By Vokrix Team

Estimated cargo theft losses across the U.S. and Canada surged to nearly $725 million in 2025, a 60% increase over 2024, while the average value per theft rose 36% to $273,990 (Verisk CargoNet, 2025 A
TL;DR: Cargo theft and double brokering are getting worse, not better. Verisk CargoNet's 2025 Annual Cargo Theft Analysis puts estimated cargo theft losses across the U.S. and Canada at nearly $725 million, a 60% increase over 2024, with the average value per theft up 36% to $273,990. Brokers are absorbing a growing share of that risk because the carrier they booked is often the carrier they never really verified. Carrier vetting software closes that gap by checking operating authority, insurance, identity, and safety data before the load moves, and then continues checking after it moves. This post covers what to look for in a vetting platform, how to verify authority and insurance properly, how to spot double brokering and carrier impersonation, why one-time onboarding vetting fails, and how to document the whole process so you can defend against negligent hiring claims.
Double brokering used to be an annoyance. Now it's an organized crime business model. A fraudster registers or hijacks an MC number, takes your load, re-brokers it to an unwitting carrier at a fraction of the rate, pockets the difference, and disappears. Sometimes the load arrives intact and you only find out weeks later when the real carrier calls about an unpaid invoice. Sometimes the load never arrives at all, and you're the one explaining to your customer why their $273,990 worth of freight is gone.
The uncomfortable part is that most of these schemes get caught at exactly one moment: onboarding. A broker checks the MC number, sees active authority, confirms a certificate of insurance, and books the load. Every check passed. The problem is that the check was a snapshot of a moment, and the fraud happens weeks later, after the paperwork was filed and the inspection was done.
Carrier vetting software exists to make that snapshot into a continuous feed. Instead of a spreadsheet and a phone call, you get automated pulls from FMCSA data, insurance verification, and identity signals, refreshed on a schedule, with an alert when something changes. The practical standard most brokerages are moving toward is a hybrid: automation for the volume checks, human review for anything flagged.
Start with identity. The most common impersonation pattern is a carrier whose email domain, phone number, or address doesn't match its FMCSA registration, or one that shares a phone number or address with several unrelated MC numbers. If your vetting tool can't flag those overlaps, it isn't doing the job.
Then verify operating authority directly against FMCSA records, not against a PDF a carrier emailed you. A screenshot of an authority letter is not authority. Authority is a status in the federal system, and it changes. A carrier that was active when you onboarded can be out of service by the time the load delivers.
Insurance works the same way. A certificate of insurance is only as good as its verification. Ask for the certificate with your brokerage named as certificate holder, then call the insurance agent at the number on file with FMCSA, not the number the carrier provided. Fraudulent certificates are common, and the fastest way to catch one is to use a phone number you independently sourced.
For double brokering specifically, watch the dispatch-side signals. A carrier that can't produce a driver's name and phone number. A dispatcher email that's a free Gmail account on a carrier with 40 trucks. A rate confirmation that comes back with a different carrier name in the margin. A request to change the delivery address after booking. A driver who arrives with a different company name on the truck than the one on your paperwork. Each of these alone is explainable. Two of them together is a stop-work signal.
This is where continuous monitoring earns its keep. Insurance lapses, authority revocations, and out-of-service orders happen mid-contract. A monthly re-check catches most of them. A daily or event-triggered check catches the ones that matter, which are the ones that happen between the moment you vet and the moment the truck loads.
The legal side is why documentation matters as much as detection. Negligent hiring and negligent selection claims against brokers have gotten more serious, and Montgomery v. Caribe Transport is the case most brokers cite when they explain why their vetting process went from informal to formal. The lesson from that line of cases isn't that you must catch every fraudulent carrier. It's that you have to show you had a reasonable process and you followed it every time.
That means a written carrier vetting policy, applied consistently, with records you can produce. Contracts, W-9s, authority verification timestamps, insurance verification with the verifying source, safety data, screening results, and an audit trail of who approved the carrier and when. If your process varies by rep, or if the only evidence of vetting is a memory, you're exposed regardless of how careful you actually were.
