FBI Warns of Cybercriminals Using Fake Companies to Hijack Cargo Shipments

The FBI has issued a public service announcement warning the transportation and logistics sector about a sharp rise in cyber-enabled cargo theft.

Criminal groups are increasingly impersonating legitimate businesses to hijack freight shipments and resell stolen goods in underground markets.

According to the FBI, these attacks are becoming more organized and financially damaging. In 2025 alone, cargo theft losses across the United States and Canada surged by 60%, reaching nearly $725 million.

Confirmed incidents also increased by 18%, with the average loss per theft climbing to $273,990 as attackers focus on high-value shipments.

Growing Threat to Logistics Sector

Cybercriminals are no longer relying on physical theft alone. Instead, they combine cyber intrusion with supply chain manipulation.

By posing as trusted brokers, carriers, or logistics partners, attackers exploit weaknesses in communication systems and identity verification processes.

These operations often involve fake business identities, stolen credentials, and manipulated documentation.

The result is a seamless fraud chain that appears legitimate until the cargo disappears.

The FBI highlights a multi-stage attack process used by threat actors to infiltrate logistics operations and redirect freight.

• Attackers begin by spoofing broker emails and sending phishing messages disguised as carrier agreements.
• These emails contain shortened links that lead to fake websites, which install malware or remote access tools on victim systems.
• Once access is gained, criminals log in to trucking load boards and post fraudulent freight listings.
• Legitimate carriers unknowingly bid on these fake loads, allowing attackers to spread phishing campaigns further.
• Threat actors then impersonate compromised carriers and accept real shipment requests.
• Using manipulated bills of lading, they redirect cargo to complicit drivers through cross-docking or transloading techniques.
• In some cases, attackers even modify carrier details in Federal Motor Carrier Safety Administration (FMCSA) records to appear legitimate.

This layered approach allows criminals to operate undetected until the shipment is already stolen and resold.

Organizations should monitor for warning signs that indicate possible cyber-enabled cargo theft:

• Unexpected communication about shipments that were never authorized.
• Emails sent from free domains instead of official company addresses.
• Messages urging urgent downloads through shortened or suspicious links.
• Phishing emails referencing fake complaints or negative reviews.
• Unauthorized mailbox rules that forward or delete emails automatically.
• Slight changes in sender domains, such as misspellings or unusual extensions.

Early detection of these indicators can prevent further compromise and financial loss.

The FBI urges companies to strengthen their defenses against these evolving threats.

• Enforce two-factor authentication across all systems and accounts.
• Use multi-channel verification to confirm shipment requests and pickup details.
• Avoid relying solely on email communication for critical operations.
• Maintain detailed records of drivers, including identification, vehicle details, and carrier credentials.
• Train employees to recognize phishing attempts and suspicious communication patterns.

Organizations should also immediately report suspected incidents to law enforcement and the Internet Crime Complaint Center (IC3) to support investigations and prevent further attacks.

As cybercriminals continue to refine their tactics, logistics companies must adopt proactive security strategies to protect their operations and supply chains from financial and reputational damage.

Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google