You sent your carrier packet, and now you think the person on the other end wasn’t the broker.

Slow down for a second. This is bad and it is not the end. Almost everything worth doing is worth doing today rather than next week, and none of it costs money. Here is the order.

First: what actually happened, and what didn’t

A carrier packet is not a password. Most of what is in it is already public or semi-public — your MC and USDOT numbers, your legal name, your address, your authority. What makes an assembled packet worth stealing is that it is assembled: a current certificate of insurance, a W‑9, a signed carrier agreement, and often a notice of assignment telling whoever holds it where your money goes. Together those are enough for someone to look like you to a third party.

So the realistic risk is not that something happens to your account tonight. It is that, over the next few weeks, freight gets booked in your name with somebody else’s phone number and email attached — and the first you hear of it is a shipper, a broker or a factor calling you about a load you never hauled. The point of the next hour is to get ahead of that call: warn the people who will receive it, and write down what happened while you still remember it exactly.

The next hour

1. Call the broker on the number FMCSA lists — not the number you were given. Look the MC up yourself and dial what is on the public record. This is the single highest-value thing on this page. If someone used a real broker’s identity, that one call ends the uncertainty: you reach the actual company and they tell you they never posted it. They will also want to know, because their name is the one being used, and they can sometimes tell you what is already circulating.
2. Tell your factor before an invoice does. If you factor, call them now — not after something shows up. They see this constantly, they would far rather hear it from you first, and they are the ones who will catch a duplicate or altered invoice. If a notice of assignment went out in the packet, say so explicitly: that document tells a payer where to send money.
3. Tell your insurance agent that a current certificate went out. A COI in the wrong hands is what makes a fake version of you look real to a shipper. Your agent can note it and tell you what, if anything, they want to change.
4. Write the timeline down while it is fresh, and screenshot everything. Dates and times. The load and reference numbers on the posting. The exact phone number, email address and domain you were given. Which documents you sent, and when. The thread itself, before anyone deletes their side of it. If this later becomes a bond claim, an insurance question or a report, you will need this and you will not remember it. Ten minutes now is the cheapest work in this list.
5. Look up your own record, and look again in a week. Pull your own MC on the public FMCSA lookup exactly the way you would pull a broker’s, and read the phone, email and address on it. Unauthorized edits to a carrier’s own record are a known pattern, and the whole value of catching one is catching it early. Put a reminder in for seven days.
6. Report it. Two places, both free:
   • FMCSA’s National Consumer Complaint Database — nccdb.fmcsa.dot.gov. This is the federal record for broker and carrier complaints, including identity misuse.
   • The FBI’s Internet Crime Complaint Center — ic3.gov — if money moved, or if there was a wire, a payment redirect or an altered remit‑to.
   FMCSA also keeps a plain-language page on broker and carrier fraud and identity theft on fmcsa.dot.gov. If there is a physical theft of freight, that is also a police matter and it belongs with local law enforcement as well.
7. Tell your own people what to expect. Whoever answers your phone and whoever opens your paperwork should know that calls about loads you never hauled, and rate confirmations for loads nobody booked, are now possible. That is much less alarming when somebody warned them first.

Four things not to do

• Don’t send anything else to the same contact to “verify.” Not a corrected W‑9, not a second COI, not a copy of your driver’s license. There is nothing left to confirm by sending more.
• Don’t pay to make it go away. A release fee, an unlock fee, a “compliance registration,” a fee to correct your own record — none of those are things FMCSA or a real broker will ask you for at this stage.
• Don’t delete the thread. It is evidence, and it is the only copy you control. Archive it if you want it out of your face.
• Don’t post the company name in a group. This one is counter-intuitive and it matters. If a posting borrowed a real broker’s name, that company is a victim too — and a public accusation against a named business is your legal exposure, not theirs, permanently, in a thread that will still be the top search result in three years. The useful thing to pass on is never the company name. It is the contact: the phone number, the email address, the domain that was one letter off. Those get reused. The company name is the part that was borrowed.

What usually happens next

The mistake most people make afterwards is assuming that if nothing goes wrong this week, nothing will. The damage in these cases is usually deferred, and it tends to arrive as email:

Where LaneScout fits, and where it doesn’t

Everything above works whether or not you ever install anything. Three parts of what we built are relevant to this specific situation, and it is worth being exact about which.

• The follow-up arrives by email, so that is the half that helps now. LaneScout’s optional mail layer reads the message you have open in Gmail and puts a banner above it listing what doesn’t line up: a link that points at a program instead of a document, a sending domain registered days ago, a message invoking FMCSA from an address that isn’t a .gov one. It doesn’t block, delete or move anything, it is off until you switch it on, and it needs no load board. It is the paid half — part of Pro, $15/mo, while the board badges stay free. What the mail layer checks.
• You report the contact, not the company. This is the part built for exactly the situation on this page. You submit the phone number, email address or domain that was actually used. It goes into a queue and a person reads it — nothing you report changes what any other dispatcher sees until an operator approves it. It then matches that exact contact and never a company name, so the broker whose identity was borrowed is never flagged for it; they are sent a factual notice instead, with a link to contest it. A free-mail domain can’t become a flag at all, because millions of ordinary senders share one. Reporting needs a free sign-in, which is how the queue stays accountable.
• What it will not do: get your documents back, tell you whether a broker pays, or tell you that a company is fraudulent. It shows you facts from a public record with a date on them and you make the call. If you are on the receiving end of a flag you think is wrong, there is a public form, no account needed, and a person reads it.

The board half — a Clear / Caution / High Risk / Unverified badge on every broker row of the DAT One load board, from the public FMCSA record — is about the next posting rather than this one. The manual version of that check is here, and it is free too.

This page is general information for carriers and dispatchers, not legal advice. If money has moved or a contract is in dispute, talk to your own attorney.