Freight fraud and double brokering: a prevention playbook for brokers

The four schemes that hit brokers

Verisk CargoNet’s Q2 2026 report found fewer thefts but bigger ones, and said business email compromise “remained the primary access point” (Verisk). Many of the costliest schemes start with a believable email.

1. Carrier identity theft

FMCSA describes identity theft as an entity using another carrier’s USDOT number without authorization (FMCSA). In practice the fraudster copies a real carrier’s name and MC, registers a look-alike email domain, and answers your load post. Every lookup you run on the MC comes back clean, because the carrier is real. The person on the phone isn’t.

2. Double brokering

A carrier, or someone posing as one, accepts your load and re-brokers it to another carrier without your consent and often without broker authority. The truck that actually hauls it never gets paid, and that carrier comes looking for you or the shipper. Brokering without registration and the $75,000 security is unlawful under 49 U.S.C. 14916, and FMCSA’s penalty schedule allows up to $13,676 per violation (49 CFR Part 386, Appendix B). See the double brokering glossary entry for the legal detail.

3. Fictitious pickups

A thief shows up at the shipper posing as the carrier you booked, with a plausible truck and the right load number. CargoNet counted 158 of these in Q2 2026 alone.

4. Account takeover

The FBI’s April 2026 alert describes phishing links that install remote monitoring tools, hijacked load board accounts, and changed contact details on carrier registrations (FBI IC3). Once someone is inside your email, they can rewrite a rate con or a remit-to address from your own account.

Carrier vetting checklist for every new carrier

1. Pull the carrier on SAFER by USDOT number. Confirm operating status, authority type, legal name and address.
2. Check authority and insurance in FMCSA’s Licensing and Insurance system. Look at authority history for recent grants, revocations or reinstatements.
3. Call the phone number on the FMCSA record. FMCSA’s own advice is to confirm broker and carrier phone numbers using SAFER. Don’t trust the number in the email signature.
4. Compare the email domain. Free email accounts and domains one letter off from the carrier’s name are warning signs.
5. Get the certificate of insurance from the insurance agent, not from the carrier. Call the agent to confirm the policy is active.
6. Match fleet size to the promise. A carrier with two power units offering you ten trucks a week is either re-brokering or misstating its fleet.
7. Collect a signed broker-carrier agreement that bans re-brokering and requires the carrier to haul on its own authority.
8. Match the W-9 to the FMCSA legal name, and verify bank details with a callback to the FMCSA-listed number.

Red flags FMCSA lists include requests to misrepresent a carrier’s identity, blind loads, and rates that look too good. Add a few from the dispatch desk: a carrier that can’t name its driver, refuses tracking, or will only communicate by email. The full document list is in our carrier onboarding checklist.

Controls to run on every load

• Get the driver’s name, cell, truck number and trailer number before pickup. Send them to the shipper and ask the dock to check them at the gate.
• Require tracking the driver accepts before the truck loads. A carrier that won’t track is a carrier you shouldn’t dispatch.
• Treat reroutes by email as suspect. Confirm any change of consignee or address by phone with the shipper.
• Escalate tracking that goes dark. A truck that stops reporting after pickup on a high-value load needs a call now, not at the next check call.
• Ask for BOL and seal photos at pickup. They settle disputes about what was loaded and by whom.

Payment protections

• Pay only the carrier on the rate con. If a different company invoices you, stop and investigate. It’s the most common sign of a double-brokered load.
• Verify every bank change by phone to a number you sourced from FMCSA records, and require a second person to approve it.
• Confirm factoring notices of assignment with the factoring company directly, using a number you look up yourself.
• Hold payment until the POD and BOL match the carrier, driver and equipment you booked.
• Match the pay-to name to the W-9 and the FMCSA legal name. A mismatch needs an explanation in writing.
• Turn on two-factor authentication for email, load boards, banking and your TMS. The FBI recommends it in its 2026 cargo theft alert.

What to do after a fraud incident

1. Stop the freight if you can. Call the carrier of record, the shipper and the consignee. If you suspect theft, call police in the jurisdiction where the cargo was taken and get a report number.
2. Freeze payment on the load and flag the carrier in every system you use.
3. Preserve evidence. Keep emails with full headers, rate con versions, call logs, tracking history, the BOL and any photos.
4. Notify your insurer and the shipper as your contingent cargo policy and customer contract require.
5. Report it. FMCSA points brokers and carriers to its National Consumer Complaint Database, the FMCSA Contact Center at 1-800-832-5660, the FBI at ic3.gov, the FTC at reportfraud.ftc.gov, and the DOT Inspector General hotline (FMCSA fraud guidance).
6. If your own identity was used, warn your carriers and customers, secure your email and load board accounts, and ask the load boards to flag the impostor.
7. Find the failed check. Write down which step would have caught it and make that step mandatory.

FMCSA also tightened registration. New applicants in its Motus system now pass identity proofing and business verification, which FMCSA tied to “a significant increase in presumed fraudulent activity” (Federal Register, April 29, 2026). That helps with fake new registrations. It does nothing about someone impersonating a real carrier by email, so the checks above still matter.

Where a TMS helps, and where it doesn't

Software can’t tell you whether the voice on the phone is really the carrier. It can make sure the checks you decided on actually happen on every load, including the rushed ones at 4:45 on a Friday.

In the FreightVero broker TMS, these rules run in the database today:

• A load can’t move forward with a carrier until the carrier record shows an approved compliance status and the driver and truck details are recorded.
• Dispatch requires the latest rate con version signed, with the signed copy uploaded. Change the rate and the new version needs its own signature.
• Tracking that goes quiet for 45 minutes gets flagged.
• A carrier swap requires a reason, keeps the old assignment on record, and voids the old rate con.
• An append-only audit log records who changed what, and no one can edit or delete it.

What it doesn’t do yet: FreightVero doesn’t pull FMCSA authority data or verify carrier identity. Your team sets the compliance status after your own vetting. Integrations with RMIS and MyCarrierPackets are planned, not live. See how the checkpoints work.