Fictitious pickup cargo theft: a freight fraud prevention checklist for warehouses
Cargo theft losses in the US and Canada reached $304.6M in Q2 2026 while fictitious pickups barely fell. The SIG Sauer case, fake carrier cases in Türkiye, a tactics table and a warehouse checklist.
In Torrance, California, a shipment of SIG Sauer products worth about $500,000 was released from a warehouse to someone who was not the real carrier. On October 27, 2026, the Los Angeles County Sheriff's Department announced two arrests and the recovery of the entire shipment [1]. The case is another reminder that fictitious pickup cargo theft now comes less from trailers stolen in parking lots and more from pickups that look legitimate on paper. Gangs using the same method were also caught in Türkiye in 2025 and 2026 [5][6]. This post brings together the data, the tactics and a checklist for warehouse and shipping teams.
The Torrance case: how a fictitious pickup works
According to FreightWaves, the theft took place at a warehouse in Torrance, and the sheriff's Cargo Criminal Apprehension Team (CCATS) investigated. SIG Sauer confirmed that the shipment contained air guns, not firearms or firearm parts as first reported [1]. The department has not explained how the fictitious pickup was carried out or identified the transportation provider [1].
The area is one of the most active cargo theft regions in the US. FreightWaves, citing an Overhaul report on Southern California, says the surrounding 200-mile area accounted for 37% of reported US incidents, and deceptive pickups represented 28% of cases in the region [1].
In a fictitious pickup, the criminal poses as the real carrier or its driver and collects the freight from the dock. No force is needed. The weak point is the short moment when you release the freight without confirming who is taking it [1].
Cargo theft data: fewer incidents, bigger losses
Verisk CargoNet's Q2 2026 analysis, published on August 6, 2026, shows a striking pattern in the US and Canada [2]:
| Indicator (US and Canada) | Q2 2025 | Q2 2026 |
|---|---|---|
| Total incidents | – | 677 (−26% YoY, −14% QoQ) |
| Estimated losses | $135.7 million | $304.6 million |
| Events classified as theft | 488 | 378 |
| Fictitious pickup events | 165 | 158 |
| Metal thefts | 54 | 80 |
| Average value among thefts with a reported value | – | $564,009 |
Source: Verisk CargoNet Q2 2026 analysis [2]. "–" means the figure is not given in the source. The average is heavily influenced by a few multimillion-dollar losses [2].
Quotable stat: according to CargoNet, cargo theft incidents fell 26% in Q2 2026, yet estimated losses more than doubled from $135.7 million to $304.6 million [2].
CargoNet says business email compromise (BEC) remained the primary access point for many of the most sophisticated schemes. Compromised accounts give criminals access to shipment information, communication systems and contact directories, which lets them impersonate trusted parties and change shipment details while appearing legitimate [2]. This links directly to the cyber risks covered in our posts on ClickFix attacks and barcode scanner security.
CargoNet's Q3 data had not been released as of our publication date. Highway, a software vendor, claims on the landing page of its Q3 2026 Freight Fraud Index that communication-based fraud now accounts for 50% of classified fraud vectors [7]. The full report is gated, so we could not verify this figure independently.
Europe: fake carrier fraud
In February 2026, the International Union of Marine Insurance (IUMI) and the EMEA chapter of the Transported Asset Protection Association (TAPA EMEA) issued a joint warning on fake carrier fraud [3][4]:
| Finding | Value | Source |
|---|---|---|
| TAPA records, 2022–2024 | About 160,000 cargo crimes in 129 countries | [4] |
| TAPA EMEA, last two years | More than 108,000 thefts in more than 110 countries | [3] |
| Losses among the 5% reporting a value | Over €1 billion | [3] |
| Average major incident (€100K+) | €878,525 | [3] |
| Germany (GDV), Jan–Jul 2025 | 88 phantom carrier cases, about one truckload every three days, around €18 million | [3] |
| North America, 2024 | $455 million, more than 3,600 incidents | [3] |
Source: IUMI and TAPA EMEA joint warning [3], TAPA EMEA announcement [4].
The warning lists the common tactics: spoofed or forged email addresses, look-alike domains, fake insurance certificates, counterfeit driver credentials and compromised accounts [3].
Fake carrier cases in Türkiye
Local cases using the same method have been reported in Türkiye. We found no national statistics. The table lists reported cases only:
| Date | Location | Method | Outcome |
|---|---|---|---|
| November 2025 | Aydın, Umurlu Organized Industrial Zone | Fraudsters cut out the real subcontracted carrier hired by a Russian buyer of a wheel rim factory; they wrapped a truck obtained in İzmir with the carrier's logo and fitted Russian plates | Truck stopped in Uşak, 4 suspects arrested [5] |
| March–April 2026 | Istanbul and five other provinces | Fraudsters infiltrated social media groups where carriers find jobs and bid below market; they used forged documents and cloned plates, then swapped trailers and tractors at a depot | 20 tonnes of aluminium, 32 scrap motorcycles and $70,000 of ketchup recovered; 8 arrests in total [6][8] |
Source: compiled by Digital Yakalılar from Ege Postası (DHA) [5], Sabah [6] and T24 (DHA) [8] reports, in Turkish.
The common thread is that the freight was handed to someone who looked trustworthy. Logos, plates and documents can be faked, so verification has to rely on independent channels rather than visual checks. One of the loads stolen in the Istanbul case was aluminium, which matches CargoNet's finding that metal theft is rising [2][6].
