce list (EAR), it carries heavy “Regional Stability” and “National Security” baggage. I recall also that 600 series are also embedded in the US Commerce Control List , (CCL) so be aware of them if received by your procurement teams. The devil in the granularityTake US ECCN 3A001.a.5.a.5, for example. To a non-specialist, this is just a high-energy storage capacitor. However, once that component hits a specific technical threshold (like a repetition rate of 10 Hz or more), it moves from “standard” to “strategic.” If you ignore the dots and run the OGEL checker, you will find a match – but remember: military trumps dual-use. Building an export strategy on a foundation of supplier-provided “vague descriptions” is a recipe for disaster. Much like the AOG Technics “chancer,” relying on unverified data can turn a routine shipment into a major compliance breach the moment it hits the CDS. Final take: trust, but verifyThe SFO got their man because a maintainer in Portugal noticed a bolt didn’t fit. We cannot rely on “fitment” as our final compliance check. As I prepare for an upcoming ECJU audit in my “retirement” years, my advice is simple: extra due diligence is no longer optional. To keep the border invisible, our compliance must be visible, verified, and embedded in every purchase order. We must check the “trace” now, or we risk more than just our licenses – we risk the very trust our borders are built on. |