How to protect high-value freight when thieves don't need to break in

You protect high-value freight by controlling who it is released to: authenticate the driver and the truck before the pickup number goes out, and keep a record of every step. Most expensive loads today aren't cut out of a trailer. They're handed over at the dock to someone who arrived with the right paperwork.

The numbers show the shift. In Q2 2026, Verisk CargoNet recorded 677 theft incidents, down 26% year over year, while losses more than doubled to $304.6 million and the average theft reached $564,009 (Verisk CargoNet, Aug 2026). Fewer thefts, bigger targets.

Most high-value loads aren't broken into anymore; they're handed over to someone using a borrowed identity, so protecting them means authenticating the person and the truck before the pickup number is released, and keeping a record of every step.

What makes a load high-value to a thief?

To a thief, a load is high-value when it resells fast, not just when its declared value is high. CargoNet reported in Q1 2026 that criminals show "a clear preference for goods that move easily through online resale channels," with personal care and beauty thefts up 178% (Verisk CargoNet, Apr 2026). In Q2, metal thefts rose to 80 incidents, led by copper, and enterprise technology was a repeated target.

Food and beverage is still the most-stolen category by count. That matters for your SOP: a load with a modest declared value can still be a prime target if it sells quickly online.

So flag loads by theft appeal, not only by a dollar threshold. Commodity, resale channel, and whether the freight will sit staged over a weekend all belong in the decision about which loads get your strictest controls.

How are high-value loads stolen today?

Most are stolen through impersonation: someone poses as a real carrier, broker, or driver and is handed the freight. CargoNet describes impersonation as now "systematic, scalable," and names business email compromise as the main way into the most sophisticated schemes. If you want definitions of each scheme, our guide to the types of freight fraud brokers face covers them. Here is what they look like on a high-value load.

A $1.7M Walmart-bound load left with the right paperwork and the wrong truck

A Walmart supplier lost about 103,000 units bound from Lynn, Massachusetts, to a Walmart distribution center in Pennsylvania, according to the company's statements reported by FreightWaves and Cybernews. The loss was about $1.7 million. As reported, it happened in steps:

1. A legitimate carrier was allegedly phished through a fake freight confirmation link that installed a Trojan.
2. The attackers won the load on DAT as that carrier. The account passed the shipper's FMCSA and MC checks because the carrier was real.
3. Posing as a broker, they hired legitimate drivers who didn't know they were part of a theft.
4. The trucks didn't match the carrier's paperwork. They were released anyway, because the drivers had the right reference numbers.
5. After pickup, the drivers were redirected to the Bronx. The goods were not recovered.

The drivers did their jobs. The thieves used real drivers as cover, which is exactly why a reference number on its own proves nothing about who is behind a load.

Five CDLs and four plates in one cab

A major shipper caught a man on camera changing a truck's license plate in its lot and called the police. When the truck was pulled over, the man had five CDLs and four license plates in the cab. That is what a borrowed-identity kit looks like when it reaches your dock.

Why don't carrier vetting, seals, and GPS stop it?

Each one checks the wrong thing at the wrong time. In the $1.7M case, the carrier passed FMCSA and MC checks because it was a real carrier; the thieves had borrowed its identity. Carrier vetting tells you who owns the truck, not who's driving it.

Seals and GPS trackers start working after the load is released. If the freight was handed to the wrong party at the dock, the tracker reports faithfully where the thief takes it.

The FBI makes the same point about familiarity. Its April 2026 alert warns against treating familiar names or email addresses as proof, because attackers now take over real accounts and have even changed carrier contact information with FMCSA (FBI IC3 PSA I-043026-PSA).

How do you protect a high-value load at each step?

Put one control at each step of the load lifecycle, and make sure each control leaves a record. CargoNet notes that theft can happen at tender, at pickup, or after a legitimate carrier takes possession, through a changed delivery address (Verisk CargoNet, Sep 2026).

Before tender: treat every email and phone number as unproven

Confirm the carrier and its contacts through a second channel before the load is tendered. Call back on the number listed in FMCSA records, not the one in the email signature (FMCSA). Phishing pages spoofing load boards and dispatch tools are circulating around FMCSA's Motus rollout, so a link that looks routine deserves the same scrutiny.

