FIR Fraud Prevention Center

FIR Fraud Prevention Center

Verify the identity.
Protect the freight.

Practical, source-based tools for shippers and brokers to vet carriers, recognize fraud patterns, document decisions and respond when something does not add up.

For government services, verification, registrations, forms, reporting, or instructions, always navigate to the official agency website directly. Independently verify its address before entering credentials or business information.

SAFERCompany Snapshot FMCSA L&IAuthority & insurance FMCSAFraud alerts FBI IC3Report cybercrime FMCSA TPRRemoved providers
Driver & training verification

Check removed CDL training providers.

FMCSA maintains the official searchable and downloadable record of providers removed from its Training Provider Registry. Use the provider name, location and removal date when reviewing a driver’s entry-level training record.

Important: FMCSA guidance says training conducted after a provider’s removal date is invalid. A provider’s appearance on the list does not, by itself, establish that training completed earlier is invalid or that every removal involved proven fraud.

Review the official removed-provider list Read FMCSA provider guidance
Video tutorial

Learn the FIR review workflow step by step.

Follow the guided demonstration to verify carrier identity, authority, insurance, operations and payment information; interpret the risk signal; document the decision; and use the Center’s Major Concerns, Regulation and Active Alerts resources.

01Guided review

Turn scattered checks into a defensible decision.

The FIR review organizes evidence. It does not certify a carrier or replace your company’s compliance, legal, insurance or security procedures.

STEP 1 OF 5Confirm the carrier’s identity
02Pattern recognition

Red flags rarely travel alone.

Look for clusters and contradictions. Pause the transaction, preserve the evidence and verify through a trusted channel.

IDENTITY

The public record and the person do not match.

Watch for: A new or free email domain, a phone number that differs from SAFER, an unexplained address, a recently changed contact or reluctance to accept a callback.

Verify: Compare the legal name, DBA, USDOT/MC numbers, address and phone across SAFER, the W-9, insurance certificate, agreement and rate confirmation.

Act: Pause onboarding or release. Call the company using a number obtained independently from the official record.

URGENCY

Speed is being used to defeat process.

Watch for: “The truck is waiting,” “the load must move now,” last-minute driver substitutions, after-hours requests or pressure to bypass normal onboarding.

Verify: Reconfirm the request with an established company contact and require the same documents and approvals used for a normal transaction.

Act: Stop the clock. A legitimate counterparty should allow reasonable time for identity, authority and pickup verification.

MONEY

Payment instructions suddenly change.

Watch for: A new bank or factoring account, a payee that differs from the contracted entity, early-payment pressure or requests involving cryptocurrency, gift cards or an unrelated third party.

Verify: Call known contacts at the carrier or broker and financial institution using previously validated numbers. Compare the payee with contracts, invoices and tax records.

Act: Freeze the change until dual approval and out-of-band verification are complete. Notify the bank immediately if funds may have been diverted.

OPERATIONS

The load story does not hold together.

Watch for: Equipment that does not fit the commodity, a driver who cannot name the dispatcher, implausible geography, a rate far outside the lane or an unexpected destination change.

Verify: Reconcile dispatcher, driver, tractor, trailer, pickup number, route, commodity and destination before freight is released.

Act: Hold the load and escalate any substitution or routing change through a known company contact and your incident procedure.

03Fraud intelligence

What changed—and why it matters.

Reviewed every Monday. FIR prioritizes primary government releases, final rules, enforcement actions and high-impact threat advisories. New articles are added when a verified development materially affects transportation and logistics operations. Last reviewed October 5, 2026.

ACTIVE ALERTFMCSA

Fake Motus portals are targeting registration credentials

FMCSA warns that messages promoting an off-cycle update through a fake “New MOTUS Portal” use bogus domains designed to capture credentials and business information.

FIR OPERATING TAKEAWAY

Do not use the message link. Navigate independently to FMCSA’s official website, verify the address, require a second reviewer for record changes, and reverify carrier identity before releasing freight after a suspected compromise.

Read the FIR prevention guide →
MAJOR CONCERNFBI / IC3

Cyber-enabled strategic cargo theft is surging

The FBI warns that criminals are compromising broker and carrier accounts, posting fake loads, altering records and redirecting freight using manipulated documents and unauthorized transloads.

