Carrier identity theft: how real MC numbers get hijacked

The most dangerous fraud doesn't use a brand-new, obviously risky carrier. It uses a real carrier with years of history, good inspections and active insurance, and a fraudster pretending to be that carrier. Because the authority checks out, normal vetting passes it.

Two ways it happens

1. Impersonation

The fraudster uses a legitimate carrier's name, USDOT and MC numbers, but contacts you from their own phone and a look-alike email domain. The FMCSA record is untouched. Defense: always contact the carrier through the phone number and email on file with FMCSA, never only through the details in the inbound email.

2. Record takeover

The fraudster gains access to the carrier's FMCSA registration, often a dormant or small carrier, and updates the phone number, email or address to their own. Now calling "the number on file" reaches the fraudster. FMCSA has added identity checks to its registration systems, but takeovers of existing records still happen.

Defense: look at when the contact details changed. A ten-year-old authority whose phone, email and officer names all changed last week is a serious red flag. SAFER can't show this because it only displays today's values.

Why change history matters

CarrierTell saves the full FMCSA carrier census every day and compares it with the day before. When a carrier's phone, email, address, officers or company name change, we record the date. The CarrierTell extension flags carriers with contact changes in the last 14 or 30 days, and Pro shows exactly what changed, from what, to what.

Other signals that help

• Authority or insurance status changing at the same time as the contact details
• The new phone or email also used by other carriers
• Mail marked undeliverable by FMCSA
• A sudden jump in activity from a carrier that had been dormant

Contact changes have many innocent reasons, such as a new dispatcher, a move or a sale of the business. Treat them as a prompt to verify, not as an accusation.