Loading…
If a broker calls asking about a load you never booked, or a load-board notice shows activity you don't recognize, someone may be operating under your MC number without your permission. This is different from a fraud flag on your own KnowHaul profile or from a broker's detection checklist — you are the legitimate, active carrier being impersonated, and the fix runs through your own accounts and the federal record, not a broker's vetting workflow. This guide covers how to confirm what's actually happening, lock things down fast, report it to the right places, and prevent it from happening again.
An MC number gets "stolen" one of three ways: someone takes over your load-board account, someone gets into your FMCSA registration using a compromised PIN, or someone impersonates your business to brokers without ever touching your actual accounts. Confirm which one happened first — the fix is different for each. Then lock down every account tied to your authority (load-board passwords, FMCSA registration PIN, email), file an FMCSA complaint and a DataQs request to get the federal record corrected, notify your insurance agent and any brokers who were contacted, and consider a police report or IC3 filing if money moved. After it's resolved, rotate your FMCSA PIN periodically and never hand it to a dispatch service you don't fully control.
An MC number is a public identifier, not a secret — anyone can look up your authority, insurance status, and safety record for free. What can't be public is control: your load-board login, your FMCSA registration PIN, and your relationships with the brokers who already trust you. "MC number theft" almost always means one of those three was compromised or bypassed, not that the number itself was cloned.
That distinction matters because it decides where the fix happens. If your load-board account was taken over, the fix is a password reset with that vendor. If your FMCSA registration PIN was compromised, the fix is a PIN reset with the federal regulator. If neither was touched and someone is simply telling brokers they're you — a pure impersonation with no account access at all — the fix is almost entirely about warning brokers and getting ahead of the confusion, since there's no account to lock.
A fraud flag on your KnowHaul carrier profile is a rules-engine read of your own federal record — see the fraud-flag dispute guide for that. This guide covers the opposite problem: someone else using your legitimate, active identity to deceive brokers, with no KnowHaul flag involved at all.
MC number misuse is rarely discovered through your own dashboards — it's discovered because someone else notices the mismatch first and calls you.
Any one of these is worth investigating immediately — the earlier you catch it, the smaller the blast radius, especially if a payment is mid-flight.
Before you can lock anything down, figure out which of the three mechanisms you're dealing with. Log into your load-board account(s) directly (not through a link in an email or text) and check the login history and recent activity. Then check your FMCSA registration — sign in at the URS/SAFER registration portal with your own PIN and confirm your contact and address fields still match what you filed.
If your load-board login history shows sessions or IP addresses you don't recognize, or your FMCSA record shows a field you didn't change, you have a real account compromise. If both come back clean and the only thing that happened is a broker got a call or email "from you" that you never made, you're dealing with pure impersonation — no account was touched, someone is just using your public MC and business name to sound legitimate.
If Step 1 turned up any sign of account access, treat every credential tied to your authority as compromised until proven otherwise — do this before you spend time on reporting.
Impersonation scams sometimes follow a compromise with a fake "verify your FMCSA account" email designed to harvest the new credentials too. Always navigate to the FMCSA registration site directly rather than clicking a link, and never give your PIN to anyone who contacts you first.
Reporting does three things: it starts the federal-record correction, it puts your insurer and factoring company on notice so they can flag suspicious activity, and it creates a paper trail if money moved.
Once the immediate incident is handled, the durable fix is reducing how many places your credentials live and how long a stale one stays valid. Rotate your FMCSA registration PIN on a regular schedule, not just after an incident — treat it the way you'd treat a shared admin password. Audit which dispatch services, factoring companies, and load-board sub-accounts actually have your PIN or login today, and revoke anything you no longer actively use.
It's also worth periodically checking how your own carrier record looks from the outside — the same public data brokers pull when they vet you (authority status, contact info, insurance filings) is what an impersonator can lean on to sound credible. If something on your public record looks wrong or stale, that's worth correcting even outside an active incident.
