The AI TMS Blueprint · Sheet 03

Carrier vetting and freight fraud screening

What each federal authority actually proves and what it quietly does not, how the schemes that are taking money right now actually run, and the control categories that stop each one. Written from the statutes, the regulations and the agency's own words.

Book a 30-minute call with our expert The rest of the blueprint

The distinction that matters

Authority is not identity

A registry lookup proves an entity exists and may operate. It proves nothing about whether the party emailing you is that entity.

In a stolen-identity case every authority check comes back clean — because the identity is real. The only false thing is who is on the other end of the phone. Treating these as one check is the most common and most expensive mistake in carrier onboarding.

Fraud schemes documented here, each from the victim's side of the desk

Control categories, and what each one does and does not stop

Checks that are constantly confused: authority and identity

$4,500

Fixed-price pilot: your onboarding flow, three weeks, instrumented

The flow

Eight stages, and vetting is a subscription, not a gate.

An insurance filing you read as current can be thirty-five days from void, because that is the notice period for cancellation. Anything that treats vetting as a one-time check is already wrong by design.

01 · judgementCapture the claimSomeone asserts they are a carrier. Nothing has been verified yet — at this stage it is a claim arriving down a channel they chose.
02 · federal lookupResolve to a registrantMatch the assertion to a federal registration record by USDOT number. The number, not the MC docket, is the identifier the agency builds on.
03 · federal lookupAuthority status and typeActive, inactive, revoked or suspended — and whether the authority covers this movement. Property is not passenger, and carrier authority is not broker authority.
04 · judgementBind identity to the registrantThe hardest gate, and the one that separates a stolen identity from a bad carrier. Authority verification and identity verification are different controls.
05 · lookup + judgementInsurance, both kindsPublic liability is on the federal file. Cargo coverage for general freight is not on any federal file — it has to come from the issuing source.
06 · lookup + judgementAffiliation and historyShared officers, addresses and filing agents against entities that were previously shut down. Legitimate small carriers share these too, which is why this prioritises review rather than deciding anything.
07 · judgementPayment setupContract, remit-to, and any factoring assignment — confirmed out of band, against details held before the request arrived.
08 · lookup + judgementDispatch and in transitThat the tractor, trailer and driver presenting are the ones the vetted carrier dispatched, and that the vetted carrier knows about this load at all.

The authorities

What each source proves — and what it does not.

Most vetting failures are not missing checks. They are checks that were run correctly and then read as proving something they never proved.

Source	What it proves	What it does not
Carrier registration	That an entity is registered with the national transport authority and holds an identifier. Most markets have one; what it is called and what it covers differ.	Prove fitness, solvency, insurance adequacy — or that whoever is contacting you controls that registration. It is the primary key, not a verdict.
Operating authority or licence	That the entity is permitted to operate, and in what capacity. Arranging transport for others and hauling it yourself are usually distinct permissions.	Say anything when the authority is genuine and stolen. Every authority check passes in an identity-theft case, because the identity is real.
The public register's own record	A snapshot of registration status, declared fleet size, and whatever inspection or incident history that market publishes.	Describe the current fleet, or guarantee the contact details on file reach the real operator. Much of it is self-declared, and self-declared data is the cheapest thing in the world to falsify.
Safety or compliance history	That inspections or an audit happened, and what they found at that time. Some markets publish the underlying records, some publish a score, some publish neither.	Mean the carrier is safe today. A rating is a snapshot from the date it was made — and in most markets the majority of carriers have never been audited at all, so a clean record and no record look identical in a database and mean very different things.
Insurance certificate	That a policy existed when the certificate was issued.	Create coverage, bind the insurer to you, or reveal exhausted limits, exclusions, deductibles or a cancellation already running. Cover can usually be withdrawn on notice, which is why this is monitored rather than sampled — and a PDF certificate is trivially editable, so it is obtained from the issuer, never from the counterparty.
Financial security or bond	That whatever security that market requires of an intermediary is in place.	Protect the party that posted it. These instruments generally run to the counterparties, are capped, and are shared among claimants if several arrive at once. Treating one as insurance against your own loss is a common and costly misreading.
Trade identifiers and codes	That a code was issued to a named party and is current.	Say anything about operations or permission — an identifier confirms identity within a scheme, nothing more. Most are issued by industry bodies rather than regulators.
Commercial databases	That a vendor has aggregated public records and layered its own signals, scores and user reports on top.	Constitute an authority. Their scores are not auditable by you, and user-contributed content about named businesses carries exposure the public record does not. Useful as an input; never as the source of truth.

