Freight fraud · 7 min read

Jakub Wujec

New carrier email domain risk signals before you assign the load

A new carrier email domain registered weeks ago while KRS or CEIDG shows a ten-year-old sp. z o.o. is a risk signal that requires review. Young domains are common after rebrands, but they are also common in impersonation. Compare domain registration date, register company age, and booking contact on the same day. It does not prove fraud by itself.

Key checks before you assign the load

  • WHOIS or domain registration date versus company incorporation in the register.
  • Whether the new domain replaced an older domain the carrier used on past loads.
  • Website content: real fleet photos, address, and phone matching the register.
  • Invoice and VAT name still tied to the same legal entity after the domain change.
  • Callback to register phone when only the email domain changed.
  • Licence and insurance still valid on the entity you contract with, not a new shell.

What not to rely on

  • Assuming every new domain is fraud; startups and rebrands happen.
  • WHOIS privacy hiding registration date without comparing website content and register data.
  • Old email threads forwarded from a colleague as proof the domain is safe.
  • A LinkedIn profile created the same week as the domain.
  • Carrier claim that IT is "still building" the site with no register callback.
  • Checking domain only after you already sent the pickup address.

Why this risk signal matters and what it does not prove

Company existence alone is not carrier verification. A company can exist and still need deeper checks before you assign a load.

A new carrier email domain is cheap to create. Registers and licences are harder to fake at scale, so fraud flows through fresh contact channels.

  • Domain age mismatch with register age may indicate impersonation of a mature haulier.
  • Legitimate rebrands usually show parallel updates in invoice, VAT, and register filings.
  • Certica treats very recent non-freemail domains as a stronger signal than freemail on a sole trader.
  • One info flag on registration date should trigger review, not automatic load approval.

Red flags and common mistakes

Domain registered in the last few months

Certica may flag a recently registered domain. Pair with register age before you treat it as innocent rebranding.

New domain plus recent board or shareholder change

May indicate takeover or impersonation after ownership movement. Requires review, not automatic rejection.

Parked page or template site on a active licence

Risk signal when the operator claims established operations but the site is empty.

New domain with country mismatch to VAT registration

Could be a foreign parent company. Still verify before high-value cargo moves.

Urgent lane paired with "we moved to a new website"

Pressure plus contact change is a pattern worth escalating internally.

How Certica flags a new carrier email domain

Certica automatically collects and analyses carrier verification data, detects risk signals, and supports your decision before a load is assigned.

Domain analysis uses WHOIS registration dates and compares domain age with company register age. Very young domains may need manual review.

  • Compare domain registration with company age from KRS, CEIDG, ANAF, or ARES in one run.
  • Parked or placeholder website on an active licence.
  • WHOIS country mismatch with carrier VAT country.
  • PDF report documents domain signals next to register extracts for audit trails.

Official sources

FAQ

How new is suspicious for a carrier email domain?

There is no universal cutoff. Certica flags very young domains against register age. Your process should treat a young domain on an old register entry as a review item, not proof of fraud.

Can a rebranded carrier use a new domain safely?

Yes, with evidence: updated register filings, VAT whitelist bank accounts, licence continuity, and a callback from a known director or register phone.

Does a new domain always mean new domain carrier fraud?

No. It is a risk signal. Combine with licence, VAT, insurance, and lookalike checks before you decide.

What if WHOIS hides the registration date?

Certica may use historical domain data or return an info result. Fall back to register callback and manual WHOIS from your security team if needed.

Related pages

Certica

Run the same checks automatically

Certica collects registry, VAT, licence, insurance, and domain data in one run, applies risk rules, and saves a PDF audit trail before you assign the load.

Check 20 carriers for free

No card required. Results usually return in seconds to a few minutes, depending on registry availability.