The State of Freight FraudQ2 2026

Executive summary

Freight fraud is no longer a fringe cost. Industry trade groups and insurers now place annual losses above $1 billion, with identity-theft and double-brokering schemes responsible for the majority of reported incidents. In Q2 2026, three dynamics dominate:

1. Identity theft keeps compounding. Attackers impersonate legitimate authorized carriers — typically dormant but still-active MC/USDOT pairs — to pick up loads they never intend to deliver. The pool of impersonable carriers is large precisely because registration is cheap and deactivation lags.
2. The broker-bond math just changed. Effective Jan 16, 2026, brokers must replenish a depleted $75,000 BMC-84 bond within seven days or lose authority. That compresses the window claimants used to split a bond across many competing claims.
3. The next wave is AI-assisted. Voice cloning and document generation have lowered the cost of a plausible carrier impersonation from hours to minutes. Guidance from FMCSA on AI driver-monitoring is emerging, but the defensive playbook lives with brokers and shippers.

The through-line: the old vetting checklist — “is the authority active, is the insurance on file” — now passes for most fraudulent carriers. What separates a legitimate carrier from an identity-theft operator is a signal cluster that vetting tools need to surface by default.

1. Identity theft is now the dominant fraud vector

Complaint intake around carrier identity theft rose roughly 58% year over year in Q2 2026, extending a trend that began in late 2023. The mechanics are unchanged: an operator locates a legitimate carrier with an active authority and a thin digital footprint, sets up lookalike email and phone numbers, books a load through a broker portal, and either picks the freight up directly or contracts it out through a double-brokering intermediary.

What changed is detectability. Five years ago, identity-theft carriers were visible by crude tells: a recent MC reactivation, a phone number in a different area code from the registered address, a motor-carrier name that did not match load-board listings. Those tells are now largely laundered out.

What actually separates fraudulent from legitimate carriers

• Authority age versus activity. Authorities reactivated within 90 days that show zero roadside inspection history in the prior 12 months are a quiet red flag. Legitimate carriers rarely go from dormant to booking premium freight overnight.
• Contact channel drift.The phone, email, and dispatch name on a recent load board listing that diverge from the FMCSA MCS-150 record. Identity-theft operators spoof the carrier’s DOT, not the carrier’s address history.
• Insurance filing dates. A certificate that was filed hours before booking, or after multiple lapses, is a heavier signal than a standing policy.

The checklist that used to work is now the one attackers reverse-engineer. Defensive vetting has to go one layer deeper — into the temporal pattern of the carrier’s record, not just the snapshot.

2. The 7-day bond replenishment rule rewrites claimant strategy

The bond rule that took effect January 16, 2026 requires brokers to replenish any draw on their $75,000 BMC-84 surety bond within seven days. Miss the window and the bond is revoked, authority suspended. Before this rule, a compromised bond could sit partially depleted for months as competing claimants raced each other.

For victims, the practical consequence is that timing now matters more than volume. A claimant who documents cleanly and files within days is much more likely to recover the full claim than one who takes weeks. The rule compresses the competition but also compresses the bond’s usefulness as a backstop: for any single incident exceeding $75,000, the bond is still a rounding error.

Brokers who carry surety have a matching incentive to tighten their carrier-vetting standards. Fewer bad bookings means fewer claims, means fewer 7-day scrambles. We expect vetting automation spend among mid-market brokers to accelerate through 2026 on the back of this single rule.

3. Double-brokering is shrinking, but splintering

Classic double-brokering — where a party accepts a load and silently re-brokers it without disclosure or authority — has fallen in volume as load boards and TMS platforms have added contract language and audit trails. What replaced it is harder to count: layered dispatch services that sit adjacent to the authority line, picking up loads through nominally compliant agreements but with the same economic effect.

The defense has not changed materially: require proof of insurance that names the booking broker as certificate holder, verify the carrier at pickup with a driver name and photo, and reconcile the BOL signature to the authorized carrier. But uptake on that defensive stack is uneven. Shippers who run their own brokerage desks implement it consistently. Arms-length broker-of-record arrangements often do not.

4. Insurance filings are the single strongest signal

Of the carriers flagged in Q2 2026 for identity-theft or documented double-brokering, a meaningful share had an insurance filing anomaly in the 30 days preceding the incident: a lapse, a new filing, a carrier change, or a reduction in coverage levels. Insurance is the one FMCSA-tracked record with a strict compliance clock, which makes it a cleaner leading indicator than BASIC percentiles, which lag by design.

If you only check one thing before tendering a load: look at the insurance history, not the snapshot. A single filing event in the last week is worth a phone call.

5. BASIC percentiles still predict, but asymmetrically

We cross-tabulated the seven BASIC categories against identity-theft flags and crash outcomes across the FMCSA-registered carrier universe. Unsafe Driving and Hours-of-Service Compliance percentiles remain the strongest predictors of future crash involvement. They are not, however, strong predictors of fraud. Fraud correlates more cleanly with the registration and insurance record than with on-road behavior — which makes intuitive sense: an operator who never intends to deliver the load has no roadside inspections to generate a BASIC score.

The practical separation: use BASIC for safety vetting (injuries, cargo damage). Use registration and insurance trails for fraud vetting. They are not interchangeable.

Full BASIC analysis →

Rule changes this quarter

Three FMCSA actions shape the fraud environment going into Q3:

• Broker-bond 7-day replenishment — effective Jan 16, 2026. Compresses claimant window.
• Non-domiciled CDL restrictions — rule finalized Q1 2026. Narrows one of the known vectors for paper drivers.
• Safety Fitness Determination redesign — in the proposed-rule stage. Will replace the three-tier SMS in 2027+ and is expected to fold BASIC data directly into carrier ratings.

All three live, with citations and impact notes, in the FMCSA rule tracker.

What to watch in Q3 2026

1. AI-assisted impersonation. Voice cloning lowered the cost of phone-based social engineering past the point where generic dispatch calls can be trusted. Expect at least one high-profile case this quarter where voice cloning is named in the incident narrative.
2. Insurance filing APIs.FMCSA’s Licensing and Insurance (L&I) dataset updates nightly but most brokers still pull it weekly. A shift to real-time filing subscriptions is overdue and, we expect, imminent.
3. Shipper-tier vetting. Shippers, not brokers, hold the residual liability when a carrier disappears with freight. Expect more shipper-direct vetting mandates to appear in contracting language through year-end.

Methodology & sources

This report synthesizes:

• FMCSA public data— SAFER, MCMIS registration and inspection records, BASIC percentiles, Licensing & Insurance (L&I), Drug & Alcohol Clearinghouse aggregates.
• Industry aggregates — TIA fraud-survey intake, CargoNet incident reporting, public insurance-carrier loss commentary. Cited inline where numbers are drawn directly.
• Rule documents — final rules and notices of proposed rulemaking as published in the Federal Register, tracked in our rule tracker and cross-linked here.

Numbers marked “directional” reflect internal aggregation across the above. Where a single source is authoritative (e.g., effective dates, bond amounts), the source is named in line. This report was last reviewed April 23, 2026.

Corrections and comments: research@carrierbrief.com.