Most carrier vetting fails not because somebody skipped it, but because it happened in the wrong order or produced nothing that could be shown later. A process that catches a revoked authority after you have already sent the rate confirmation has cost you the leverage you needed. A process that catches everything but leaves no dated record has protected the load and not the company.
This is the sequence that catches the most problems fastest, with what to capture at each step.
The context worth keeping in mind: cargo theft losses reached roughly $725 million across the US and Canada in 2025, a 60% year-over-year increase, and 22% of brokers reported losing more than $200,000 to fraud in a single six month period (Verisk CargoNet / TIA). The average confirmed theft was worth $273,990. This is no longer a tail risk you can absorb.
1. Identity, before anything else
Start with the DOT number from the carrier packet and confirm the legal name matches. If the packet says one name and the registration says another, stop and resolve it before continuing.
A dba is normal and expected. A completely different legal entity is not. The most common innocent explanation is that the packet was built from the dba; the most common fraudulent one is that somebody is using a real carrier’s credentials with their own contact details.
Capture: DOT number, legal name, dba, address on file.
2. Operating authority
Confirm the docket status is active and that the authority type covers what you are tendering. Common carrier authority for property is what most loads need.
Check the registration status as well, because it can legitimately disagree with the docket status. An inactive USDOT registration alongside active authority usually means a biennial MCS-150 update lapsed, which is an administrative problem rather than a bar on operating. A revoked docket is a different matter entirely. See MC number vs DOT number for why these two fields diverge.
Capture: authority status, docket number, registration status, date checked.
3. Out-of-service status
A current out-of-service order ends the conversation. There is no risk-tolerance judgment to make: tendering freight to a carrier under an active federal out-of-service order is the cleanest negligent-selection fact pattern a plaintiff’s lawyer will ever be handed.
Check it immediately before tender rather than at onboarding, because orders are entered continuously and a carrier you approved three weeks ago can be under one today.
Capture: out-of-service status and date.
4. Insurance
Get the certificate directly from the insurer or their certificate portal, not forwarded from the carrier. A forwarded PDF is the easiest document in this entire process to alter, and altered certificates are common enough that treating them as authoritative is negligent on its own.
Confirm four things: the coverage limits meet your customer’s requirements, the policy is current on the date of the load, the named insured matches the carrier you are booking, and the coverage type actually covers the freight (cargo limits are frequently lower than people assume, and some policies exclude specific commodities outright).
Capture: insurer, policy number, limits, effective and expiry dates.
5. Cross-entity linkage
Take the phone number and the address and look for other carriers registered against them.
This is the step most brokers skip, and it is the one that surfaces chameleon carriers and re-brokering operations. One shared contact detail warrants a question; several, with overlapping officer names and a similar company name, warrants declining. Run it free with the double brokering risk check.
Be proportionate here. Shared dispatch numbers are common among legitimate small fleets, and a shared address is often just a registered agent. What matters is the cluster appearing together, not any single match. See chameleon carriers for how to separate the two.
Capture: linked DOT numbers found, and the carrier’s explanation.
6. Fleet plausibility
Check reported power units and drivers against the registration date and the reported annual mileage. You are not verifying capacity here, you are checking whether the carrier’s own filing is internally consistent.
A carrier reporting 40 trucks, 3 drivers, and 200,000 annual miles has filed numbers that cannot all be describing the same operating business. That does not prove anything improper, but it does mean the fleet figure in front of you is not telling you what it appears to tell you. See reading fleet size.
Capture: power units, drivers, MCS-150 filing date.
7. Contact verification
Call the number on the FMCSA registration, not the number in the email signature. Ask for the company by its legal name.
This single step defeats a surprising share of impersonation attempts, where a fraudster uses a real carrier’s DOT number, name, and insurance certificate with their own phone number and email address. The real carrier, in those cases, has no idea any of this is happening and will tell you so immediately.
If the registration phone and the packet phone differ, that is not automatically suspicious, carriers change numbers. But it means the verification call goes to the registration number, and the discrepancy goes in the file.
8. The questions worth asking out loud
Three questions, asked directly, do more work than most document review:
- “Has this company operated under another name or DOT number?” An honest operator with a prior authority answers immediately and explains why, because they have had to explain it to every broker they have approached.
- “Who is driving, and what is the truck and trailer number?” Write the answer down. You will check it at pickup.
- “Will this load be moved on your own authority, by your own driver?” Getting a “yes” in writing converts a later re-brokering from a dispute into a documented misrepresentation.
What the file has to contain
The file is not proof that you are careful. It is proof of what was true at the moment you booked.
Each step above should produce a dated record, held together so that a year from now someone can see the carrier’s status as it stood on the day the load moved. That matters because the underlying data does not stand still: authority gets reinstated, linked entities dissolve and drop out of the census, and insurance certificates are replaced. If you have to reconstruct the carrier’s status after a claim, you will find that the record you needed no longer exists in that form anywhere.
If a claim is filed, the question will be what you knew and when. A file that answers that question precisely with timestamped records is worth considerably more than one that describes a thorough process without evidence of any particular instance of it.
The step that happens after booking
Verification at booking is necessary and not sufficient. Authority is revoked, insurance lapses, and out-of-service orders are entered while your load is in transit.
Two controls cover the gap:
Monitoring. Put the carrier on a watchlist so a change in authority, phone, or address between booking and delivery reaches you as an alert rather than as a surprise during a claim investigation.
Confirmation at pickup. Ask the shipper who actually showed up: the company name on the truck, the driver’s name, the trailer number. Compare it against what dispatch told you in step 8. A mismatch is the moment to stop the load, and it is the last moment at which stopping it is cheap.
When a check fails, what actually happens next
Vetting guidance usually stops at “decline.” In practice most findings are not binary, and knowing which ones are recoverable saves you carriers you should be booking.
Hard stops, no judgment involved. Active out-of-service order. Unsatisfactory safety rating that has not been upgraded. Revoked authority where the load is interstate and for hire. In each case there is no version of the file that makes booking defensible, and no rate that compensates for it.
Recoverable the same day. A lapsed biennial MCS-150 filing showing as an inactive registration while the docket is active. An insurance certificate that expired last week where the insurer confirms a renewal is in force. A name mismatch that resolves to a dba. Ask, verify, record the answer, book.
Recoverable with conditions. A conditional safety rating, a very new authority, or a single shared contact detail with a plausible explanation. These are bookable decisions, but they are decisions: write down what you found, what the carrier said, and why you accepted it. A documented accept-with-reasons is defensible. An undocumented one is indistinguishable from never having looked.
Decline, but say why. Multiple linked entities with overlapping officers and a denial when asked directly. A carrier whose story changes between the first and second call. Refusal to provide insurance through the insurer. You do not have to prove fraud to decline, and you should not tell the carrier you suspect it. “We are not able to move forward on this one” is a complete sentence.
One practical note: if you decline for a reason that looks like a genuine fraud indicator, report it. FMCSA takes complaints through the National Consumer Complaint Database, and the industry’s ability to catch these operations depends on the pattern being visible across many brokers rather than sitting in one company’s notes.
Doing this in ten minutes
In practice the sequence above takes a few minutes per carrier once it is routine, and most of that is the insurance certificate and the phone call. The FMCSA data checks resolve in seconds against a single record if your tooling pulls authority, registration, out-of-service, fleet, and cross-entity linkage in one view rather than making you open four tabs.
Start with the free DOT and MC lookup for steps one through three and six, and the risk check for step five. The insurance certificate and the phone call are the two parts no tool can do for you, and they are also the two that catch the most sophisticated attempts.