A stolen trailer and a diverted load call for different safeguards. Your plan needs both.
Cargo theft can start with an email
A trailer disappears from a lot. Or the trailer leaves with a real driver who was given the wrong delivery address. Both can end in missing freight, but only one requires a thief at the lot.
A fake carrier packet, stolen load-board login, or altered dispatch instruction can make a fraudulent handoff look routine. Small fleets need controls at the truck and at the desk.
Two ways freight goes missing
In straight theft, someone takes freight from a trailer, truck, yard, or stop. Locks, secure parking, seals, and driver check-ins matter here. In strategic theft, someone obtains or redirects a load by impersonating a carrier or broker, arranging an unauthorized re-broker, or sending a driver to the wrong place. An unauthorized re-broker is a warning sign, not proof that every re-brokered load is stolen.
Technology can help the impostor get a load without ever driving a truck. LTL operations also move freight through terminals and cross-docks, where each handoff needs a clear record. A GPS dot tells you where equipment went; it does not tell you who authorized the trip.
How a scam turns into a stolen load
An impostor books a load under a real carrier's name, then finds a legitimate driver to collect it. The driver may have paperwork and no reason to know the destination was changed without permission. Stolen email or load-board access can make the instructions seem to come from the company itself.
Transport Topics described this shipment-misdirection pattern in its coverage of CargoNet's 2023 reporting. That historical account illustrates a method, not today's theft rate.
- Load-board phishing and account takeover
- Carrier and broker identity theft
- Unauthorized re-brokering and fictitious pickups
- Unapproved delivery or cross-dock changes
Verify anything that changes the load or payment
An email is a request, not proof, when it changes where freight or money is going. Verify it through a separate channel: call a number already stored in your system, published on an established website or listed in an official FMCSA record. Never call a number supplied only in the suspicious message itself.
Use this callback for new brokers or carriers, last-minute pickup or delivery changes, driver substitutions, and new payment instructions. Name an approver who can be reached after hours.
- Compare the legal name, USDOT or MC number, status, and business details in official FMCSA sources.
- Call the carrier or broker at an independently verified number; a real authority record does not authenticate the person contacting you.
- At pickup, match the arriving driver and equipment with the approved carrier and tell the dock who can authorize substitutions.
- Escalate conflicts between the rate confirmation, bill of lading, messages, and public records before releasing freight.
- Treat an unexpected installer, shortened link, lookalike domain, or pressure to skip a callback as a serious warning sign.
Protect your carrier identity and dispatch devices
Review your public FMCSA and SAFER records for unexpected changes. Give staff individual accounts, use MFA on email, load boards and dispatch tools, and remove departed users promptly. Keep recovery contacts current so a locked-out dispatcher isn't forced to improvise.
Ask your IT provider to review mailbox forwarding, domain email authentication, endpoint protection, and backups. Do not install software requested in freight documents without independently confirming it with your IT contact.
Do not separate cyber and cargo security
Plan safe stops and approved parking with drivers before departure. Use locks, seals, lighting, tracking, and check-ins appropriate to the load; keep unattended time down where practical without compromising driver safety or hours-of-service requirements.
Agree who checks a tracking alert and who can approve a route, cross-dock, or destination change, including after hours. Record seal numbers and each custody handoff. An absolute 'no stops for 300 miles' rule is not a substitute for a safe route plan.
If you think something went wrong
Speed matters, but so does preserving evidence. Keep a written response plan on hand even if email or the TMS is unavailable.
- Call the driver, shipper, pickup facility, receiver, and legitimate broker through known numbers. Stop release, pickup, transfer, or delivery when it can be done safely and lawfully.
- Disconnect a suspected computer from the network without wiping it. From a known-clean device, reset affected passwords, revoke active sessions, and remove unauthorized forwarding rules, users, and integrations.
- Preserve the load number, bill of lading, driver and equipment details, last known location, emails, texts, call logs, account activity, and tracking history.
- Notify the load board so it can investigate the account, plus affected partners, insurers, and your bank or factor if money is at risk.
- Report suspected theft promptly to local law enforcement; report online fraud to IC3 and broker or carrier identity fraud through FMCSA's complaint process as applicable. Do not confront suspected criminals.
Where a cybersecurity review helps
Start with the free Zero-Access Exposure Review to see public email-authentication, domain, website, and internet-facing service signals. It cannot confirm that a carrier, load, or payment instruction is legitimate or inspect private accounts.
If you need evidence about internal safeguards, the $1,995 Business Security Baseline verifies in-scope controls such as MFA, administrative access, mailbox rules, and recovery readiness for businesses with up to 25 employees; larger businesses receive a scoped quote. Your team still owns cargo handling and partner verification. Remediation is separate.
Related resources
Check the business accounts behind your freight operation
Start with a free review of public domain, email, and internet-facing signals. If you need to verify internal MFA, mailbox, and recovery safeguards, the $1,995 Business Security Baseline is the next step for businesses with up to 25 employees. Neither service authenticates a load or replaces physical cargo protection.