Freight fraud · 7 min read
Jakub Wujec
Carrier identity theft risk signals before you assign the load
Carrier identity theft in freight usually means someone impersonates a real haulier: lookalike domain, email close to a known brand, correct company name in the thread but wrong VAT or bank details. Compare register extracts, licence, VAT, and contact data on booking day. Transport company identity theft is a risk signal pattern, not something one email proves.
Key checks before you assign the load
- VAT ID and company name from VIES match the register extract you pull today.
- Email domain is not a lookalike of the legal name from KRS or CEIDG.
- Invoice bank account appears on VAT whitelist where your country publishes accounts.
- Licence number in KREPTD or ARR ties to the same VAT ID as the invoice.
- Callback to register phone, not only the number in the email signature.
- Compare with past loads: same VAT, domain, and bank before reusing approval.
What not to rely on
- Logo and colour scheme on a PDF matching a carrier you know.
- MC or licence number quoted in email without verifying in the national register.
- Freight platform profile alone without same-day VAT and licence check.
- Display name in the inbox showing the trusted carrier brand.
- Assuming impersonation only happens to large enterprises.
- Reusing approval because "we used them last year" without checking VAT and domain today.
Why this risk signal matters and what it does not prove
Company existence alone is not carrier verification. A company can exist and still need deeper checks before you assign a load.
Carrier impersonation steals trust built on a real operator. Registers stay clean while payment and pickup details go to the wrong party.
- Lookalike domains target teams that recognize the brand but skip register comparison.
- A strong domain mismatch signal still needs human confirmation before pickup.
- Identity theft patterns often combine contact change with unchanged or reused paperwork.
- Stopping pickup detail release is the defensive win, not catching every scammer.
Red flags and common mistakes
Lookalike domain to a known carrier
Certica may flag a strong domain mismatch signal. Treat as impersonation risk until cleared with register callback.
Correct brand name but wrong VAT on the invoice
May indicate carrier impersonation using a familiar trading name.
Recent register change plus new booking contact
Could be legitimate succession or theft after a takeover. Requires review.
Invisible characters in the email address
Risk signal for spoofing. Re-type the address from the register site, not the thread.
Insurance bureau record on a different legal name
Policy holder mismatch may mean you are not contracting with the insured haulier.
How Certica highlights carrier impersonation signals
Certica automatically collects and analyses carrier verification data, detects risk signals, and supports your decision before a load is assigned.
Certica compares booking email and domain with register company data and highlights impersonation risk signals.
- Register name from KRS, CEIDG, ANAF, ARES, and other country sources.
- VAT and licence checked on the VAT ID you enter, not the display name in email.
- PDF bundles register extracts for internal fraud reviews.
Official sources
- EU VIES VAT validation (European Commission)
- Polish National Court Register (KRS)
- Polish CEIDG sole trader register
- Polish KREPTD transport register (GITD)
- Polish court filings register (RAR)
- Romanian ANAF VAT payer register
- Romanian ONRC insolvency bulletin (BPI)
- Romanian road transport licences (ARR)
- Romanian RCA insurance database (AIDA)
- Czech ARES business register
- Bulgarian Road Transport Agency (RTA)
- Latvian open government data portal
FAQ
How is carrier identity theft different from a fake carrier?
Fake carrier often means a shell or non-existent operator. Identity theft impersonates a real one. Both need register, licence, VAT, and contact checks on booking day.
What is the first check when impersonation is suspected?
Pull today’s register extract and VIES printout. Compare VAT, legal name, and address with the email domain and invoice. Call the register phone.
Does a lookalike domain always mean fraud?
It is a strong risk signal. Clear it with register callback and matching VAT before pickup.
Can transport company identity theft affect insurance claims?
Yes, if the load moves under the wrong contracting party or without valid cover on the actual haulier. That is why insurance bureau checks matter in the same pass.
Related pages
Certica
Run the same checks automatically
Certica collects registry, VAT, licence, insurance, and domain data in one run, applies risk rules, and saves a PDF audit trail before you assign the load.
No card required. Results usually return in seconds to a few minutes, depending on registry availability.