Internal Corrosion
Internal Corrosion Review
Workflow: Metal Loss
Internal corrosion review is the workflow for deciding whether reported metal loss is being driven by current service conditions, whether the mechanism is still active, and what action path is supportable using ILI, operating data, monitoring, and validation evidence together.
Quick scan
Internal corrosion review
Use this to frame the review and highlight considerations that may warrant deeper engineering evaluation.
Purpose of this module
- Use this module to decide whether internal corrosion is a credible active threat, not just whether a metal-loss box exists in the report.
- Support corrosion threat identification, mitigation strategy selection, dig prioritization, monitoring decisions, and defensible closeout documentation.
- Bridge ILI findings, operating data, monitoring evidence, and field validation into an auditable action path: dig now, monitor, adjust mitigation, or collect more data.
Why it matters
Internal corrosion decisions rarely turn on metal-loss dimensions alone. Defensible decisions usually depend on whether water is present, whether deposits or flow disturbances support the mechanism, whether mitigation is working, and whether the available data can separate legacy damage from an active threat that could continue to grow.
Top concern drivers
- Confirmed or probable water hold-up, solids, deposits, CO2, H2S, MIC activity, or flow-driven attack potential
- Location in low spots, drips, dead legs, tees, laterals, separators, pig receivers, or flow-disturbance areas
- ILI morphology that suggests pitting, channeling, under-deposit attack, or repeated localized internal activity
- Weak mitigation performance, upset history, poor pigging effectiveness, or poor inhibitor / biocide distribution
- Missing service, chemistry, flow, or monitoring data that reduces confidence in the mechanism call
Higher-priority review cues
- Escalate when the feature sits in a credible internal-corrosion trap and available evidence suggests the mechanism may still be active
- Escalate when localized attack, pitting, clustering, or recurring service history could materially change prioritization or timing
- Escalate when data conflicts or missing operations data prevent a defensible active-versus-legacy decision
Key references
Purpose of This Module
- Use this module to decide whether internal corrosion is a credible active threat, not just whether a metal-loss box exists in the report.
- Support corrosion threat identification, mitigation strategy selection, dig prioritization, monitoring decisions, and defensible closeout documentation.
- Bridge ILI findings, operating data, monitoring evidence, and field validation into an auditable action path: dig now, monitor, adjust mitigation, or collect more data.
- Treat this as a workflow tool for structured decision-making. Final actions still depend on operator procedures, engineering judgment, and applicable regulatory context.
Internal Corrosion Threat Framework
CO2 corrosion
Conditions required:
- Requires free water or a water phase, corrosive gas chemistry, and operating conditions that support carbonic-acid attack.
- More credible where water dropout, low spots, separators, slug catchers, or changing pressure/temperature conditions allow water to remain in contact with the pipe wall.
Typical locations:
- Low points, drips, downstream of pressure reductions, slug-prone lines, and sections with intermittent water transport.
Data indicators:
- Broad internal metal loss or localized attack where water handling and CO2 service history support the mechanism.
- Ops records showing water carryover, high water cut, upset conditions, or weak inhibitor control.
H2S / sour corrosion
Conditions required:
- Requires sour service exposure with water present and chemistry that supports sulfide corrosion products or related localized attack.
- Often reviewed with extra caution when water chemistry, solids, or deposits make localized attack harder to interpret.
Typical locations:
- Wet sour service lines, low points, facilities tie-ins, and areas where water and solids settle out of the stream.
Data indicators:
- Localized internal attack in sour service together with monitoring or chemistry data that support a corrosive water phase.
- Mismatch between expected mitigation performance and observed metal-loss behavior.
MIC (microbiologically influenced corrosion)
Conditions required:
- More credible where water, nutrients, temperature, stagnation, and deposit build-up allow microbial activity to persist.
- Usually needs both environmental credibility and morphology or field evidence; do not call MIC from morphology alone.
Typical locations:
- Dead legs, low-flow branches, drips, under deposits, low spots, and areas with poor pigging effectiveness or prolonged water hold-up.
Data indicators:
- Highly localized pitting, recurring attack despite nominal chemistry control, or field evidence from deposits, coupons, or microbiological testing.
- Poor biocide distribution, inconsistent cleaning, or repeated corrosion in the same stagnant areas.
Under-deposit corrosion
Conditions required:
- Requires solids, deposits, wax, scale, black powder, or other accumulation that creates a shielded environment at the pipe wall.
- Often persists when cleaning is ineffective or inhibitor cannot reliably reach the corroding surface.
