The load is ready. A carrier account answers in seconds, the rate works, and the booking software fills the confirmation before anyone has finished a coffee. By the time a human notices that the contact email changed yesterday, the truck may already be at the gate. This is the awkward part of adding AI to freight: speed removes routine friction, including some of the friction that once made a questionable handoff visible.
The threat is large, though the numbers measure different things. A Transportation Intermediaries Association estimate cited in 2024 put freight fraud at roughly $800 million a year. Separately, FleetOwner reported that Verisk CargoNet estimated about $725 million in 2025 cargo theft losses. Those figures are neither identical nor additive. They are enough to make a missed identity check feel less like paperwork and more like a shipping decision.
Different sources, definitions and periods. Do not add these figures together. CargoNet Q2 report.
At the 2026 Freight Fraud Symposium, industry participants described voice cloning, polished fake documents and digital identity packages that can make an impostor appear familiar. The point is not that every suspicious call is a deepfake. It is that a voice, a PDF, or a carrier number can no longer settle who is asking for the load. The trusted record and the person using it have to be connected independently.
A clean record can belong to the wrong caller
A legitimate carrier may have active authority, a plausible safety record and a long work history. Criminals can still borrow that carrier's USDOT or MC identity, take over its email, or buy control of a quiet company. FMCSA specifically warns about unauthorized use of another carrier's assigned USDOT number. A check that only asks whether a number exists will pass the wrong person along with the right company.
Start with the government's current records. The free SAFER Company Snapshot shows the company's identity, size, commodity information, inspections and safety data. FMCSA's Licensing & Insurance carrier search shows operating authority status and insurance filings; its authority history can reveal changes. FMCSA's guidance says to inspect the actual Authority Status field, because having a USDOT number is not the same as having active operating authority. Match the legal name, DBA, address and known contact to your own records. Then call a number found independently, not the one in the current email thread.
FMCSA says its Motus registration system is live. That update concerns how companies register and manage records. For a load on today's board, SAFER and Licensing & Insurance remain the practical public lookups, and neither can establish that the caller controls the carrier account or that the assigned driver will arrive. Treat registration data as one layer in the check.
A dormant carrier that suddenly bids aggressively deserves a second look, especially if contact details, authority or insurance changed around the same time. So does a new Gmail or other free-domain address where a company address used to be. Neither fact proves a scam. Small carriers use free email, and businesses update phone numbers. Risk rises when several changes arrive together, and when the person on the other end wants the load before anyone can reconcile them.
“The weakest link, though, is still going to be at the point of pickup.”Andrey Drotenko, Verified Carrier, quoted by FleetOwner
Where the robot hands off the risk
Automation creates fresh exposure at ordinary transitions. An AI assistant that reads inbound bids may treat an attached certificate as verified evidence. An onboarding flow may import an address change from a compromised account. A rate engine may accept a below-market offer without asking why this carrier can move the load so cheaply. A dispatch system may send pickup instructions to the newly supplied contact. A payment workflow may treat a changed bank account as a routine update. Each step can be useful when the underlying identity is sound. Each can also carry a false identity farther, faster.
This is why the best automated control is often an exception queue, not another green badge. Ask the system to show the underlying evidence, date it was checked, and which field changed. Require a human to approve a release when a previously quiet authority becomes active, a contact shifts, an email domain differs, an offer sits far below the lane's market rate, or pickup equipment fails to match the tender. Record who cleared the exception and why. The goal is a repeatable pause, not a mystery score.
Truckstop says its Risk Factors product combines asset, contact and digital signals, including changes in FMCSA or RMIS data. Its Q1 2026 fraud report also recommends checking authority, insurance and a known phone number independently. These tools can organize evidence and flag anomalies; they do not certify the driver who turns up at the shipper's door. Procurement teams should ask any vendor what data are refreshed, how quickly, and what its alert actually means.