The schemes

How the money actually leaves.

Each of these is written from the victim's side of the desk — how it runs, what it looks like while it is happening, and what the loss turns out to be. That is the useful view, because at the time every one of them looks like a normal booking.

Double-brokering

How it runs: A party accepts a load as the carrier, then re-tenders it to someone else and keeps the spread — frequently never paying the carrier that actually hauled it. Chains can run several layers deep.
What you see at the time: A normal booking that delivers normally. The load is often entirely fine. The problem surfaces weeks later as a payment demand from a carrier nobody has heard of, holding a signed proof of delivery, usually with a factoring company behind it.
What the loss is: Paying twice, an orphaned cargo claim against a party that was never underwritten for the load, and a record in which the broker cannot say who actually hauled the freight.

Carrier identity theft

How it runs: The attacker wears a real carrier's identity — registration numbers, legal name, sometimes a genuine insurance certificate — and substitutes its own phone, email and remit-to. The agency itself names account hijacking and the sale of carrier numbers among the patterns it is seeing.
What you see at the time: A carrier with a long clean history and real insurance on file. Every authority check passes, because the identity is real. The only false thing is who is on the other end of the phone.
What the loss is: A stolen load, or payment diverted away from the real carrier — which then presents its own invoice. The real carrier is a victim too, and often learns of it from the broker.

Fictitious pickup

How it runs: Wearing a stolen or freshly minted identity, the thief books a load and simply collects it with correct-looking paperwork. The freight is gone before anyone knows a theft happened.
What you see at the time: A clean booking and an on-time pickup. Then silence, or a plausible delay story, then nothing.
What the loss is: Total loss of the commodity, and a cargo claim with no solvent insured respondent — the carrier either does not exist or was never the entity named on the certificate.

Remit-to and banking change fraud

How it runs: A change of payment details arrives for a genuine carrier or factor, often from a real address inside a real email thread taken from a compromised mailbox. The freight moves perfectly; only the money goes astray.
What you see at the time: A routine administrative request with a plausible reason, frequently with a convincingly formatted release letter or assignment notice attached.
What the loss is: You pay the wrong party and still owe the right one. Recovery depends on same-day banking intervention and is usually partial. The highest ratio of loss to sophistication in the whole field — it needs no trucks and no cargo.

Phantom carriers

How it runs: A newly registered or never-operating entity with no equipment, no drivers and no intention of hauling, created to take loads, collect advances, or re-broker. The agency names fake initial registrations explicitly.
What you see at the time: Thin, but not disqualifying. Authority active, insurance filed, no adverse history — because there is no history at all. Absence of negatives reads as absence of risk, and that is the trap.
What the loss is: Theft, re-brokering, or an advance that goes nowhere. A clean record and no record are not the same thing.

Chameleon carriers

How it runs: An operator shut down or facing enforcement re-registers as a new entity, often reusing officers, addresses, phones or equipment, to shed a safety or payment history.
What you see at the time: A new entity with a clean slate — which is precisely the intended effect.
What the loss is: Elevated crash and claim exposure, and a selection decision made against a history that was discoverable. The applicable statute already requires an applicant to disclose common ownership, management or control with another carrier, forwarder or broker in the preceding three years.

Fraudulent factoring assignment

How it runs: A forged or stale assignment notice redirects receivables; or a double-broker factors an invoice for a load it did not haul; or two factors claim the same receivable after a carrier switched without a proper release.
What you see at the time: An assignment notice on letterhead, an invoice, and a valid proof of delivery. Factoring is ubiquitous and legitimate, and that volume of genuine traffic is the cover.
What the loss is: Paying the wrong assignee while remaining liable to the right one — and occasionally competing claims from two factors plus the carrier at once. Note that the innocent version, a stale notice with no release, produces identical mechanics.

Tracking manipulation

How it runs: Location telemetry treated as ground truth when its provenance cannot be established — a shared link, a third-party app, or a driver's phone, all of which are assertions by the counterparty.
What you see at the time: A tracking link that moves plausibly.
What the loss is: Delayed detection of a diversion, which is what turns a recoverable incident into a total one. Worth keeping in proportion: this matters as corroboration failure rather than as a scheme in its own right.

The controls

What each control actually stops.

Described as categories, deliberately. No single control stops a determined attacker, because the schemes attack different layers — authority, identity, documents, payment instructions and possession. What an attacker cannot easily defeat is a control that does not rely on information the attacker supplied.