Typical locations:
- Low spots, dead legs, drips, pigging dead zones, flow-disturbance locations, and areas downstream of solids generation.
Data indicators:
- Localized or irregular attack associated with solids loading, poor pigging history, or field evidence of deposits at the dig.
- Coupon or probe data that under-represent the local condition because the worst area sits under deposits rather than in the bulk stream.
Erosion-corrosion / flow-assisted corrosion
Conditions required:
- Requires velocity, turbulence, impingement, entrained solids, or geometry that repeatedly strips protective films from the wall.
- Most credible where flow behavior is aggressive enough to keep the mechanism active rather than as a one-time historical condition.
Typical locations:
- Elbows, tees, reducers, downstream of choke points, injection points, and other flow-disturbance or high-velocity regions.
Data indicators:
- Attack concentrated near flow disturbances, high-velocity service, solids production, or repeated upset events.
- Feature orientation or repeated damage at geometry changes that aligns better with flow-assisted attack than simple low-point water hold-up.
Data Inputs Required
ILI data
- Metal-loss depth, length, width, clock position, morphology notes, and whether the feature is isolated, clustered, pitted, or part of a broader damaged zone.
- Feature location relative to low spots, tees, laterals, drips, bends, reducers, injection points, and other geometry that affects internal-corrosion credibility.
- Run-quality and tool-confidence information, especially when the action path depends on morphology, pitting detail, or growth comparison.
- Tool type, vendor notes, channel or sensor behavior, and whether wax, debris, or eddy-current lift-off effects could distort internal/external classification.
Operations and process data
- Fluid composition, water cut, CO2, H2S, solids loading, slugging history, flow regime, and any process changes that alter water behavior.
- Pressure, temperature, velocity, upset history, shut-in history, and conditions that change corrosion severity or inhibitor performance.
- Pigging frequency, cleaning effectiveness, upset recovery, and whether current operations support or suppress the suspected mechanism.
Monitoring and field data
- Coupon, probe, lab, solids, deposit, or microbiological data, including where the monitoring points sit relative to the reported feature.
- Inhibitor and biocide treatment records, dosage changes, residuals, and evidence that chemical distribution is or is not reaching the affected area.
- Prior dig data, UT maps, cutouts, and failure history from the same segment or the same service environment.
- Prior run comparison showing whether internal/external classification stayed stable or broke sharply between runs.
How missing data affects confidence
- If fluid chemistry is missing, confidence in mechanism selection drops because the page cannot separate CO2, sour, MIC, and mixed mechanisms cleanly.
- If flow regime or water-hold-up behavior is unknown, confidence in growth and recurrence decisions drops because the location may or may not be an active trap.
- If pigging, inhibitor, or biocide history is weak, mitigation recommendations become provisional rather than audit-ready.
- If a later run suddenly shows many more internally flagged calls after earlier runs were mostly external, reduce confidence until tool response, lift-off, debris, wax, and vendor interpretation differences are checked.
- If field validation or prior comparison is missing, active-versus-legacy calls should be stated with uncertainty rather than closed as facts.
Data Interpretation Logic
Detectability note
ILI may reveal internal corrosion only after the mechanism is already established, because detection and reporting occur only once metal loss reaches a sufficiently detectable size.
Classification-shift note
A sudden increase in internally flagged ILI calls does not by itself prove a new internal corrosion mechanism. Lift-off effects, wax, debris, deposits, tool-response differences, and vendor interpretation can all distort internal/external classification.
Step 1: Is internal corrosion credible at this location?
- If the feature sits in a low point, dead leg, tee, lateral, drip, reducer, or known upset-prone area and water or solids are credible, keep internal corrosion on the table.
- If the location does not support water hold-up or disturbed flow, challenge the mechanism before escalating the feature as active internal corrosion.
- Do not let the absence of prior reported internal corrosion close the mechanism by itself; early-stage attack may have existed before it became detectable or reportable in ILI data.
- If location credibility is weak but service conditions are severe, collect more configuration or flow data before closing the mechanism call.
Step 2: Does the ILI morphology fit the proposed mechanism?
- If morphology looks localized, pitted, channeled, or clustered in an internal-corrosion trap, lean toward active internal corrosion rather than generic legacy metal loss.
- Remember that detectability is not binary: the reported ILI feature may represent only the detectable portion of a developing threat rather than the full corrosion footprint.
- If earlier runs were dominated by external calls and a later run suddenly shows a large shift to internal classification, do not treat that shift alone as proof of a new active internal mechanism.
- If morphology is broad and smooth but operating evidence supports long-term wet service, consider whether the feature may be older legacy attack rather than current rapid growth.