Any dispatch service, dray broker, or back-office vendor holding your PIN can file on your behalf — which is convenient until that relationship ends or one of their systems is compromised. Rotate the PIN whenever a vendor relationship ends, and keep a short list of who currently has it.
Brokers land on this guide too, usually after a carrier calls saying "that wasn't us." The fastest broker-side check is to call the carrier back at a phone number from their public record or a prior legitimate booking — never the number that came with the suspicious load — and confirm the load in question directly. If the details don't match, treat it as a likely impersonation and preserve the communication (emails, texts, the rate confirmation) as evidence.
This scenario overlaps with, but isn't identical to, double-brokering: double-brokering is a carrier accepting a load and re-tendering it, usually to a real second carrier. A pure MC impersonation may involve no re-tender at all — just someone posing as an established carrier to get a load, a deposit, or sensitive information. The detection habits are the same phone-and-paperwork checks covered in the double-broker guides below.
The most common tell is a broker, shipper, or factoring company contacting you about a load, invoice, or delivery you don't recognize. Beyond that, check your load-board login history for unfamiliar sessions and your FMCSA registration for any field that changed without you making the change. If both come back clean and it's only a report from someone you don't know, it's likely pure impersonation with no account access involved.
Yes. Because your MC number, legal name, and DOT status are public, a bad actor can call a broker directly, claim to be your company, and quote your public authority and insurance details without ever touching your load-board account or FMCSA registration. This is pure impersonation — the fix is reporting and broker outreach rather than a password reset, since there's no compromised account to lock.
No — filing an FMCSA complaint or a DataQs request does not suspend your operating authority. Your authority stays active while the federal review runs. The one exception is if the impersonation itself caused a real compliance problem tied to your DOT number (for example, a fraudulent inspection or crash record was attributed to you) — in that case DataQs is exactly the mechanism to get the incorrect record removed before it affects your safety profile.
The registration PIN is the credential FMCSA uses to authenticate who's allowed to file on your behalf — updating your MCS-150, BOC-3, or authority information. If someone obtains it, they can alter your federal filings directly. It's functionally a shared admin password: reset it through the official URS portal any time you suspect compromise, and rotate it whenever a dispatch service or vendor holding it no longer needs access.
If any field on your federal record — address, contact info, insurance — was altered without your consent, file a DataQs Request for Data Review with FMCSA. This is the official channel for correcting your own carrier data. It's a different process from KnowHaul's own carrier-profile correction dialog, which only affects how your data displays here, not the underlying federal record.
You are not liable for a load your business never actually accepted or hauled, but you may need to prove that if a broker or shipper comes after you for a load an impersonator booked in your name. This is exactly why documentation matters: the FMCSA complaint, the DataQs filing, and your own account-activity logs are what establish that the booking wasn't yours. Brokers who were affected should be notified directly so the confusion doesn't turn into a collections dispute later.
Paste an MC, DOT, or VIN to verify a carrier in one card. Free, no signup.
Free, no signup. Paste a DOT, MC, or VIN — verify right away.
Search by your DOT or MC to see what your public record currently shows, and use the 'Report something wrong' dialog if anything looks altered.
Read the joined authority, insurance, and safety view exactly the way a broker checking you would see it.
Carrier-side guide to resolving a fraud flag on your KnowHaul profile — what the flags actually mean, how to gather the evidence that clears each one, and the step-by-step correction workflow.
Authority history is the single strongest fraud-detection signal in the public record. This guide explains how to read the granted/revoked/reinstated timeline and how to spot the identity-flip pattern that drives modern double-brokering scams.
How double brokering works in 2026, recent fraud patterns, and a prevention checklist for freight brokers and shippers who want to stop the bleed.
Open one of these profiles in a new tab to see how the checklist applies to a live carrier record.
Search your own DOT or MC to see your current authority, contact, and insurance record — and flag anything that doesn't match what you filed.