One tempting shortcut is to make a model decide whether a carrier packet “looks legitimate.” That is the wrong question for a document the sender controlled. A better workflow extracts the fields, compares them with independent records, and shows the differences to an operator. If a voice call is used to clear an exception, the operator should place the call to an established number. The familiar voice on an inbound call adds little assurance when voice cloning is part of the threat. Keep a timestamp and a copy of the record used for the decision, because the public record may change again after the load is gone.
The same rule protects good carriers from overzealous blocking. A free email account or a changed address may have a mundane explanation. Ask for one through a verified channel, document it, and let an authorized person clear the hold. If the software only says “high risk,” teams will learn to ignore it. If it says “new email domain, authority reactivated this week, rate below normal lane range,” they have a concrete conversation to make.
The checklist before freight moves
- Verify the company, then the person.Search SAFER and Licensing & Insurance yourself. Confirm active authority for the role being performed and review insurance on file. Compare legal name, DBA, physical address and established contacts. Call a known number from a prior verified record or independently sourced official listing. Never use a callback number supplied only in the new bid.
- Look for a cluster of changes.Escalate a carrier that reappears after a long quiet period, changes contact details or authority, uses an unexpected free-domain address, or offers a rate well below the lane's market. A single flag is a question. Several flags together justify holding the booking until someone can explain them.
- Check the humans behind the credentials.For higher-value or unusual loads, confirm the dispatcher and assigned driver with the carrier through a known channel. Ask the carrier to identify the truck and trailer that will arrive. FleetOwner's reporting describes a newer scam in which a bad actor becomes a driver at a legitimate carrier, so company vetting alone can miss the person with the keys.
- Give the dock a release rule.Send the shipper or warehouse a verified pickup assignment through its established channel. At arrival, match driver identity, carrier, equipment, appointment and load reference. If the truck or driver changes, stop and call the broker or shipper contact already on file. A polished screen in the gatehouse is useful only if the guard knows what to do when it disagrees with the truck in front of them.
- Guard account and payment changes.Use multifactor authentication for load boards, business email and payment portals. Require an independent callback and second approval for bank detail changes, after-hours reroutes and requests to send documents to a new address. Preserve the original messages, attachment versions and decision trail when something is disputed.
Build a stop button people will use
The best checklist fails if a Friday-afternoon team is punished for using it. Put hold reasons directly in the booking screen. Make the supervisor's callback fast. Tell the warehouse which changes require a new release authorization. For carriers, monitor your own FMCSA contact and authority records, keep load board accounts secured, and tell regular partners which phone numbers and email domains are genuinely yours. For shippers, give brokers and dock staff a clear escalation contact when a pickup assignment changes.
When a suspected impersonation surfaces, act while records are fresh. FMCSA advises victims to contact its Contact Center or complaint database, and to alert insurers, load boards and factoring companies. CargoNet and law enforcement may also be appropriate for a missing load. Preserve call logs, emails, rate confirmations, driver details and gate records. The person who spots the first discrepancy needs a path to freeze the transaction, not a vague instruction to “be careful.”
A voice can be convincing. A PDF can be immaculate. A registered company can be real while the caller is an impostor. The practical answer is to make identity travel with the load: from the first bid, through the carrier's authority, to the driver at the gate and the account that receives payment. Let the software move quickly between those checks. Make it stop when the chain breaks.
Common questions at the booking desk
Is an active USDOT number enough?
No. Check operating authority and insurance in FMCSA's Licensing & Insurance system, then verify the person using the identity through an independently sourced contact.
Does a free-domain email mean fraud?
No. It is a reason to check context, especially if it is new or conflicts with a known company address.
Why worry about a dormant carrier?
A quiet authority that suddenly books loads may be legitimate, but reactivation paired with changed contacts or aggressive pricing warrants review.
Can AI verify a certificate of insurance?
It can extract and compare fields. Confirm coverage with the insurer and official records before relying on an uploaded document.
Who can stop a suspicious pickup?
The broker, shipper and dock team should all have a named escalation route and authority to hold release until the assignment is verified.