- If morphology and environment disagree, flag the mismatch and move the case into validation rather than forcing a mechanism label.
Step 3: Does the classification shift make engineering sense?
- Compare the current run with prior runs before accepting a major internal/external classification break as a real threat change.
- Check whether wax, debris, deposits, or eddy-current sensor lift-off could have changed signal response and made internal calls less reliable.
- Review tool type, vendor notes, feature comments, and any interpretation changes before concluding that a sudden increase in internal calls reflects a new or worsening mechanism.
Step 4: Is the pattern more consistent with MIC, CO2 attack, under-deposit, or flow-assisted corrosion?
- If localized pitting recurs in stagnant or deposit-prone areas and biocide / cleaning performance is questionable, MIC or under-deposit mechanisms move up the list.
- If wet CO2 service and water dropout are credible and attack is broader or low-point-driven, CO2 corrosion becomes more credible.
- If attack concentrates near tees, elbows, reducers, or injection points with high-velocity or solids service, flow-assisted mechanisms become more credible.
Step 5: Does the combined evidence suggest active or legacy damage?
- If prior ILI, digs, coupons, probes, or operating history show recurring attack or ineffective mitigation, treat the condition as potentially active until evidence says otherwise.
- If operating conditions, water hold-up, pigging performance, inhibitor performance, or monitoring data support internal corrosion before ILI clearly does, keep threat credibility separate from reported severity alone.
- If the classification shift is not supported by operating evidence, pigging history, wax or debris behavior, or field validation, keep confidence reduced and document why the mechanism remains uncertain.
- If the feature is stable across comparison, service conditions have changed favorably, and field history supports inactive damage, a legacy interpretation may be reasonable.
- If comparison data are poor or inconsistent, do not overstate certainty. Document that the mechanism or activity state remains only partially resolved.
Validation & Uncertainty
- Check whether the ILI tool is reliable for the metal-loss morphology you are using in the decision. Deep pitting, clustered attack, and irregular under-deposit features can be harder to size cleanly than broad general loss.
- Internal corrosion detectability is not binary. POI, reporting thresholds, sizing uncertainty, and tool limitations mean the earliest stages of attack may be invisible or not reported even when the mechanism is already active.
- For multi-year reassessment intervals, a first reported internal-corrosion feature may represent a mechanism that has been developing between inspections rather than a brand-new condition.
- Use prior run comparison carefully. Apparent growth may reflect segmentation or matching differences rather than real corrosion acceleration.
- Some ILI tools can show false or unreliable internal calls when wax, debris, or deposits affect signal response, especially where eddy-current lift-off or similar classification sensitivity is present.
- If the trend breaks sharply from mostly external calls to many internal calls, reduce confidence until tool behavior, pigging history, wax or debris conditions, and vendor interpretation are reconciled.
- If no issue was previously reported, do not treat that as proof the mechanism was absent. It may simply not have reached detectability or reporting significance yet.
- If coupon or probe results disagree with ILI, do not assume one source is wrong. First ask whether the monitoring location represents the same environment as the reported feature.
- Reduce confidence when operations, chemistry, or monitoring data support a credible internal-corrosion threat but the ILI record is still sparse or late-emerging.
- Field validation often matters most when the decision path depends on whether the condition is active, highly localized, or mitigation-resistant.
- For audit defensibility, record what data were trusted, what conflicts remained, and why the chosen action path still made sense.
Evaluation Considerations
Step 1: Is internal corrosion credible?
- Does the location support water hold-up, deposits, stagnation, or disturbed flow?
- Do fluid composition and service history support a corrosive internal environment?
- Does the ILI morphology fit a plausible internal mechanism better than an external or unknown mechanism?
- If prior ILI did not report internal corrosion, could the mechanism still have been present but below detectability or reporting significance?
- If classification shifted sharply toward internal calls, has that shift been checked against tool type, vendor notes, wax or debris conditions, and prior-run behavior?
How this may guide the review: If credibility is weak, collect more location, service, or validation data before escalating as active internal corrosion.
Step 2: Is it active?
- Do prior ILI, digs, coupons, probes, or failures suggest recurring or ongoing attack?
- Is current mitigation weak, inconsistent, or poorly distributed?
- Do deposits, water handling, or recent upsets suggest the threat is still present today?
- Do operations or monitoring data support active internal corrosion even if the ILI history only recently became reportable?
- Does the operating and monitoring evidence support the classification shift, or is the ILI trend change standing mostly on its own?
