Cargo theft losses exceeded $359 million in the first half of 2026, while 605 theft incidents were reported in Q2 alone. With freight volumes already building through peak season, recent warnings point to another concern: criminals are compromising legitimate carrier accounts, phone systems, email accounts, and compliance platforms to manipulate active shipments.
Key Takeaways
- 605 U.S. cargo theft incidents were reported in Q2 2026, up 5% from Q1.
- 37% of Q2 thefts with identified locations occurred at warehouses or distribution centers.
- Fraud attempts increased 219% YoY in Q3 2025, with more than 48,700 fake carrier identities flagged.
- Recent 2026 warnings show criminals compromising legitimate carrier accounts and communication systems.
- Shipment misdirection can happen after a legitimate carrier has already picked up the freight.
- Changes to shipment information should trigger another verification point.
Cargo Theft Remains Elevated Ahead of Peak Season
FreightWaves reported 605 U.S. cargo theft incidents in Q2 2026, a 5% increase from Q1. California accounted for 34% of incidents and Texas 18%, while electronics were the most targeted commodity at 23%.
Theft methods also varied significantly. Pilferage accounted for 46% of incidents, followed by full-truckload theft at 21%, facility theft at 16%, and deceptive pickup at 11%.
Warehouses and Distribution Centers Are Key Theft Locations
Among incidents with an identified location, 37% occurred at warehouses or distribution centers, compared with 15% at truck stops or fuel stations and 11% at rail locations. Southern California remains a major hotspot: the area within 200 miles of Torrance accounted for 37% of recorded U.S. thefts over the previous 12 months, averaging 81 incidents per month.
The financial impact extends beyond Q2 incident counts. Verisk CargoNet estimated cargo theft losses exceeded $359 million during the first six months of 2026, with the average stolen commodity value reaching approximately $341,518.
Freight Fraud Tactics Are Shifting During Peak Season
Peak Season Increases Fraud Risk
DAT Freight & Analytics identifies August through October as the tightest sustained stretch of freight peak season, followed by another surge in November and December. DAT cites Highway Freight Fraud Index data showing fraud attempts increased 219% year over year in Q3 2025, with more than 48,700 fake carrier identities flagged during the quarter.
The timing matters operationally. Higher load volumes and tighter capacity can leave less time to double-check carrier and shipment information. Carrier identity theft, double brokering, and fictitious pickups are among the schemes DAT identifies during high-volume months.
The risk isn’t just more fraud attempts. It’s more pressure on the same verification steps designed to stop them.
Legitimate Carrier Accounts Are Being Compromised
Recent Verisk CargoNet warnings add another layer to the Q3 risk. Criminal groups are compromising carrier accounts, software-based business phone systems, email accounts, and compliance-platform credentials, allowing them to operate through channels brokers and shippers may already consider trustworthy.
That makes these schemes harder to catch through carrier approval alone. A fraudulent actor may have authentic account access, recognizable contact information, and knowledge of an active shipment. CargoNet warns that theft can occur at tender, pickup, or after a legitimate carrier has taken possession, including through changes to delivery addresses or contacts after pickup.
FMCSA Warns About Phishing and Registration Scams
FMCSA’s current fraud alerts include SAFER impersonation, carrier-profile phishing, fake audit requests, spoofed portals, fraudulent compliance notices, and registration scams. Recent reports also involve fraudulent websites and emails impersonating Motus, FMCSA’s USDOT Registration System.
A familiar company name, USDOT number, email address, or phone number therefore shouldn’t be treated as proof of identity on its own. When information changes, the new details need to be checked against independently verified records.
How Shippers Can Strengthen Verification During Peak Season
The current fraud patterns point to a broader verification process: confirm the carrier before tender, then continue checking whether the people, equipment, shipment details, and instructions match what was approved.
1. Reverify Shipment Changes
Changes to drivers, trucks, trailers, contacts, pickup information, delivery addresses, or routing instructions should trigger another verification step before freight is released or redirected.
The channel used to verify the change matters too. If an instruction arrives through a compromised email account or phone system, confirming it through that same channel doesn’t independently validate the request. FMCSA advises checking carrier and broker information against official records and investigating discrepancies before proceeding.
2. Match Carrier Identity to Shipment Details
Operating authority and insurance can confirm carrier qualification requirements, but they don’t confirm that the person communicating with a shipper actually represents that carrier.
Effective carrier vetting should connect carrier identity and compliance information with verified contacts, driver and equipment details, pickup information, shipment tracking, and any changes after tender or pickup. A valid USDOT number or accurate shipment detail shouldn’t override inconsistencies elsewhere in the transaction.
3. Monitor Freight After Pickup
Verification shouldn’t stop once freight leaves the facility. Unexpected stops, routing changes, tracking inconsistencies, or movement that doesn’t match the transportation plan can provide additional signals that something has changed.
That post-pickup visibility becomes especially relevant when fraud involves legitimate carrier credentials or shipment information. Our broader approach to logistics fraud prevention combines carrier vetting, documented handoffs, shipment tracking, and continued verification as freight moves.
How PLS Screens Carrier Fraud Before Tender
PLS IQ CarrierCheck™ uses AI-driven screening before a load is tendered, adding an early checkpoint for two key fraud risks:
- Carrier Identity Fraud: Screens for signs that someone may be using legitimate carrier information or compromised credentials.
- Double-Brokering Risk: Screens for risk that a load could be passed to a carrier other than the one originally approved.
By screening for these risks before tender, CarrierCheck helps identify potential issues before freight is committed to a carrier.
Pre-tender screening is one part of the process. Continued verification and shipment visibility help address changes that can happen after the load is assigned.
Peak Season Freight Security Checklist
- Match the carrier to the approved carrier record.
- Confirm the driver, truck, and trailer.
- Compare contact information with independently verified records.
- Confirm pickup numbers and shipment details.
- Independently verify unexpected or last-minute changes.
- Verify routing or delivery changes through an established contact.
- Give warehouse teams a defined escalation contact.
A legitimate carrier can still receive a fraudulent instruction. Reverify when shipment information changes.
FAQ
Peak season brings higher freight volumes, tighter capacity, and faster carrier decisions, which can reduce the time available for verification. DAT cites Highway data showing fraud attempts increased 219% year over year in Q3 2025, with more than 48,700 fake carrier identities flagged during the quarter.
Recent warnings highlight compromised carrier accounts, business phone systems, email accounts, compliance-platform credentials, deceptive pickups, and shipment misdirection. Some schemes can continue after a legitimate carrier has already picked up the freight.
Yes. CargoNet warns that criminals with access to trusted communication channels can change delivery addresses, contacts, or other shipment instructions after pickup. This makes continued verification and shipment visibility important even after the carrier has been approved.
FMCSA recommends checking broker and carrier phone numbers against SAFER and investigating discrepancies before proceeding. Carrier identity should also be cross-checked against operating authority, insurance, verified contacts, driver and equipment information, and shipment details.
Changes to the driver, equipment, contact information, pickup appointment, delivery address, or routing instructions should be independently verified before freight is released or redirected. Verification should use an established contact or independently confirmed channel rather than relying only on the source of the change.
PLS IQ CarrierCheck™ uses AI-driven screening before a load is tendered to screen for carrier identity fraud and double-brokering risk before freight is committed to a carrier.