Control	Where it sits	What it stops	What it does not
Identity verification	Capture, binding, and again at dispatch	Stolen identities, phantom entities, and the front end of a fictitious pickup.	Nothing about a real carrier that behaves badly.
Authority verification	Resolution and load suitability	Operating while revoked, and the flavour of double-brokering where a carrier has no broker authority at all.	Anything where the authority is genuine and stolen.
Insurance verification	Onboarding, then continuously	Uninsured-exposure surprises and a large class of document forgery, when the certificate is obtained from the issuer rather than the counterparty.	Mid-term cancellation and aggregate exhaustion — which is why the 35-day cancellation window makes this a monitoring problem, not a checklist item.
Out-of-band confirmation	Every payment-instruction change	Remit-to fraud and much assignment fraud — the two highest loss-per-effort schemes.	Nothing involving the freight itself. Its strength is structural rather than secret, which is why it is the one control worth advocating in public.
Equipment and driver corroboration	At pickup	Fictitious pickup at the last defensible moment, and surfaces unlawful re-brokering at the only point where it is directly observable.	Depends on shipper-side execution, which a broker does not control. Pretending otherwise is an overclaim.
Affiliation and pattern analysis	Onboarding and review	Chameleon entities and organised rings, which are invisible to any single-entity check.	The highest false-positive cost of anything here. Legitimate small carriers share addresses, agents and phones constantly, so this prioritises human review and decides nothing on its own.
In-transit verification	After dispatch	Nothing outright — it compresses time to detection, which is what decides whether a diversion is recoverable.	Only as good as the provenance of the telemetry. A link the counterparty controls is not independent corroboration.

Why the thresholds are not on this page

Freshness windows, scoring weights, which signal combinations raise a hold, which fields are checked and which are sampled, and what routes a load to enhanced review — none of it appears here. Published, it tells an attacker precisely what to forge and what to ignore. There is a second reason that points the same way: since the 2026 decision above, a broker's vetting record is litigated evidence, and anything a vendor publishes as a diligence standard becomes discoverable argument against its own customers. We go through the mechanics with you under NDA, not on a marketing page.

The ground it rests on

What decides whether this holds up.

Commercial and operational ground, not legal ground — every item here is something you control in your own contracts and your own process.

Authority and identity are not the same check

A registry lookup tells you an entity exists and is permitted to operate. It tells you nothing about whether the party emailing you is that entity. In a stolen-identity case every authority check passes, because the identity is real — which is why these are two controls, run against two different sources, and never collapsed into one green tick.

The single most useful distinction on this page

Your contract decides what you can recover

Who may re-broker and on what terms, whether offset is permitted, what paperwork is required before payment, who the lawful payee is and how a change to that is verified. These are drafting questions settled before a load moves, and they decide the outcome far more often than any after-the-fact investigation does.

Agreed up front, not argued later

The record has to be able to answer for itself

What was checked, against which source, when, what it returned, who decided, and what they saw. Keep it in a form a third party could read, because sooner or later one will — a customer, an insurer, an auditor, or a counterparty disputing what you knew and when.

Written at the time, not reconstructed

Verification is a subscription, not a gate

Registrations lapse, insurance is cancelled mid-term, ownership changes and payment details are updated. Anything checked once at onboarding is a statement about the day it was checked. The controls that matter run continuously and react to the change, not to the calendar.

The failure mode is a file that was true last quarter

Rules and sources differ by market

Registries, insurance requirements, financial-security regimes and safety schemes vary by country and change over time, and so do the obligations that sit on a broker. We build the verification and the evidence trail around the sources and the duties that apply to you, which is a question for your own advisers rather than for us.

Which is why no figures appear on this page

Nobody is paid on an unverified instruction

A change of payment details is the highest loss-per-effort attack in the business, because the freight moves perfectly and only the money goes astray. It is confirmed through a channel independent of the one that asked, against details held before the request arrived — and never from the message that requested it.

The control whose strength is structural, not secret

Instrumentation

What a pilot reports back.

Metrics about the pilot's own behaviour, which is what earns trust in a first engagement — and which give away nothing about how anything is detected.

Decision latency, and what it gates

Time from carrier interest to verdict at median and 95th percentile, plus the share of loads where vetting was the step holding up the tender. Freight dies of latency, and a control that slows tender gets bypassed — bypass is the real failure mode.

Automated resolution, with a reason mix

Share closed with no human touch, and its complement broken down by why review was needed. The reason mix, not the headline rate, says whether it is working.

Source availability and data age

Per-source success and timeout rates, the age of the data each decision rested on, and fail-open versus fail-closed counts stated explicitly. A system that silently approves when a source is unreachable is worse than no system.

