Freight fraud: stolen identities, fictitious pickups and diverted payments

Identity theft of a legitimate operator

The dominant method is impersonation. A fraudster copies the details of a real, licensed haulier, registers a similar domain or email address, reproduces the operator's documents including licence and insurance certificates, and bids for loads under that identity. Everything a broker checks appears genuine because it belongs to a genuine company that knows nothing about it. The verification that defeats this is contacting the operator through details obtained independently, from a public register or a previously used record, rather than through the contact details supplied in the offer. Fraudulent contact information is the single artefact the impersonator must control, so an independently sourced telephone call is the highest-yield check available.

Fictitious pickup and the vanishing load

Once appointed, the fraudulent operator collects with a vehicle whose details may not match anything notified, often outside normal hours, from a site where gate checks are informal. The load is then either sold directly or moved through a warehouse and dispersed. Documentation is frequently clean, because the fraud occurred at the appointment stage rather than the collection stage. Controls sit at the gate: confirming the driver's identity and the vehicle registration against details notified in advance, photographing the vehicle, unit and driver's identification, refusing to load where the details differ until resolved through a known channel, and treating early or unannounced arrivals as a flag rather than a convenience. High-value loads justify a callback to the appointed operator before release.

Double brokering and unauthorised re-posting

A related pattern involves a party that accepts a load and re-posts it without authority, taking payment while the performing carrier goes unpaid. The shipper may face a claim from a carrier it never appointed, and where the goods are lost the chain of responsibility is contested by parties with inconsistent records. The defences are contractual and procedural: prohibiting subcontracting without consent, requiring the performing party to be disclosed before collection, checking that the vehicle presented belongs to the appointed operator, and being alert to rates accepted well below the market, which often indicate that the acceptor never intended to perform the job itself.

Payment diversion and invoice fraud

The financial version of the same crime targets the accounts payable process. A message purporting to come from a known carrier or supplier advises new bank details, sometimes from a compromised genuine mailbox, and payments are redirected until a supplier chases an overdue account. Variants include fraudulent invoices for services never provided and pressure to expedite payment. The controls are well established and often bypassed under pressure: verifying every change of bank details by calling a number already held on file rather than one in the message, requiring dual authorisation for changes to payment master data, restricting who may amend supplier records, and treating urgency as a reason for more scrutiny rather than less.

Building a verification routine and responding to an incident

A workable routine keeps checks proportionate: independent contact verification for every new counterparty, licence and insurance verification against the source rather than a supplied document, entity and bank detail matching against the registered name, notified vehicle and driver details compared at the gate, and an escalation route for any mismatch. Road transport authorisation regimes in Europe give an objective basis for part of this, since operators must hold a licence demonstrating good repute, financial standing and professional competence. When a load is taken, speed matters: report to police and obtain a reference, notify the insurer and the cargo owner, circulate details through industry channels, preserve camera and telematics evidence and communications, and check whether the same counterparty has other bookings in the system. Recovery through carriage liability is capped, so the substantive routes are usually insurance and law enforcement.

Frequently asked questions

The carrier's licence and insurance documents looked genuine. How was it fraud?

Because they usually are genuine, belonging to a real operator whose identity has been copied. Verification has to run through contact details obtained independently from a register or prior record, not through the details supplied with the offer.

Why is a below-market rate a warning sign?

An operator that cannot perform the job profitably at that rate either intends to re-post it without authority or does not intend to deliver at all. Unusually eager acceptance of a difficult or high-value load deserves the same scrutiny.

How should a change of a supplier's bank details be handled?

By verifying through a telephone number already held on file rather than any contact information in the request, requiring a second authoriser for master data changes, and restricting who can amend payment records. Urgency in the request is a reason for more checking, not less.