FIR OPERATING TAKEAWAY

Use multi-channel verification before release. Document drivers and equipment, and independently confirm destination changes.

Source address: ic3.gov/PSA/2026/PSA260430
REGULATION

FMCSA expands broker financial-responsibility guidance

Updated guidance addresses trustee eligibility, replacement filings and authority suspension.

Official guidance
ACTIVE ALERTFMCSA

Scammers are planting false Clearinghouse violations

Confirmed: FMCSA warns that fraudulent Substance Abuse Professionals and purported employers are collecting drivers’ CDL or CLP number, date of birth and name, then entering false drug-and-alcohol violations unless the driver pays.

FIR OPERATING INTERPRETATION

For shippers and brokers, an unexpected driver-status problem may reflect identity abuse rather than a legitimate violation—but it must never be ignored. Require the carrier to verify the record directly through the official Clearinghouse process; do not accept payment demands, screenshots or assurances from an unverified intermediary. Preserve messages and report suspected fraud to FMCSA.

Source address: fmcsa.dot.gov/registration/fraud-alerts
ENFORCEMENT & DRIVER-QUALIFICATION INTEGRITYFMCSA / DHS / DOJ

Federal agencies launch a multi-state trucking-fraud task force

USDOT, DHS, DOJ and the White House Task Force to Eliminate Fraud announced Joint Task Force Crossroads of America. The initiative includes FMCSA’s emergency removal of more than 110 training providers associated with over 5,000 drivers who failed English-language-proficiency tests, a nationwide audit of third-party CDL skills testers, and HSI activity at more than 200 driving schools across 23 states.

FIR OPERATING TAKEAWAY

Where driver-qualification risk is material, verify training-provider and completion-date records through FMCSA’s official registry and preserve the evidence used. The initiative does not certify or disqualify an individual carrier by itself, and it should not be represented as a cargo-theft finding.

Source address: fmcsa.dot.gov/newsroom/us-transportation-secretary-duffy-us-homeland-security-secretary-mullin-white-house-fraud
04Role-based controls

Different seat. Different exposure.

Use the playbook that matches where you control identity, custody and payment.

For shippers

Protect the handoff point.

  • Define approved carriers, lanes and exception authority before tender.
  • Match carrier, driver, tractor, trailer and pickup details before release.
  • Hold unexpected substitutions and call a known company number.
  • Treat delivery or destination changes as a new verification event.
For brokers

Protect identity, custody and payment.

  • Validate identity, authority, insurance and payment records independently.
  • Confirm the accepting carrier will physically haul the load.
  • Reconcile dispatcher, driver, equipment and pickup details.
  • Freeze and re-verify banking, factoring or payee changes.

Important: Public records may be delayed or incomplete. SAFER says Company Snapshot information is generally updated daily, while inspection and crash activity counts update weekly. An active record is a starting point—not proof that the person contacting you controls that identity.

If fraud is happening now

Pause. Preserve. Report.

Follow your organization’s incident plan and contact appropriate authorities. Do not confront a suspected offender or put anyone in danger.

  1. 1
    Stop the transaction

    Hold pickup, delivery changes, account changes and payment where lawful and possible.

  2. 2
    Preserve evidence

    Save messages, headers, documents, URLs, timestamps, payment details and access logs.

  3. 3
    Use known channels

    Contact the real carrier or broker, bank, insurer, security team and law enforcement using independently verified information.

Informational-use disclaimer

The FIR Fraud Prevention Center, carrier-review tool, articles, alerts, links and tutorial are provided for general educational and informational purposes only. They do not constitute legal, regulatory, compliance, safety, insurance, financial, cybersecurity or other professional advice, and they do not certify, approve or guarantee any carrier, broker, owner-operator, transaction or load. Public records and threat information may be delayed, incomplete or subject to change. Users remain responsible for independent verification, due diligence, contractual requirements and compliance with applicable laws and their own policies. Consult qualified legal counsel and other appropriate professionals regarding specific circumstances. Freight Intel Report does not assume responsibility for decisions made or actions taken in reliance on this information, to the fullest extent permitted by law.