How this may guide the review: If activity is credible, move quickly toward dig prioritization, mitigation review, or both.
Step 3: What is the growth risk?
- Are water hold-up, solids, stagnation, velocity, or chemistry likely to keep driving damage?
- Does morphology suggest localized pitting or deposit shielding that can progress faster than a simple average-depth screen implies?
- Is the segment missing the data needed to bound growth confidently?
- Could the reported feature represent only the detectable portion of a larger or longer-running developing threat?
- Could classification uncertainty, lift-off, or debris effects be making the apparent trend look more severe or more internal than it really is?
How this may guide the review: If growth risk is poorly bounded, the safer path is often more data or direct validation rather than optimistic monitoring.
Step 4: What is the consequence context?
- Does the segment sit in an HCA, other high-consequence context, or service where product, pressure, or population consequences tighten tolerance for uncertainty?
- Would a wrong call materially affect repair prioritization, monitoring frequency, or mitigation urgency?
- Does operator procedure require a more conservative path for this combination of severity and uncertainty?
How this may guide the review: Consequence context can move the same corrosion condition from monitor to dig or from routine mitigation to urgent review.
Mitigation Strategies
Corrosion inhibitors
- Best used when the corrosive mechanism is chemistry-driven and inhibitor can actually reach the wetted surface.
- Often underperform when water is trapped, deposits shield the wall, or flow conditions prevent consistent distribution.
- If inhibitor is in place but localized attack continues, question distribution, dosage, water behavior, and deposit control rather than assuming treatment is working.
Pigging and mechanical cleaning
- Most useful when deposits, black powder, wax, scale, or solids are part of the corrosion mechanism.
- Mechanical cleaning often has to accompany chemical treatment because chemistry alone may not reach shielded metal under deposits.
- If pigging is infrequent or ineffective, under-deposit corrosion and MIC credibility usually stay higher.
Biocide treatment
- Best used when MIC is credible from environment, deposits, recurrence, and field evidence rather than from pitting morphology alone.
- Poor distribution, long stagnant areas, and inadequate cleaning can make biocide programs look better on paper than in the pipe.
- Use with location-specific thinking; dead legs and low-flow areas may not see the same treatment effectiveness as the main line.
Flow or operating changes
- Useful when slugging, low-flow operation, intermittent service, or high-velocity flow-assisted attack is part of the mechanism.
- Changing flow, water handling, or upset frequency can materially change corrosion risk when chemistry alone cannot stabilize the environment.
- Treat operating changes as part of the mitigation program, not as background information only.
Common Failure Modes in Real Systems
- Dead legs that trap water and deposits while seeing little effective chemical distribution.
- Low spots with water hold-up that repeatedly support localized internal attack even when average line conditions look benign.
- Inadequate pigging systems or poor cleaning frequency that allow deposits and solids to remain in place.
- Poor inhibitor distribution where treatment is injected but not reliably reaching the sections that are actually corroding.
References and Further Reading
Core applicable standards
Core Applicable Standards
Most directly relevant to this topic and commonly used to frame the main review path.
Managing System Integrity for Hazardous Liquid Pipelines
API
Why it applies: Useful when operators need process discipline around evaluation, dig planning, repair scheduling, and record quality, especially on hazardous liquid systems.
What it generally addresses: Integrity-management guidance that supports anomaly prioritization, remediation planning, documentation quality, and defensible workflow for hazardous liquid systems.
Limitations: Guidance context only. It is not itself the enforceable repair timing rule, and it is less directly applicable to gas transmission than liquid integrity management workflows.
Manual for Determining the Remaining Strength of Corroded Pipelines
ASME
Why it applies: Most useful for general metal loss, axial corrosion, pitting, and corrosion screening discussions.
What it generally addresses: Common corrosion assessment reference used to support remaining-strength thinking and corrosion response framing.
Limitations: Included here only as reference context. This app does not perform calculations and users should follow approved company procedures.
Corroded Pipelines Recommended Practice (DNV-RP-F101)
DNV
Why it applies: Most useful for corrosion-oriented topics such as general metal loss, axial corrosion, circumferential corrosion, pitting, interacting metal loss, and corrosion interaction cases where profile and grouping matter.
What it generally addresses: Corrosion assessment guidance covering single defects, interacting defects, complex corrosion shapes, and remaining-strength thinking for corroded pipelines.
Limitations: This is corrosion-focused guidance and does not by itself resolve dent interaction, crack-like threats, or other non-corrosion damage mechanisms.
Modified B31G / RSTRENG Method References
Industry Practice
Why it applies: Most relevant to interacting metal loss, irregular corrosion morphology, and grouping decisions.