Hold outcomes both ways

Holds cleared on review as a false-positive proxy, against incidents on loads that cleared as an escape proxy — with the honest caveat that fraud surfaces late, so early escape rates flatter the system.

Re-vet coverage and time to detection

Share of active relationships re-verified within policy, lifecycle events caught, and the median time from event to detection. This is where a cancellation window becomes a measurable commitment instead of a claim.

Override and exception rate

By user and by reason. Controls rarely fail technically; they get overridden under time pressure. A pilot that does not measure this is not measuring the risk.

The engagement

Your onboarding flow, three weeks.

Fixed scope and a fixed price: $4,500. We take your onboarding flow as it runs today, wire up the deterministic verification, put the judgement steps into a queue with the evidence attached, and instrument the whole thing from the first day — so what you get back is your own exception profile rather than our opinion of it.

What we need: your carrier agreement and onboarding packet, your current steps however informal, a sample of recent onboardings including any you later regretted, and one person in operations or risk who answers questions.

Book a 30-minute call with our expert

Delivered

Authority and identity verification wired into onboarding
Insurance monitored against lifecycle events, not sampled
Out-of-band confirmation on every payment-instruction change
Review queue with the evidence attached and a decision of record
The vetting record itself, in the shape a dispute will ask for it

FAQ

Questions a risk director actually asks.

Can you check the register and tell us a carrier is safe?

No, and anyone who says yes is overselling a lookup. A safety record is a snapshot from whenever the inspection or audit happened, and in most markets the majority of carriers have never been audited, so the absence of a finding is not a finding. A clean record and no record look identical in a database and mean very different things — which is why history is one input among several rather than the answer.

Can you verify a carrier's cargo cover from a public source?

Rarely, and this surprises people. Public filings in most markets cover liability to third parties rather than the cargo itself, and the limits that do exist are often well below what a shipper's contract demands. Cargo cover generally has to come from the issuing broker or insurer and be read for its terms — exclusions, deductibles, how the limit is consumed — not just its headline number.

What actually stops double-brokering?

No single control, because the schemes attack different layers — authority, identity, documents, payment instructions and possession. What an attacker cannot easily defeat is a control that does not rely on information the attacker supplied: identity bound to the public record through channels derived from that record, certificates obtained from the issuer, payment changes confirmed out of band, and corroboration of who actually showed up at the dock.

Why doesn't this page list your detection rules?

Because fraudsters read vendor pages. Publishing freshness windows, scoring, which signals raise a hold or which fields are checked would tell an attacker exactly what to forge and what to ignore. There is a second reason too: what a vendor publishes as its diligence standard can be turned against its own customers in a dispute. We walk through the mechanics with you under NDA, not on a marketing page.

Does this work outside our home market?

Yes, and it is built that way. The schemes are the same everywhere — stolen identities, phantom entities, re-brokering, redirected payments — and so are the controls. What changes is the source each check runs against: the register, the licence, the insurance regime and the security requirement differ by country. We wire up the sources that apply to you rather than assuming one market's systems.

Do you tell us what we are legally required to do?

No. Obligations on an intermediary differ by country and change, and we are not the right party to advise on them — that is a question for your own counsel. What we build is the verification, the monitoring and the evidence trail, around whatever duties and sources apply to you.

What does a pilot cost?

A pilot is $4,500 fixed: three weeks, your onboarding flow, the deterministic verification wired up and instrumented from the first day, with the exception queue and the review reasons reporting themselves. The scope is agreed in writing before anything starts.

What do you need from us to begin?

Your carrier agreement and onboarding packet, your current vetting steps however informal, a sample of recent onboardings including any you later regretted, and one person in operations or risk who can answer questions.

Let's build it

Book a 30-minute call with our expert

Bring your onboarding packet and one onboarding you regretted. You will leave the call knowing where your process is load-bearing, where it only looks like it is, and what a pilot would cover — $4,500 fixed, three weeks.

Book a discovery call

Reply within 1 business day · India & USA

This page describes how we build verification and evidence, not what any party is required to do. Registries, licensing, insurance requirements, financial-security regimes and the duties on an intermediary differ by country and change over time; nothing here states them, and nothing here is legal, insurance or compliance advice — those are questions for your own advisers. We do not make regulatory determinations, and we do not act or speak on a customer's behalf. Detection logic, thresholds and rules are deliberately absent. No customer data or configuration appears here.

Also in this blueprint: freight EDI onboarding and repair, invoice and accessorial audit, document intake, exception and ETA agents, and the rest of the AI TMS Blueprint.