At dispatch: get the driver, truck, and phone on the record

Before anyone shows up, require the driver's name, power unit number, and phone number on the BOL. Your dock then knows who to expect, and any mismatch is visible before the load moves.

At pickup: authenticate the person and the truck before the pickup number goes out

This is the one step a borrowed identity can't skip. Match the driver's face to the CDL, and match the truck's markings and VIN to the carrier that was tendered. Watch for magnetic decals over old markings, and for a CDL whose front and back don't agree.

The FBI recommends documenting all parties at pickup, including photos of drivers, licenses, vehicles, plates, cab and truck numbers, and DOT and MC numbers. In the $1.7M case, the trucks didn't match the paperwork. A check at this step would have stopped the release.

In transit: treat any reroute as a red flag until the shipper confirms it

A call or email changing the delivery address, or asking to make the load "blind," is how a legitimate pickup becomes a theft. Confirm any change with the shipper on a known number before the driver acts on it. The redirect to the Bronx in the $1.7M case is this step.

Holidays and weekends: tighten controls when freight sits staged

CargoNet's Labor Day analysis found losses exceeded $359 million in the first half of 2026, with an average stolen value of about $341,518, and flagged holiday weekends as persistent exposure. Limit releases of high-value staged freight to named, pre-confirmed drivers, and keep someone accountable for approving each one.

What record should you keep, and who relies on it?

Keep a timestamped log of who was authenticated, what was checked, and who released the load. Phone calls and CDL photos sent by text aren't a reliable record; after a loss, they turn into one person's recollection against another's.

Your SOP audits, your insurer, and your counsel all need the same thing: proof that the control ran, on this load, before release. Industry standards point the same way: TAPA's 2026 Facility Security Requirements require certified facilities to identify every driver with government-issued photo ID, keep a driver log, and retain collection records for at least two years (TAPA FSR 2026). For what makes that record defensible, see your driver conversations are evidence now.

How E3 driver authentication protects high-value loads

E3 driver authentication puts the pickup control and the record in one step. The pickup number stays locked until the driver, the CDL, and the truck pass. The go/no-go decision lands in Slack or Teams, and every step is logged.

The checks map to how high-value loads are taken. E3 matches the face in the driver's video to the CDL, compares truck markings to the tendered carrier, flags magnetic decals and front/back CDL mismatches, and checks where requests are coming from, including email origin, VPN, and VOIP signals. That is more than 50 fraud signals, run in under 60 seconds.

Global Protection told FreightWaves it "intentionally slowed down the process" after its loss. Most shippers think that is the trade-off. It doesn't have to be: authentication takes under a minute, 96% of drivers respond, and E3 integrates with your TMS and can be running in a day.

The results so far: 700,000+ authenticated loads with zero stolen loads. One of the largest electronics manufacturers went from losing five loads a week to zero after implementing E3. Backed by our 100% fee-refund promise. If a theft occurs on an E3-authenticated shipment, we refund every fee paid to date.

E3 helps you design the pickup SOP, then runs it, so the record your insurer and counsel need exists on every load. It also protects the real driver, whose identity or labor thieves borrow. It doesn't secure a compromised inbox on its own, so pair it with email security upstream. If you are comparing tools, start with eight questions that separate driver authentication tools.

Frequently asked questions

What is the most common way high-value freight is stolen?

Through impersonation. Thieves pose as a real carrier, broker, or driver and are handed the load, often after compromising an email account. CargoNet names business email compromise as the main way into sophisticated cargo theft schemes.

What should you check before releasing a high-value load?

Check that the driver's face matches the CDL, and that the truck's markings, VIN, and plates match the carrier that was tendered. The FBI recommends photographing drivers, licenses, vehicles, plates, and DOT and MC numbers at pickup.

Do GPS trackers prevent cargo theft?

Not on their own. Trackers report where freight goes after release; they can't tell you whether it was released to the right person. Use them alongside a pickup control.

A high-value load checklist

• Confirm carrier contacts independently, on numbers you sourced yourself.
• Put the driver's name, power unit, and phone on the BOL.
• Authenticate the driver and truck before releasing the pickup number.
• Never accept a reroute without shipper confirmation.
• Keep the record, and report incidents to IC3 and FMCSA.

Tell us which loads you can't afford to lose, and we'll show you where a borrowed identity could get through. Book a demo.