Freight fraud · 7 min read

Jakub Wujec

Last reviewed: 16 June 2026

Carrier identity theft risk signals before you assign the load

Carrier identity theft in freight usually means someone impersonates a real haulier: lookalike domain, email close to a known brand, correct company name in the thread but wrong VAT or bank details. Compare register extracts, licence, VAT, and contact data on booking day. Transport company identity theft is a risk signal pattern, not something one email proves.

Key checks before you assign the load

VAT ID and company name from VIES match the register extract you pull today.
Email domain is not a lookalike of the legal name from KRS or CEIDG.
Invoice bank account appears on VAT whitelist where your country publishes accounts.
Licence number in KREPTD or ARR ties to the same VAT ID as the invoice.
Use an independently found or previously confirmed contact channel: public contact from CEIDG or the transport register, the company website, a CRM contact, or a number confirmed on earlier loads. Do not rely only on the number in the suspicious email.
Compare with past loads: same VAT, domain, and bank before reusing approval.

Quick triage before you assign the load

Impersonation cases pass a first glance because the brand name is real. Verify the entity, not the name.

Step 1: Pull a same-day register extract and VIES printout

Compare VAT, legal name, and address from the register with what appears on the invoice.

Step 2: Check the invoice bank account against the VAT whitelist

Where your country publishes whitelisted accounts, confirm the bank account on the invoice is listed for that entity.

Step 3: Confirm the licence number ties to the same VAT ID

Check KREPTD, ARR, or the local register and match the licence to the VAT ID on the invoice, not just the brand name.

Step 4: Confirm contact through an independent channel

Do not copy the contact from the thread. Use an independently found or previously confirmed channel: public contact from CEIDG or the transport register, the company website, a CRM contact, or a number confirmed on earlier loads.

If the load is already moving

Contact the real carrier through an independently found or previously confirmed channel, not the booking thread, to confirm they sent the truck.
Check the driver ID and plate at pickup against the insurance bureau record.
Freeze payment until the VAT ID and bank account are confirmed to match.
Request a GPS or tracking link straight from the vehicle.
File a police report if you cannot reach the real carrier or suspect the load has been diverted.

What not to rely on

Logo and colour scheme on a PDF matching a carrier you know.
MC or licence number quoted in email without verifying in the national register.
Freight platform profile alone without same-day VAT and licence check.
Display name in the inbox showing the trusted carrier brand.
Assuming impersonation only happens to large enterprises.
Reusing approval because "we used them last year" without checking VAT and domain today.

Why this risk signal matters and what it does not prove

Carrier impersonation steals trust built on a real operator. Registers stay clean while payment and pickup details go to the wrong party.

Lookalike domains target teams that recognize the brand but skip register comparison.
A strong domain mismatch signal still needs human confirmation before pickup.
Identity theft patterns often combine contact change with unchanged or reused paperwork.
Stopping pickup detail release is the defensive win, not catching every scammer.

Red flags and common mistakes

Lookalike domain to a known carrier

A strong domain mismatch is an impersonation risk signal. Treat it as such until cleared through an independently confirmed contact channel.

Correct brand name but wrong VAT on the invoice

May indicate carrier impersonation using a familiar trading name.

Recent register change plus new booking contact

Could be legitimate succession or theft after a takeover. Requires review.

Invisible characters in the email address

Risk signal for spoofing. Confirm the address through an independent channel, not the thread.

Insurance bureau record on a different legal name

Policy holder mismatch may mean you are not contracting with the insured haulier.

When you want register and contact checks in one place

Certica compares booking email and domain with register company data and highlights impersonation risk signals.

Register name from KRS, CEIDG, ANAF, ARES, and other country sources.
VAT and licence checked on the VAT ID you enter, not the display name in email.
PDF bundles register extracts for internal fraud reviews.

Certica

Don't want to do this on every booking?

Certica pulls data from the same registers, checks it, and shows a clear result: what is OK, and what needs clarifying before loading.

Check 20 carriers for free

Official sources

FAQ

How is carrier identity theft different from a fake carrier?

Fake carrier often means a shell or non-existent operator. Identity theft impersonates a real one. Both need register, licence, VAT, and contact checks on booking day.

What is the first check when impersonation is suspected?

Pull today’s register extract and VIES printout. Compare VAT, legal name, and address with the email domain and invoice. Confirm contact through an independently found or previously confirmed channel.

Does a lookalike domain always mean fraud?

It is a strong risk signal. Clear it with an independently confirmed contact channel and matching VAT before pickup.

Can transport company identity theft affect insurance claims?

Yes, if the load moves under the wrong contracting party or without valid cover on the actual haulier. That is why insurance bureau checks matter in the same pass.