Same conversation, over and over, across two years of mid-market fleet work: an operator describes a recent loss, calls it a fictitious pickup, and we find it was actually a double-brokering incident. Or the reverse. Two different patterns, two different defenses. Confusing them is exactly why the same fleet gets hit twice.
Below: what each one actually is, the controls that block each in 2026, and how to run one defense program that covers both.
What each one is
Fictitious pickup (physical fraud)
Someone shows up at a shipper's dock, impersonates a legitimate carrier, and drives off with the freight. Stolen MC numbers, faked DOT credentials, plausible emails to your dispatcher, real-looking ID. Freight is gone before anyone notices the real carrier never showed up.
Double brokering (contractual fraud)
A broker — or someone posing as one — accepts a load, then re-brokers it to an unsuspecting carrier without authority to do so. The fraud broker grabs the payment, disappears, and leaves the shipper and carrier holding the bag. In the worst variant, the fraud network then steals the load using the innocent carrier's paperwork as cover.
The key difference
Fictitious pickup is physical fraud. Someone walks into a dock with bad paper and drives off with your freight. Double brokering is contractual fraud. Someone in the chain accepts an assignment they shouldn't and re-brokers it deceptively.
They can be combined — a sophisticated network double-brokers freight to an innocent carrier, then steals that load via fictitious pickup downstream — but the controls that block each are different.
Why both have surged in 2025–2026
Three things have moved at once:
- The dispatcher attack surface ballooned. Carriers and brokers now run dispatch through portals, APIs, and integrations that didn't exist five years ago. Every integration is a phishing or credential-theft vector. The FBI/IC3 has issued multiple alerts on cyber-enabled cargo theft tied to those exact vectors.
- Recovery rates haven't moved. Cargo recovered after a theft is still under 25% on high-value loads. The math favors the thief — especially in jurisdictions where cargo crime sits at the bottom of the prosecution stack.
- Defenses haven't kept up. Most carrier and shipper SOPs predate strategic cargo theft as a category. At most docks, identity verification means "did the driver show up roughly on time with the right paperwork." That isn't enough in 2026.
Verisk CargoNet pegged 2025 U.S. cargo theft losses at nearly $725 million — up 27% year over year. Strategic cargo theft, including both fictitious pickup and double brokering, grew fastest.
How to block fictitious pickup
Five controls. Together they kill ~80% of the risk before freight moves:
- Verify the driver and credentials at the gate. Photo ID, DOT credentials, and plate before the trailer backs in. Train your dock team to recognize real CDLs in the states you run.
- Confirm the carrier through a channel they didn't hand you. Before you release freight, call the carrier's official number — pulled from FMCSA SAFER, not from the driver's paperwork — to confirm the assignment.
- Use rolling pickup codes. The carrier hands the shipper a unique pickup code through a verified channel. The driver presents that code at the dock. No code, no freight.
- Video every pickup. Driver, tractor, trailer plate. Timestamped. Retained 90 days. This is your evidence file if something goes sideways.
- Verify the seal before the trailer leaves. The seal applied at loading must be verified before departure. Any discrepancy is a hard stop.
These cost almost nothing — they're SOP and training, not hardware. Most fleets don't run them because nobody owns the whole workflow end to end.
How to block double brokering
Five controls. Together they shut down most of the contractual fraud:
- Vet every broker against multiple databases. FMCSA broker authority, complaint history, surety bond status, days in business, industry blacklists. New brokers get multi-source verification before they touch a load.
- Require re-broker disclosure in writing. Broker contracts must call out any intent to re-broker, with real penalties for doing it without disclosure.
- Control the money. Pay the hauling carrier directly when you can. When you can't, require proof of carrier payment before you cut the broker's check. Most fraud rides the float between when the broker gets paid and when the carrier expects to.
- Track every load through every party. GPS-verified telematics, pickup to delivery, with the data visible to every legitimate party — not just the broker.
- Monitor for exceptions. Any anomaly in pickup time, route, or delivery vs. the dispatched plan kicks off automated review. Pattern detection across loads catches the systematic fraud.
Your role in the chain determines your control points
| Your role | Primary fictitious pickup control | Primary double brokering control |
|---|---|---|
| Shipper | Driver and credential verification at dock; rolling pickup codes | Broker vetting; direct carrier payment where possible |
| Carrier | Verify dispatcher emails are legitimate; verify pickup assignment through carrier channels | Vet brokers before accepting loads; require written re-broker disclosure |
| Broker | Provide rolling codes to shipper; verify carrier identity | Don't accept assignments you don't intend to own; vet downstream carriers |
| 3PL / Forwarder | End-to-end visibility; identity verification at every handoff | Contract enforcement; payment-flow control across multi-party chains |
What your cargo policy actually covers
Most operators assume their cargo policy covers fictitious pickup and double-brokering losses. That assumption is increasingly wrong.
Insurers have been quietly rewriting cargo policy language with exclusions or conditional coverage for "theft by fraud," "mysterious disappearance," and fraud-induced loss of possession. Some now require specific verification protocols at pickup as a condition of coverage — meaning if you didn't follow the protocol, the loss isn't covered.
Pull your cargo policy and read the language with your broker before you assume a fraud loss is covered. If your underwriter offers a premium credit for documented verification protocols, the math almost always favors running the protocols.
Who owns this at your company?
This isn't a one-role problem. Four functions touch it:
- Operations — dispatch verification SOPs and gate controls
- Risk / Insurance — contract language, broker vetting standards, carrier insurance verification
- Security — training, video coverage, incident response
- IT / IS — email security, dispatcher portal access, credential protection
The fleets that handle this well name one coordinator — usually the COO, VP Ops, or an outsourced security director — to keep all four functions moving in lockstep. Without that coordinator, the controls live in silos and the fraud finds the seams.
Next step
Want a written read on which of these controls are open in your operation? We do a free Fleet Vulnerability Assessment for qualified fleets. $25K of consulting work, $0 to you. We map your fictitious pickup and double-brokering exposure, rank your 5 biggest risks, and give you two quick wins your team can run in 30 days. Five business days from intake to written report. We accept 8 fleets a month — five spots left in May.
Related: What a cargo theft incident actually costs and How underwriters grade your security program.

