logo

Freight Fraud in 2026: 10 Red Flags for Freight Forwarders

Freight fraud has become a more sophisticated risk for the logistics industry. As freight forwarding becomes increasingly digital and interconnected, criminals are finding new ways to exploit legitimate business identities, compromised email accounts, fraudulent websites and weaknesses in shipment-verification processes. What may begin as a normal booking enquiry, carrier request or email exchange can ultimately result in cargo being diverted, money being redirected or sensitive business information being compromised.

The scale of the problem is significant. In April 2026, the FBI's Internet Crime Complaint Center (IC3) reported that estimated cargo-theft losses in the United States and Canada reached nearly $725 million in 2025, a 60% increase from 2024. Confirmed incidents increased by 18%, while the average value per theft rose 36% to $273,990. The FBI linked the increase to cyber-enabled strategic cargo theft involving impersonation, compromised accounts and fraudulent freight transactions. FBI IC3: Cyber-Enabled Strategic Cargo Theft Surging

For freight forwarders, this means fraud prevention can no longer be treated solely as a physical cargo-security issue. Businesses must also verify who they are communicating with, whether information is genuine and whether important instructions can be independently confirmed.

1. A New Carrier or Partner Cannot Be Independently Verified

A new carrier, broker or overseas partner should be independently verified before being trusted with a shipment. A professional website, company logo and business email address may create an appearance of legitimacy, but they do not necessarily prove that the organisation or individual is genuine.

The FBI identifies identity theft, fictitious pickups, fraudulent carriers and double-brokering as forms of strategic cargo theft. FBI Cargo Theft Guidance

Verification should therefore be part of normal partner onboarding rather than something introduced only after a transaction becomes suspicious. WTC Alliance's guidance on building strong partnerships with overseas freight agents also highlights due diligence, communication and reliability when developing international logistics relationships.

 

2. The Email Address or Website Looks Almost Legitimate

Digital impersonation works because fraudulent communication does not always look fraudulent. A criminal may use a domain with one altered character, an additional word or a minor spelling variation that can easily be overlooked during a busy working day.

The FBI's 2026 advisory specifically warns about spoofed domains, fake URLs and compromised accounts being used in cargo-theft schemes.

CLECAT's 2026 Guide on Preventing Identity-Based Cargo Theft identifies stolen company identities, phantom carriers, forged documents and fraudulent email domains as growing risks for freight forwarders and logistics providers.

A familiar company name or logo should therefore never be treated as sufficient authentication. Important shipment instructions should be checked against previously established contact information, particularly when they involve cargo release, payment changes or delivery instructions.

3. Someone Suddenly Wants to Change Payment Details

Unexpected requests to change bank accounts or payment instructions deserve additional scrutiny, especially when they arrive from a new email address or without the usual supporting documentation.

The safest approach is to treat any payment-detail change as a separate verification event. Instead of confirming the new information through the same email thread, employees should contact the customer or partner using a previously verified telephone number or another trusted communication channel.

This is particularly important in international freight, where transactions can involve multiple companies, currencies and jurisdictions. A fraudulent payment change can affect several parties before the original compromise is discovered.

4. An Unusual Request Comes With Pressure to Act Immediately

Urgency is normal in freight forwarding. Vessel cut-offs, airport deadlines, collection appointments and production schedules often require fast decisions. The warning sign appears when urgency is combined with pressure to bypass established verification procedures.

The FBI's June 2026 warning to the transportation and logistics industry recommends independently verifying shipment requests, carrier information and pickup details through trusted channels. FBI Philadelphia: Rising Cargo Theft Threats

A time-sensitive shipment still deserves proper verification. If someone insists that normal checks be skipped, the transaction should be slowed down rather than allowing operational pressure to override basic controls.

5. An Unexpected Link, Attachment or Login Request Appears

Email is fundamental to freight forwarding, but it has also become an important entry point for cyber-enabled cargo theft. The FBI reports that criminals have used spoofed emails and fake URLs to compromise broker and carrier accounts before using those accounts in fraudulent freight transactions.

An unexpected request to download a document, open an unfamiliar attachment, log into a new website or provide credentials should therefore be treated carefully. Employees should verify the request through an established channel before interacting with unfamiliar links or files.

Account security provides another layer of protection. CISA recommends requiring multifactor authentication for business accounts, particularly for email, file storage, remote access and sensitive accounts.

6. The Carrier's Identity Does Not Match the Shipment Information

Carrier verification becomes especially important when physical cargo changes hands. Company details, driver information, vehicle information, pickup instructions and shipment references should form a consistent picture. If those details do not match, the discrepancy should be investigated before cargo is released.

The FBI identifies fraudulent carriers and fictitious pickups as established forms of strategic cargo theft. Detailed information about carriers, drivers, vehicles and shipment arrangements can help operations teams identify inconsistencies before a handover takes place.

This is also why selecting reliable partners matters. WTC Alliance's network of trusted agents across 120+ countries reflects the importance of dependable international relationships in freight forwarding.