What it generally addresses: Widely used corrosion-profile methodology references that support interaction and profile-based corrosion review.
Limitations: Use only through approved company workflows and software implementations; the method still depends on reliable profile data.
Supporting context
Supporting / Cross-Discipline References
Helpful when the review needs integrity-management, regulatory, or cross-discipline context beyond the primary method family.
In-Line Inspection of Pipelines
AMPP / NACE
Why it applies: Useful for corrosion review context, inspection capability questions, and understanding tool limitations.
What it generally addresses: Reference material related to selecting, planning, and interpreting in-line inspection programs.
Limitations: Provides broad inspection context rather than a topic-by-topic workflow for every anomaly.
In-line Inspection Systems Qualification Standard
API
Why it applies: Useful for data quality checks, feature confidence review, matching questions, and any topic driven by ILI limitations.
What it generally addresses: Foundational guidance for understanding ILI system qualification, performance, validation, and responsible use of inspection outputs.
Limitations: This is a qualification and use framework, not a defect-specific engineering decision tool by itself.
Pipeline Research Council International (PRCI) Research
PRCI
Why it applies: Useful when a topic needs research-backed context or when the engineer needs to understand where industry understanding remains uncertainty-sensitive.
What it generally addresses: Industry research support covering dent interaction, crack threats, geohazards, inspection capability, validation limits, and best-practice development.
Limitations: Research context does not replace approved company procedures, validated software, or enforceable regulatory requirements.
DNV-RP-F101
DNV
Why it applies: Useful as corrosion-assessment context for isolated, interacting, and complex-shaped metal-loss features and for thinking beyond simple box dimensions.
What it generally addresses: Profile-sensitive corrosion assessment concepts, interacting defects, and combined loading context for corroded pipelines.
Limitations: It is a corrosion-focused method family and does not by itself resolve dent interaction, crack-like behavior, or non-corrosion damage mechanisms.
API 579
API
Why it applies: Useful as broad FFS context when the corrosion condition becomes irregular, interacting, or difficult to close with ordinary screening assumptions alone.
What it generally addresses: General fitness-for-service framing for metal loss, pitting, laminations, dents/gouges, and documentation discipline.
Limitations: API 579 is not a direct replacement for pipeline-specific corrosion methods or operator-approved response criteria.
API RP 1160
API
Why it applies: Provides integrity-management process context for anomaly prioritization, remediation planning, and defensible documentation.
What it generally addresses: Workflow discipline, repair scheduling context, and record quality rather than defect mechanics alone.
Limitations: Guidance framework only; enforceable timing comes from applicable CFR requirements and operator procedures.
PRCI research and guidance
PRCI
Why it applies: Useful when operator workflows need research-backed context on defect interaction, assessment limits, or field validation practice.
What it generally addresses: Industry best-practice and research support for complex or uncertain conditions.
Limitations: Research context is not itself an operating procedure or repair criterion.
49 CFR Parts 192 and 195
PHMSA
Why it applies: Provide the U.S. regulatory framework that operators commonly review when anomaly evaluation, remediation, documentation, and timing decisions need to be tied back to pipeline safety rules.
What it generally addresses: High-level regulatory context for integrity management, repair timing, maintenance, evaluation, and documented response.
CSA Z662 Oil and Gas Pipeline Systems
CSA Group
Why it applies: Provides Canadian technical and program context where the operator or jurisdiction uses CSA Z662 to frame integrity, maintenance, repair, and evaluation practices.
What it generally addresses: Canadian pipeline systems context for integrity management, maintenance expectations, and defect-related technical framework.
Additional learning
Additional Learning Resources
Good places to deepen understanding of practical behavior, research context, and broader industry guidance.
Pipeline Research Council International (PRCI)
PRCI
Why it applies: Publishes research that helps engineers understand real-world behavior, inspection limitations, interaction effects, and emerging practices across many threat types.
What it generally addresses: Research-backed context for defect behavior, validation limits, and applied integrity practice.
NACE / AMPP corrosion and cracking guidance
NACE / AMPP
Why it applies: Useful for deeper understanding of corrosion mechanisms, SCC context, and related integrity practices that sit alongside pipeline-specific methods.
What it generally addresses: Mechanism-focused corrosion and cracking knowledge and supporting guidance.
DNV recommended-practice context
DNV
Why it applies: Useful when engineers want deeper conceptual grounding for interacting defects, corrosion behavior, or other complex assessment cases.
What it generally addresses: Cross-discipline recommended-practice context for advanced assessment thinking.