CORCA Is Coming. Deceptive Pickups Are Already Here. Here's What Brokers Must Do Now.

The Numbers That Should Change How You Vet Carriers

On May 12, 2026, the U.S. House of Representatives passed H.R. 2853 — the Combating Organized Retail Crime Act (CORCA) — by a bipartisan vote of 348–60. The bill now sits before the Senate. Its passage matters to every freight broker and shipper in America, but not primarily for the reasons most trade coverage has focused on.

The legislation matters because of what it confirms about the threat already in front of you.

Strategic theft — the category of cargo crime built on fake identities, forged carrier credentials, and fraudulent documentation — has surged 1,500% since 2021, according to CargoNet. In Q1 2026, deceptive pickup schemes rose 31% compared to the same period in 2025, with nearly half of those incidents occurring in California. Overall cargo theft cost the trucking industry more than $18 million per day, according to the American Transportation Research Institute.

Those figures represent the operational environment your carriers move freight through right now, before CORCA becomes law.

What CORCA Actually Does — and What It Doesn't

CORCA creates a coordination center within the Department of Homeland Security to align federal, state, and local law enforcement against organized cargo and retail theft networks. It broadens the definition of qualifying offenses by allowing prosecutors to aggregate stolen-goods values over a 12-month period, classifies these thefts as predicate offenses for federal money laundering charges, and authorizes asset seizure — including proceeds funneled through prepaid cards and gift cards.

In short, CORCA is a law enforcement tool, not a broker compliance rule. It makes it easier to prosecute and dismantle organized theft rings after the crime. It does not create a pre-tender vetting requirement. It does not mandate carrier identity checks at load assignment. It does not give FMCSA new real-time authority to flag shell carriers before a load moves.

The enforcement gap between the crimes CORCA targets and the moment a broker hands a load to a stranger is the gap your vetting process must fill.

What the Deceptive-Pickup Surge Reveals About Vetting Failure

Deceptive pickups are not smash-and-grab operations. They are identity operations. Criminals show up with the right DOT number, the right carrier name, and forged paperwork that passes a casual glance. In many cases, they operate under the hijacked credentials of a legitimate carrier — a real MC number, a real insurance certificate, a real USDOT displayed on a truck that doesn't belong to the carrier on the rate confirmation.

This is the core insight CargoNet's Q1 2026 analysis reinforces: a bad actor does not always build a new fake company. Often, they steal the identity of an existing one.

That means the standard broker checklist — active MC number, valid insurance, no "Unsatisfactory" safety rating — is insufficient. All three boxes can be checked by someone who has cloned or hijacked a legitimate carrier's profile. The question is not whether the DOT number exists. The question is whether the entity presenting that DOT number today is the same entity that earned it.

That distinction is exactly what identity verification is built to answer. Checking operating authority and insurance status in real time, cross-referencing the carrier's state-of-incorporation officer records, tracing shared phone numbers or email addresses across multiple DOT registrations, and flagging newly activated authorities linked to previously revoked operators — these steps expose the impersonation layer that static compliance checks miss entirely.

What This Means for Your Vetting Process

CORCA's momentum signals that federal scrutiny of cargo theft — and the industry practices that enable it — is intensifying. The Supreme Court's May 14, 2026 ruling in Montgomery v. Caribe Transport II established that brokers can be held liable for crashes involving carriers they should have known were unsafe. That legal standard will not stay quarantined to safety; plaintiff attorneys and regulators will draw the same logic toward fraud and cargo loss as case law develops.

Brokers who treat carrier vetting as a compliance checkbox today will face a much harder conversation tomorrow when a deceptive-pickup loss lands in discovery and their onboarding records show they confirmed nothing beyond a DOT number and a certificate of insurance that turned out to be forged.

The right time to build a defensible vetting record is before the load moves.

Red Flags to Check Before You Tender

Every one of the following signals appears in real deceptive-pickup and carrier-impersonation cases. None of them requires a phone call to verify — they are checkable in carrier data before a load is dispatched.

• Authority age under 90 days. Newly activated carriers account for a disproportionate share of fraud incidents. Establish a minimum age threshold and flag exceptions for manual review.
• Contact information shared across multiple DOT registrations. A single phone number or email appearing on three to ten carrier records is a reliable indicator of a shell network or cloned identity.
• Physical address that resolves to a virtual mailbox or residential location. CORCA's companion legislation already proposed requiring carriers to provide a valid physical business address — not a P.O. box — before receiving operating authority. Treat this as a vetting standard today.
• Principal names that appear in prior revoked-authority records. Officers who shut down one carrier and reopen under a new name are a known chameleon-carrier pattern. SOS officer record checks surface these links.
• Insurance certificates with issuance dates within the last 30 days. Stolen credentials frequently involve freshly forged or newly bound insurance documents timed to match the impersonation window.
• DOT number that does not match the vehicle's displayed markings. If you use photo verification at pickup, a mismatch between the truck's placard and the rate-confirmation DOT number ends the load before it leaves the dock.
• Carrier name or MC number that differs from what was communicated during booking. Any substitution at pickup — even a plausible explanation — should trigger an immediate hold and manual verification.

The Legislation Gap You Can't Wait For Congress to Close

CORCA is a strong step. Federal coordination, money-laundering charges, and asset seizure will make organized theft rings harder to sustain once they are caught. But CORCA acts after the load is gone. The 31% rise in deceptive pickups in Q1 2026 alone — 574 recorded incidents, averaging 6.4 per day nationwide — makes clear that the industry cannot wait for post-theft prosecution to serve as its primary deterrent.

Verifying who is actually behind a carrier before tender is the intervention point that law enforcement cannot provide. That work sits with brokers and shippers. The data, and now the legislative record, both say the same thing: it has never mattered more.