The cost math is simple. Verisk CargoNet's data shows the average theft is now worth more than a quarter million dollars, and that's before you add the customer relationship, the insurance deductible, the legal fees, and the reputational hit. A vetting platform that costs a few dollars per carrier per month is not a close call.
Here's how to think through the practical questions.
There isn't one universally best platform, because the right choice depends on your volume, your customer contracts, and how much of your process you want automated. That said, the features that separate serious tools from basic MC-number lookups are consistent. You want native FMCSA integration that pulls live authority and safety data rather than cached snapshots, insurance verification that confirms coverage directly with the insurer or a verified certificate database, identity and fraud signals such as phone number and address overlap detection across MC numbers, continuous monitoring with alerts rather than one-time checks, and an audit trail you can export when a lawyer asks for it. Some brokerages pair a dedicated vetting platform with their TMS and a load board's carrier onboarding tools rather than relying on any single system. The practical test is to ask what the tool does on day two, day thirty, and day ninety of a carrier relationship. If the answer is "nothing, it checked once at onboarding," it's a screening tool, not a compliance system.
Verify authority directly against FMCSA records using the carrier's MC or DOT number, and confirm the operating status is active and authorized for the type of freight you're tendering. Don't accept an emailed authority letter or a screenshot as verification, because both are trivially forged and neither reflects current status. For insurance, require a certificate of insurance naming your brokerage as certificate holder, then verify it independently by contacting the insurer or agent using the contact information on file with FMCSA rather than the phone number the carrier gives you. Confirm the auto liability and cargo coverage limits meet your requirements and your customer's requirements, check that the policy is currently in force and not in a grace period or cancellation notice, and note the expiration date so you can re-verify before it lapses. Record the date, time, and source of every verification step. The verification is only as valuable as your ability to prove you did it.
Look for mismatches and pressure. Impersonation usually shows up as contact information that doesn't match FMCSA registration, an email domain unrelated to the company name, a phone number shared across multiple unrelated MC numbers, or a recently changed address with an otherwise long-established authority record. Double brokering tends to surface on the dispatch side: a carrier who can't or won't name the driver and provide a direct driver phone number, a dispatcher using a personal email account, a truck arriving with different branding than the carrier of record, requests to change the delivery location or contact after booking, or a rate confirmation that comes back with a different entity's name on it. Individually, each signal has an innocent explanation. In combination, they justify stopping the load and re-verifying before it moves. The cheapest intervention available to a broker is a phone call to a carrier's verified corporate number asking for the driver's name and the exact equipment assigned, and the willingness to walk away when the answers don't line up.
One-time vetting is not enough for any brokerage moving meaningful volume, because the risk profile of a carrier changes after you onboard it. Authority can be revoked, insurance can lapse or be cancelled for non-payment, safety ratings can deteriorate, and a carrier that was legitimate in January can be a shell entity by June. Continuous monitoring means automated re-checks on a defined cadence, typically daily or weekly for active carriers, with event-triggered alerts when a key attribute changes. The goal isn't to re-do the full onboarding process every month. It's to know quickly when something material changes so you can stop tendering loads to that carrier and re-verify. Most brokers who get burned by a double brokering scheme find out that the carrier's insurance had lapsed weeks earlier and nobody was watching. Monitoring is what converts vetting from a gate into an ongoing control.
Write the policy down, follow it every time, and keep the records. A defensible process starts with a documented written standard covering what you verify, what thresholds a carrier must meet, who has authority to approve exceptions, and what triggers re-verification or removal. Apply that standard uniformly, because the fastest way to lose a negligence claim is to show that one rep skipped the insurance call for a carrier they liked. Keep the evidence: the signed carrier agreement with anti-double-brokering and anti-rebrokering language, the W-9, the authority verification with a timestamp, the insurance verification showing the source you used and the coverage limits, safety and inspection data, screening results, and an audit log of who approved the carrier and when. Retain these records for at least the applicable statute of limitations in your operating jurisdictions, which in personal injury matters can run several years. The point of the documentation isn't to prove you were perfect. It's to prove you had a reasonable process in place and that you applied it consistently, which is the standard a court will actually evaluate.
Ready to try it?