The most dangerous carrier on your list is not the one with a bad record — it is the one with a spotless five-year history that quietly changed hands three weeks ago. Cargo theft is getting more selective and more expensive. Verisk CargoNet documented 677 incidents in Q2 2026, down 26% year over year, but estimated losses of $304.6 million — more than double the $135.7 million in Q2 2025. Fewer thefts, far bigger payouts. One reason: sophisticated schemes increasingly rely on buying existing motor carriers with strong load histories rather than registering new fake ones. Here is how to see that before you hand over a load.
- Watch for recently updated MCS-150 dates on long-established authorities; a fresh update signals ownership or contact changes that need deeper verification.
- Call the FMCSA-listed phone, not emailed numbers; VoIP-only lines or new numbers on old authorities are major red flags.
- Verify insurance and physical yard directly: contact the agent by independently sourced number and confirm the address via satellite view.
- Protect your authority: enable FMCSA two factor authentication, use a nonpublic registered email, monitor MCS-150 monthly, and phone-confirm any change.
Why Buying an Authority Beats Faking One
Vetting tools have gotten good at catching brand-new authorities. A carrier registered last month with no inspections and a virtual-office address trips every filter. So the economics shifted: instead of creating a carrier that looks new, criminal groups acquire one that looks established.
The acquired carrier comes with everything your checklist looks for — years of operating history, real inspection records, a clean safety rating, existing broker relationships, sometimes even a real insurance policy still in force. Nothing on the surface says anything happened. The people answering the phone are simply different people.
Verisk’s Q2 2026 analysis also found business email compromise remained the primary access point for many of the quarter’s most sophisticated schemes, and that groups are targeting metals and enterprise technology specifically — they are not stealing more freight, they are selecting better freight.
Organized theft groups are not necessarily trying to steal more freight; they are trying to identify the right shipment.
Verisk CargoNet Q2 2026 cargo theft analysis
The Signals a Transfer Leaves Behind
An ownership change is not invisible. It leaves a trail in FMCSA records, in contact details, and in behavior — you just have to know which fields to compare.
The single most useful field is the MCS-150 update date sitting next to an address or officer change. A carrier that operated for six years from one address and then updated everything two months ago is not automatically fraudulent — people do move — but it is a carrier you verify differently. Pull the SAFER Company Snapshot and read the dates, not just the safety rating.
The Verification Checklist
- Compare the MCS-150 update date to the authority grant date. A long-established authority with a very recent filing update on address, phone, or officers is the core signal. Note it and dig.
- Call the number on file with FMCSA, not the number on the email. Fraud rings control the contact details they send you. They do not always control the ones already on record.
- Check whether the phone number is VoIP. A six-year-old carrier whose only contact is a two-month-old VoIP line is a mismatch worth explaining before you dispatch.
- Verify insurance directly with the agent, by a number you looked up yourself. Not the certificate’s listed number, and not a PDF someone emailed you.
- Confirm the physical address is a real yard. Satellite view takes twenty seconds. A carrier with eight power units and a residential-only footprint deserves a question.
- Ask a question only a real operator can answer. Which terminal do they fuel at, what is the truck’s model year, who is the driver’s dispatcher — the answers come fast from real people and slowly from scripts.
- Require a live photo at pickup. Driver, tractor with unit and plate visible, and the trailer, sent from the site before loading. This one step ends most fictitious-pickup attempts.
Protect Your Own Authority Too
The same market that makes a clean carrier attractive to buy makes your carriers’ authorities attractive to hijack. Lock down the FMCSA portal login with two-factor authentication, set the registered email to an address nobody uses for load-board or broker correspondence, and check the MCS-150 record monthly for changes nobody on your side made.
Because business email compromise is the entry point in so many of these schemes, treat any email announcing a change — new remit-to, new phone, new contact person — as unverified until confirmed by a phone call to a number you already had. That rule alone closes the most common door.
What to Do Next
Add one field to your carrier file this week: MCS-150 last-update date, captured at the time you onboard. When that date is fresh on an old authority, run the full checklist above instead of the short one. It costs you five minutes on the carriers where it matters and nothing on the rest. Then follow the reporting from CargoNet and the NICB each quarter — the tactics rotate, and the dispatcher who reads the quarterly summary is a quarter ahead of the one who learns about the new scheme from a load that never arrived.
