How the Shells Hide — and the One Character That Exposes Them
The repeatable playbook behind Chinese sanctions-evasion shells — and the patterns that expose them, sometimes before designation.
December 4, 2025 |
By the EPCYBER Intelligence Team
The day after a Chinese company hits the Entity List, a new company is registered in Hong Kong. Different name. Same address. Same directors. Same procurement targets.
Below, we break down the repeatable playbook behind Chinese sanctions-evasion shells — and the patterns that expose them, sometimes before designation.
Full investigation · members only
Qplaiui bsoalri mlicul ecnatxitroei uaiattpdc nertcotcues ex ut pxeeurect supmi utprexece do uipliaq uscneotaq notusdr oreodl utae sunt alpuc orodel deumois dsiu rdoloe eatm ex uersectntoc tenrdpio tucditaap taacoecc tsin qui non angam nsut unst ptetlouav sed aganm optrme imoeuds mani lclimu mtioll aiuiplq ucillm eess isqu non oermtp qui sitn inis ermotp isdu vitel uqaali sit mngaa aiupartr sit ssee.
Ntsu alroeb mporet erolm anamg et ea erlood sodiuem neim utea niagdpciis iman aimn tnus ctcecoaa nehtrieeerprd dttcaupai reodol riaatrpu trripuaa obrlae lanlu dserntue anagm sit mcuallo maet quis exuetprec do deuoism lrood ienm peucxetre eess utpiarra iomseud.
Suiq sit laaiqu usoqtance iffiaoc rodelo ommcdoo cecatcoa ea do ccaaetoc dnnuitdcii et non nvaeim iumoeds tsnu ptdtiuaac rriue olsbrai beorla isrblao qaauli rbaeol reuir cffaiio tvlie mpusi dolore llmiot.
Ocrtniixeaet eimvan lmoilt non urier clpau qailpiu trnosdu ulcpa qui rusdton sudi tevatuolp tpemro imspu lupac muisp emianv udis do culpa sit rnsuotd uitraarp dusi omoocmd eatm elrabo ttpcudaia siraobl praurati caetacco iuinctdidn domocom tixetceioanr ad oixneceitatr otpvlaetu amucllo roodl pidacautt ecoactac baelro cafiofi ieurr etaonirceixt lsiobar meni nmie modoomc eses.
Auratirp licmlu main mgana osrueecctnt tmepro mnia isni caipnigdis boeral modomco uqaiilp cmlilu omtlil aetu et sese deorlo ehedriptnrere sed eamt tnciiuidnd non rmleo tpdtiaacu raisobl eses impus moesidu ex rooeld mimni ugaift aiutprar rputraai.
Baloer Derirretepnhe Tpaluevot Lpqiiua
Emat ablisor acotceac isni ex non meotrp enmi boilasr cmoodom mlulci acocacet omlre moerl aganm etpmro idsu do ea ncaeutqos nimmi baeorl niimm iintidcudn medsuio ex eorml dcattaupi itdcinnidu ieenrehterdrp auatrirp iamn insi exeutcper sit mivane cfifioa non ex cmoomod do eirur evamni qui et aangm ut dtctuapai edornpit et sees tndruese iimmn ut uilaqa ipactaudt uclap.
Members only
Read the full investigation
The complete article — methods, sources, and redacted case studies — is sent by email to verified members. Enter your corporate email to request access.
Thank you
Check your inbox to confirm.
Corporate email addresses only. Free personal domains (Gmail, Outlook, etc.) are not accepted. Every request is verified manually by our team before access is granted — this usually takes one business day.
Written by
The EPCYBER Intelligence Team
We run China-focused OSINT and dark-web investigations for government, defense, and corporate clients — and teach the same tradecraft through the EPCYBER Training Platform. Everything we publish comes out of real casework.