7. Pickup or Delivery Instructions Suddenly Change

Changes to shipment instructions can be legitimate, but an unexpected change to a pickup location, consignee, delivery address or carrier should not automatically be accepted simply because it arrives through an existing email conversation.

The FBI's 2026 advisory describes schemes where compromised carrier accounts have been used to accept legitimate shipments and subsequently manipulate shipping documents or change delivery destinations.

A practical internal rule is to independently verify significant changes through a known customer or partner contact rather than relying exclusively on the communication that requested the change.

8. A New Carrier or Intermediary Offers an Unusually Attractive Rate

An unusually low freight quotation is not automatically fraudulent. Rates can vary because of capacity, seasonality, carrier agreements and market conditions. However, an offer significantly outside normal expectations deserves closer examination when it comes from an unfamiliar carrier, broker or intermediary.

The important question is whether there is a credible commercial explanation for the rate. If an attractive quotation is accompanied by inconsistent company information, missing documentation, pressure to act quickly or resistance to verification, the overall transaction deserves greater scrutiny.

Forwarders should evaluate the identity and operating capability of a counterparty alongside its commercial offer. A low rate has little value if it exposes the customer or forwarder to cargo theft or financial loss.

9. The Documents Do Not Tell the Same Story

Documentation is one of the foundations of international freight, which makes inconsistencies between records an important warning sign. Company names, shipment references, cargo descriptions, pickup locations, delivery details and carrier information should generally align across relevant documents.

An inconsistency may simply be an administrative mistake, but unexplained discrepancies should be investigated before cargo is released or instructions are changed. The FBI has identified manipulated shipping documents and bills of lading as elements that can appear in strategic cargo-theft schemes.

WTC Alliance's Freight Documentation Checklist provides freight professionals with a useful reference for reviewing important documentation and verification processes.

10. Someone Is Trying to Bypass Normal Verification

Perhaps the clearest warning sign is when someone actively resists reasonable verification. A legitimate customer, carrier or logistics partner should generally understand why a freight forwarder needs to confirm an unusual request involving valuable cargo or sensitive information.

Greater caution is warranted when someone insists that established procedures be skipped, refuses to provide basic information or repeatedly changes their explanation.

CLECAT's 2026 guidance stresses stronger due diligence throughout the transport chain because identity-based cargo theft increasingly exploits digital communication, procedural weaknesses and operational pressure.

How Freight Forwarders Can Reduce Fraud Risk

Recognising red flags is only the first step. Freight forwarding companies also need practical controls that make verification part of normal operations.

A consistent partner-vetting process should be established for new customers, carriers, brokers and overseas agents, with due diligence proportionate to the value and risk of the relationship. Maintaining verified contact information is equally important because it gives employees a trusted route for confirming unexpected instructions.

Multi-channel verification is particularly valuable when a shipment request, pickup arrangement, carrier detail or delivery address changes. The FBI recommends independently verifying shipment requests and pickups through secondary methods before releasing loads.

Cybersecurity should also be treated as part of freight security. Multifactor authentication, secure account practices and employee awareness can reduce the risk of compromised business accounts being used for impersonation or fraudulent instructions.

Companies should also maintain appropriate records of shipment instructions, communications, carrier information, drivers, vehicles and delivery documentation. WTC Alliance's freight documentation guidance can support businesses in strengthening these processes.

Where commercial disputes do arise, WTC Alliance also provides dispute-resolution support for members, providing an established framework for addressing certain partner-related issues.

Freight Fraud Is Both a Logistics and Digital Risk

The biggest change in freight fraud is the growing connection between digital compromise and physical cargo theft. A compromised email account can influence a legitimate booking. A stolen company identity can facilitate a fictitious pickup. A manipulated document can redirect cargo. A fraudulent carrier can gain access to a shipment without the deception being immediately obvious.

The issue is also part of a wider supply-chain security challenge. Industry guidance from CLECAT highlights how deception-based cargo theft is increasingly exploiting digital communication, operational pressure and weaknesses in established procedures. CLECAT Supply Chain Security guidance

For freight forwarders, fraud prevention therefore cannot be treated solely as an IT responsibility. It involves operations teams, finance, documentation staff, customer service, carrier-selection teams and management.

WTC Alliance's article on the role of digital platforms in modern freight forwarding also reflects the increasingly digital nature of freight operations, making it important for forwarders to combine technology with strong human verification and trusted relationships.

Trust Your Partners — But Verify Critical Information

Freight forwarding depends on trusted relationships between customers, carriers, brokers and overseas agents. Those relationships remain essential to international trade, but trust should be supported by sensible verification whenever a transaction involves a new counterparty, high-value cargo, unusual instructions or a significant change to an established process.

The objective is not to make every shipment unnecessarily complicated. It is to create sensible controls around the points where a compromised account, fraudulent identity or simple verification failure can result in a substantial loss.

Forwarders that combine strong international relationships with disciplined verification practices will be better positioned to protect their customers, cargo and businesses as freight fraud continues to evolve.

Looking to strengthen your international freight network with trusted logistics professionals?

Visit www.wtcalliance.com to learn more about WTC Alliance and its global freight forwarding community.