Strategic Cargo Theft: How Carrier Impersonation, Fictitious Pickups and Freight Fraud Are Changing Cargo Crime

ICTC Cargo Theft Intelligence Brief — Intelligence • Investigations • Prevention • Partnerships

By Commander Michael Ware | Illinois Cargo Theft Coalition

Cargo theft is changing.

For decades, cargo security focused heavily on protecting the physical shipment: secure the trailer, lock the doors, monitor the yard, protect the warehouse and track the tractor.

Those measures remain important. But today's organized cargo thieves increasingly understand that stealing the identity surrounding a shipment can be just as effective as stealing the truck.

A trailer can be secure. The paperwork can appear legitimate. The motor carrier can be real. The telephone number can look familiar. The driver can arrive at the correct facility. And the load can still disappear.

This is the world of strategic cargo theft.

The Numbers Tell Only Part of the Story

The cargo-theft environment in 2026 demonstrates why incident totals alone should never determine the level of risk facing the supply chain.

Verisk CargoNet documented 677 supply-chain theft incidents during the second quarter of 2026, a 26% decline from the same quarter in 2025. Yet estimated losses increased dramatically to approximately $304.6 million, more than double the estimated $135.7 million recorded during Q2 2025.

Among thefts where a commodity value was reported, the average reached approximately $564,000, although several extraordinary multimillion-dollar losses significantly affected that figure.

Fewer reported incidents do not necessarily mean less risk.

The criminal organizations capable of producing the largest losses are becoming increasingly selective. Rather than simply searching for any available trailer, sophisticated groups can identify specific commodities and exploit weaknesses in the transportation process.

What Is Strategic Cargo Theft?

Strategic cargo theft is fundamentally different from traditional straight theft.

In a traditional theft, offenders may steal an unattended tractor-trailer, break into a container, burglarize a warehouse or physically remove freight.

Strategic theft uses deception, identity manipulation, fraudulent documentation, compromised credentials or manipulation of legitimate transportation processes to obtain control of a shipment.

The offender may never have to defeat the trailer lock. Instead, the criminal convinces someone with legitimate control over the freight to release it.

Common strategic cargo-theft methods can include fictitious pickups, carrier impersonation, broker impersonation, compromised business email accounts, compromised telephone systems, fraudulent shipment redirection, credential theft, double brokering schemes, fraudulent bills of lading, identity manipulation, unauthorized changes to delivery instructions, and acquisition or misuse of legitimate motor-carrier operating authority.

The common denominator is trust. Criminals are exploiting the systems businesses use to determine who should be trusted with freight.

The Carrier May Actually Be Real

One of the most important developments for investigators and transportation professionals is the increased misuse of legitimate identities.

CargoNet's first-quarter 2026 analysis identified the maturation of impersonation-based theft as a significant tactical development.

Criminal networks have increasingly attempted to impersonate legitimate motor carriers and logistics brokers by obtaining access to credentials, business email systems, internet-based telephone systems and transportation-industry applications.

The company can be legitimate while the person controlling the communication is not.

Fictitious Pickups Remain a Serious Threat

A fictitious pickup occurs when criminals use fraudulent or compromised information to obtain a shipment while representing themselves as an authorized party.

The sophistication can vary considerably. Some attempts involve fraudulent paperwork or a driver simply claiming to represent the assigned carrier. More sophisticated operations may involve compromised carrier identities, legitimate-looking communications, authentic information about the shipment and multiple participants playing different roles.

CargoNet's Q2 2026 data illustrates why this threat deserves continued attention. Overall theft events declined substantially year over year, but reported fictitious pickup incidents moved only slightly—from 165 during Q2 2025 to 158 during Q2 2026.

Business Email Compromise Has Become a Cargo-Security Issue

Cybersecurity and cargo security can no longer operate as completely separate disciplines.

A compromised business email account can provide criminals with shipment information, transportation contacts, carrier details and knowledge of active transactions. That access may allow an offender to communicate from an environment employees already trust.

The same concern extends to software-based business telephone systems and transportation-industry platforms.

The criminal is no longer simply pretending to be inside the system. They may actually be operating from inside a trusted system.

The Shipment Must Be Verified Throughout Its Lifecycle

Historically, considerable attention has been placed on verifying a carrier when freight is tendered. That remains necessary, but modern cargo theft requires a broader approach.

