Fictitious Pickups: Where Carrier Vetting Meets Verification

Late on a Friday, the dock gets an email about a refrigerated load scheduled for pickup that afternoon. It appears to come from the 3PL handling the move: the assigned carrier had a breakdown, and a replacement truck will arrive at 4:00.

The truck arrives on time, and the driver has the correct pickup number, the PO, and the delivery address. The load is released.

An hour later, the originally assigned carrier calls to say its driver is running late.

The dock had the right shipment information. What it did not have was independent confirmation that the truck in front of it was the truck actually assigned to the load.

That is the risk with a fictitious pickup: strategic cargo theft can succeed when freight is handed to the wrong party willingly.

Strategic Theft Doesn’t Need to Break In

The FBI distinguishes between several types of cargo theft. Straight theft involves physically taking freight from its current location, often at truck stops, parking areas, drop lots, rail yards, or other places where cargo is left unattended. Strategic theft works differently. It relies on deception, convincing the people handling the shipment to release freight to someone posing as the legitimate carrier.

Cyber cargo theft can enable that deception. Phishing and other cyberattacks can give thieves access to a company’s systems, where they may retrieve sensitive shipment information and use legitimate-looking paperwork or communications to support a fictitious pickup.

In its second-quarter 2026 analysis, Verisk CargoNet recorded 677 theft incidents across the U.S. and Canada, 26% fewer than a year earlier. Estimated losses still reached $304.6 million, more than double the same quarter in 2025. Events classified as theft fell from 488 to 378, while fictitious pickups held nearly flat, at 158 compared with 165.

CargoNet named business email compromise as the primary access point for many of the quarter’s most sophisticated schemes. The fraud schemes that create that access are covered separately. What matters here is where the deception ends: at the dock, in front of someone deciding whether to release the load.

Where the Release Decision Goes Wrong

A fictitious pickup can be set up well before the truck reaches the dock. The release decision is built across several points, and each one can be compromised along the way.

At tender. A carrier assignment is only as reliable as the channel that made it. The FBI’s April 2026 alert describes thieves who take over legitimate carrier accounts and bid on real loads under that carrier’s name. On paper, the assignment looks clean because the carrier is real.

When something changes late. A new truck, driver, or phone number after assignment comes with a deadline attached: the replacement is arriving at 4:00. That urgency can make a last-minute change feel routine when it should trigger additional verification. It is the same kind of late carrier change that can disrupt a delivery plan or create a breakdown in a freight handoff. The FBI notes that a familiar name or email address alone does not confirm who sent a message, and that spoofed addresses can differ from the real one by a single character.

At the dock. In the opening scenario, release depended on the driver having the pickup number, the PO, and the destination. Those are exactly the details a compromised account can supply. CargoNet notes that access to one account can let thieves see shipment information and alter shipment details while appearing legitimate.

At each point, the information checks out. What is missing is confirmation from a source the thief does not control.

What Carrier Vetting Covers, and What It Doesn’t

Carrier vetting answers questions about the carrier: whether it holds active authority, carries the required insurance, and meets the safety criteria for approval. Those checks matter at tender. On their own, they do not confirm who is driving the truck that pulls up to the dock.

The FBI’s alert shows why a record alone can mislead. In the schemes it describes, thieves changed legitimate carriers’ contact and insurance information with FMCSA. A record check could show a real carrier with current details the carrier did not enter.

First Call’s qualification process adds checks beyond the record itself. Insurance is verified using documentation from verified insurance producers and independent validation resources rather than carrier-submitted documentation. Business and contact information is reviewed across multiple sources to help confirm the carrier is legitimately connected to the company and the operating authority it represents.

Monitoring continues after approval for changes in authority, insurance status, safety and compliance indicators, and operations. Vehicle identification information is verified on every load.

Technology supports those checks, but human review still matters when something does not line up. Carrier qualification can establish who should be moving the freight. Pickup verification still needs to confirm that the truck and driver at the dock match that expectation.

Checkpoints Before a Load Is Released

The checks happen at different points in the process. Some happen before the load is tendered. Others depend on confirming the driver and equipment that actually arrive at pickup.

Federal guidance supports that layered approach. The FBI recommends independently verifying shipment requests and pickups through secondary methods and confirming driver, truck, and trailer identifiers at pickup. FMCSA recommends checking that the name and identifying numbers on the truck match the contracted carrier and recording tractor and trailer plate information.

The FBI also recommends using a secure pickup number. But a pickup number is only one control. If that number is exposed through a compromised account or communication channel, having the correct number no longer confirms the identity of the person presenting it.

Fictitious Pickup Prevention Starts Before the Truck Arrives

The release decision at the dock depends on what happened before the truck arrived: who was assigned, how changes were confirmed, and what the dock was told to expect. Physical security still matters, and the steps for protecting your supply chain from cargo theft cover that side. A locked yard alone cannot prevent a loss when the wrong party is allowed to leave with the freight.

For temperature-controlled freight, First Call FRESH is FCL’s dedicated cold chain team. To discuss carrier qualification and verification practices for your freight, talk to our team.