Types of cargo theft: which control stops what?
| Tactic | How it works | Preventive control |
|---|---|---|
| Fictitious pickup | Posing as the real carrier's driver to collect freight [1] | Confirm driver ID, plate and appointment number through the carrier's known phone number |
| Fake carrier / cloned plates | Fake truck wraps, cloned plates, forged documents [3][5][6] | Re-verify carriers for every order; check plates against registration documents |
| Cutting out the intermediary | Replacing the real subcontractor [5] | Accept subcontractor changes only with written, call-back-confirmed instructions |
| Business email compromise | Changing shipment details from a compromised account [2] | Confirm address and delivery changes outside email; use multifactor authentication |
| Social media / load board bait | Winning jobs with below-market quotes [6] | Put markedly below-market quotes into extra verification |
| Physical theft | Stealing loaded, unattended trailers [2] | Secure parking, GPS monitoring [3] |
Table prepared by Digital Yakalılar based on the methods and recommendations in the cited sources.
Freight fraud prevention checklist for warehouse and shipping teams
Based on the IUMI and TAPA EMEA recommendations [3] and the "verify before you release" principle highlighted by FreightWaves [1]:
- Vet carriers and drivers continuously, not only at onboarding [3]
- Verify the carrier's email address and phone number before every order, using a channel you already know [3]
- Watch for look-alike domains: one letter is enough [3]
- Match driver ID, plate and appointment number with the shipment record at the dock [1]
- Put last-minute changes of driver, truck or subcontractor on automatic hold; IUMI and TAPA EMEA treat them as clear warning signs [3][5]
- Confirm delivery address changes by calling back on a non-email channel [2]
- Put new carriers quoting well below market into extra checks [6]
- Cross-check driver credentials and broker details; fake insurance certificates are a common tactic too [3]
- Use multifactor authentication on freight exchanges and platform accounts [3]
- Use GPS monitoring and a secure parking plan for high-value loads [3]
- Apply existing standards such as the TAPA Cyber Security Standard and FBSR, plus your insurer's guidelines [3]
- Report any suspicious attempt to the police and your insurer immediately
For automating document and invoice checks in logistics, see our AI freight audit guide.
Frequently asked questions
What is a fictitious pickup?
It is when a criminal poses as the real carrier or its driver and collects freight from a warehouse. CargoNet recorded 158 fictitious pickup events in the US and Canada in Q2 2026 [2].
Is cargo theft increasing?
According to CargoNet, incidents in the US and Canada fell 26% in Q2 2026, but estimated losses more than doubled to $304.6 million [2].
How can you spot a fake carrier?
Logos, plates and documents can be faked, so visual checks are not enough. IUMI and TAPA EMEA recommend verifying contact details through an independent channel before every order and cross-checking driver and broker details [3].
Have fake carrier cases happened in Türkiye?
Yes. In November 2025, four people were arrested in Aydın after collecting a load with a truck carrying a fake wrap and Russian plates. In March 2026, members of a fake carrier gang were arrested in an Istanbul-based operation [5][6].
How is business email compromise linked to cargo theft?
According to CargoNet, compromised email accounts give criminals shipment data and communication channels, so they can change shipment details while appearing legitimate [2].
References
- FreightWaves, Phil Brink, "$500,000 SIG Sauer shipment stolen in fictitious pickup, two arrested in California", October 29, 2026 (updated October 30, 2026). https://www.freightwaves.com/news/500000-sig-sauer-shipment-stolen-in-fictitious-pickup-two-arrested-in-california (Accessed: October 31, 2026)
- Verisk CargoNet, "Verisk CargoNet records 677 incidents in the second quarter of 2026", August 6, 2026. https://www.cargonet.com/news-and-events/cargonet-in-the-media/2026-q2-theft-trends/ (Accessed: October 31, 2026)
- IUMI and TAPA EMEA, "IUMI and TAPA EMEA issue joint warning on fake carrier fraud and cargo crime risks" (PDF), February 2026. https://iumi.com/wp-content/uploads/2026/02/IUMI-and-TAPA-EMEA-joint-warning-on-fake-carrier-fraud-and-cargo-crime-risks.pdf (Accessed: October 31, 2026)
- TAPA EMEA, "IUMI and TAPA EMEA warn of escalating cargo theft and freight fraud", February 3, 2026. https://tapaemea.org/news/iumi-and-tapa-emea-warn-of-escalating-cargo-theft-and-freight-fraud/ (Accessed: October 31, 2026)
- Ege Postası (DHA), "Aydın'da nakliye dolandırıcılığında 4 tutuklama" (in Turkish), November 28, 2025. https://www.egepostasi.com/haber/Aydin-da-nakliye-dolandiriciliginda-4-tutuklama/375952 (Accessed: October 31, 2026)
- Sabah, Yunus Emre Kavak, "Sahte nakliye çetesinden akılalmaz vurgun!" (in Turkish), April 7, 2026. https://www.sabah.com.tr/yasam/dolandiricilarin-akil-almaz-oyunu-nakliyecilerin-grubuna-sizip-milyonluk-urun-caldilar-20-ton-aluminyum-32-hurda-motor-36-milyonluk-ketcap-7558575 (Accessed: October 31, 2026)
- Highway, "Q3 2026 Freight Fraud Index" (landing page; full report is gated). https://highway.com/reports/q3-2026-freight-fraud-index (Accessed: October 31, 2026)
- T24 (DHA), "'Uygun fiyata taşıyacağız' dedikleri malları çalan şebekeye operasyon" (in Turkish), April 7, 2026. https://t24.com.tr/gundem/uygun-fiyata-tasiyacagiz-dedikleri-mallari-calan-sebekeye-operasyon-onlarca-motosiklet-tonlarca-ketcap-calmislar,1312737 (Accessed: October 31, 2026)