Verification should continue throughout the shipment lifecycle: Booking → Tender → Dispatch → Pickup → In Transit → Delivery.

An unexpected change at any stage should create an opportunity for secondary verification. A changed telephone number, different driver, new tractor, unexpected delivery location, last-minute request, different email address, request to communicate outside the normal platform, or routing change may justify additional verification before control of valuable freight changes hands.

Investigate Beyond the Headlines

Understanding cargo-theft methods is only the beginning. ICTC's Basic Supply Chain Intelligence Investigator (BSCII) certification is designed to strengthen professional knowledge of cargo-theft investigations, intelligence, prevention and public-private collaboration.

BSCII is intended for law enforcement, investigators, loss-prevention professionals, transportation and logistics professionals, corporate security personnel and other qualified supply-chain stakeholders.

Understanding the Threat Is the Beginning. Learn How to Investigate It.

High-Value Freight Is Particularly Attractive

CargoNet reported increased targeting of metals during Q2 2026, with metal-theft incidents increasing from 54 to 80 compared with Q2 2025. Copper remained a frequent target, while other specialized industrial metals were also affected. Enterprise-grade computer and networking equipment remained another important target.

These shipments can represent extraordinary financial exposure while moving through the supply chain in trailers that appear no different from conventional dry freight. That mismatch between visible security profile and actual cargo value creates opportunity.

Intelligence Sharing Changes the Equation

No single police department, railroad, trucking company, retailer, broker, shipper or intelligence provider sees the entire picture.

One organization may identify a suspicious carrier. Another may have encountered the same telephone number. A retailer may recognize stolen merchandise. A railroad may identify recurring activity around a particular corridor. A logistics provider may identify a suspicious pickup. A law-enforcement agency may already have an active investigation involving the same individuals.

Individually, these may appear to be isolated events. Together, they can reveal an organized criminal enterprise.

Real-time public-private intelligence sharing is one of the most important tools available in the fight against organized cargo theft.

The Illinois Cargo Theft Coalition Model

The Illinois Cargo Theft Coalition was created around a straightforward principle: the people protecting America's supply chain must be able to communicate across organizational and jurisdictional boundaries.

Cargo theft does not stop at a city boundary, county line or state border. Increasingly, the criminal organization involved in a theft may operate hundreds or thousands of miles from where the freight disappears.

ICTC brings together professionals from law enforcement, logistics, transportation, rail, retail, loss prevention, cargo security and other areas of the supply chain. The goal is not simply to discuss cargo theft. The goal is to improve our collective ability to identify, prevent, investigate and disrupt it.

Commander Ware's Perspective

Throughout my career, one lesson has repeatedly proven itself: information becomes far more powerful when it reaches the right people quickly.

Cargo theft investigations demonstrate this every day. A seemingly minor piece of information from a shipper can become significant when combined with intelligence from a carrier, railroad, retailer, private-sector investigator or police agency.

The future of cargo-theft enforcement cannot be built around agencies and companies operating independently. We need investigators who understand the supply chain. We need industry professionals who understand criminal methodology. We need stronger intelligence networks. We need technology. And most importantly, we need trusted relationships between the public and private sectors before the next major theft occurs.

That is the mission we are building through the Illinois Cargo Theft Coalition. — Commander Michael Ware

BSCII Certification

Turn Intelligence Into Investigative Capability

Modern cargo theft increasingly intersects with organized crime, fraud, technology, identity compromise, transportation systems and traditional theft. Explore the Basic Supply Chain Intelligence Investigator (BSCII) certification through ICTC to strengthen investigative and intelligence capabilities.

Join the Illinois Cargo Theft Coalition

Intelligence is more valuable when it is shared. ICTC connects vetted professionals across law enforcement and the supply-chain community. Members receive access to ICTC's professional network, intelligence-sharing resources, educational content and member benefits, including 10% off ICTC training and conferences. Annual membership is $100.

ICTC Cargo Theft Intelligence Brief

This article launches the continuing ICTC Cargo Theft Intelligence Brief series. Each edition will examine emerging cargo-theft methods, investigative lessons, intelligence developments, prevention strategies, technology and public-private partnerships affecting the supply chain.

Intelligence • Investigations • Prevention • Partnerships

Illinois Cargo Theft Coalition — Building stronger intelligence. Developing stronger investigators. Protecting the supply chain.