Recovery guide
What to Do After Carrier or Broker Identity Theft
After carrier or broker identity theft, secure email, load-board, registration, phone and financial accounts; revoke unknown access; preserve fraudulent messages and login records; verify and correct official company contact information; notify customers and platforms through trusted channels; and follow FMCSA's identity-theft guidance plus appropriate cybercrime reporting routes.
Audience and scope: U.S. carriers, brokers, owner-operators, compliance teams, and authorized company representatives.
Contain the compromise
- Use a known-clean device to reset email, platform, registration, and financial credentials.
- Revoke sessions, remove unknown users and forwarding rules, and enable multifactor authentication.
- Verify FMCSA and SAFER contact details, then follow the official correction process for any unauthorized change.
- Warn affected partners with a consistent, factual notice and a verified callback number.
Preserve evidence before accounts or messages change
- Save the original rate confirmation, bill of lading, proof of delivery, invoices, dispatch records, and payment instructions.
- Export emails with headers, text messages, call logs, platform messages, login alerts, and account-change notices.
- Record dates, times, phone numbers, email addresses, URLs, IP or device alerts, DOT and MC numbers, vehicle details, locations, and names used.
- Keep originals in read-only storage and work from copies. Do not publish personal, banking, login, or identity documents.
Use the appropriate official reporting channel
The correct destination depends on what happened. FMCSA provides transportation-industry fraud guidance and the National Consumer Complaint Database. Cyber-enabled fraud may also belong with FBI IC3; suspected fraud affecting U.S. Department of Transportation programs may be reported to DOT OIG; consumer fraud can be reported to the FTC.
- Contact 911 or local law enforcement when there is immediate danger or an active theft.
- Report promptly and keep the confirmation or complaint number from every agency.
- Notify affected insurers, load boards, banks, factoring companies, customers, and business partners through independently verified contact details.