The Dispatcher Was in Armenia. The Freight Was in New Jersey. Eight People Just Got Charged.
Eight People. Five States. One Dispatcher Nobody Could Reach.
On June 30, 2026, U.S. Attorney Jay Clayton and FBI Assistant Director in Charge James C. Barnacle, Jr. announced the unsealing of a federal indictment in the Southern District of New York charging eight defendants with conspiracy to transport and possess stolen property in connection with an international, organized cargo theft operation. The scheme allegedly ran from March 2023 through the date of the indictment — more than three years — and prosecutors say the group stole at least $10 million in freight from commercial shippers.
The eight defendants are Vagan Gulian (37, Glendale, CA), Zhirayr Gumruyan (36, Northridge, CA), Sevak Kocharian (37, Brooklyn, NY), Araik Setrakian (36, Los Angeles, CA), Vitaly Koshelan (56, Dania Beach, FL), Arkadiy Pastin (Brooklyn, NY), Jashanpreet Singh (29, Oaklyn, NJ), and Edgar Bezhanian (46, Yerevan, Armenia). Seven were arrested across California, Florida, Pennsylvania, and New York. Bezhanian remains at large.
The targeted cargo was deliberately varied: electronics, liquor, meat, fish, eggs, clothing, skincare products, and cryptocurrency mining machines. That commodity diversity is not coincidental — it is a core feature of how experienced theft rings maintain operational tempo while avoiding the pattern-matching that cargo theft task forces rely on.
The structure prosecutors described is the part every broker needs to understand: at least one dispatcher located abroad coordinated facilitators, drivers, and warehouse workers operating inside the United States. The person allegedly calling the shots for a domestic freight theft ring was seated overseas — where no U.S. carrier authority, no FMCSA record, and no state business filing could reach them.
All charges are allegations. All defendants are presumed innocent unless and until proven guilty.
What This Means for Vetting Carriers
The SDNY indictment makes explicit something the carrier-vetting industry has treated as theoretical for too long: the most dangerous node in a cargo theft network is often the one you cannot find in SAFER at all.
A foreign dispatcher coordinating domestic drivers is not an FMCSA-registered entity. They hold no MC number. They appear in no company snapshot. They are not the name on the rate confirmation — that name belongs to whatever legitimate or fraudulently registered carrier the crew presented at pickup. The vetting question, then, is not whether the dispatcher is credentialed. It is whether the carrier the dispatcher is directing has any of the structural markers that distinguish a real operating entity from a shell assembled for a single job.
Three signals matter most in a scheme structured like this one:
Authority age versus operational footprint. A carrier impersonating a legitimate motor carrier needs an MC number and a DOT number that pass a quick SAFER lookup. What they cannot easily fake is tenure. An authority registered two weeks before a load tender, with no safety inspections on record, no prior-violation history, and no established address, is a carrier that has never actually operated. The FBI's Eurasian Organized Crime Task Force — which participated in this investigation — has documented repeatedly that theft crews cycle through freshly registered entities to avoid the inspection history that would surface their tactics.
Geographic mismatch between principal address and arrest locations. In this case, defendants were arrested in California, Florida, Pennsylvania, and New York. A carrier's FMCSA-registered address that does not match its operating states, combined with a dispatcher contact number that resolves to a foreign country code or a VoIP prefix, is a direct flag. Shared phone numbers or email domains across multiple carrier registrations — a signal CRIM Report surfaces automatically — indicate the same controlling party operating behind different MC numbers.
The at-large defendant as a vetting signal. Bezhanian's address of record is Yerevan, Armenia. When a domestic carrier's primary point of contact resolves to a foreign individual with no verifiable US business presence, that is not an administrative anomaly. It is the dispatcher model the DOJ just described in a federal indictment.
How to Protect Your Business
The SDNY case ran for three years before prosecutors unsealed the indictment. That means carriers affiliated with this network were, in all likelihood, tendering loads — and collecting payments — for the majority of that window. Standard SAFER checks would not have stopped this. The carriers presented credentials that passed surface-level review.
What would have helped: a layered vetting process that treats the contact behind the carrier as a first-class data point, not an afterthought.
Review your Operating Authority & Insurance records for every carrier booked in the past 90 days and flag any entity whose authority age is under 12 months, whose principal address is unverifiable, or whose contact information cross-references to other active or recently revoked authorities.
Red Flags to Check — Right Now
- Authority registered within the last 6–12 months with no prior safety inspection history in SMS
- Principal address that does not match the state of operations (e.g., registered in California but exclusively taking loads in the Northeast corridor)
- Dispatcher or booking contact using a foreign country code, VoIP number, or email domain registered within the last 30 days
- The same phone number, email address, or EIN appearing on multiple carrier FMCSA filings — classic shared-infrastructure, multiple-identity pattern
- Commodity mismatch on the tender — a carrier with a history of dry goods suddenly booking refrigerated meat, liquor, and electronics in the same week
- No verifiable SOS officer records for the carrier's registered LLC or corporation — a dissolved or never-filed entity is not an operating business
- Contact person who cannot confirm the carrier's DOT number from memory or deflects questions about their operating base to a third party
- Rate undercutting by 15% or more on a high-value load with no prior relationship — the margin compression that makes stolen cargo profitable only works when the carrier has no real operating costs
The eight defendants in this indictment were spread across five states and, allegedly, two continents. The freight moved through New Jersey, Pennsylvania, and beyond. The dispatcher was never in the same room as the load. That geographic dispersion is not a weakness in the scheme — it is a designed feature that makes any single-point check fail by design.
The only reliable defense is verifying the identity of the entity behind the authority before the load is tendered, not after the trailer disappears.
Frequently asked questions
How do cargo theft rings use carrier impersonation to steal freight?
Theft crews obtain or fabricate FMCSA-registered carrier credentials, then present those credentials at pickup to collect loads they have no right to transport. The freight is diverted, sold on the black market, and the legitimate carrier whose identity was used is left with no shipment and no payment. Vetting the contact person behind the authority — not just the MC number — is the critical step brokers miss.
What is a foreign dispatcher in freight fraud, and why does it matter for brokers?
A foreign dispatcher coordinates domestic drivers and facilitators from outside the US, where FMCSA has no jurisdiction and no registration requirement. They appear on no SAFER record and hold no US authority. Brokers who vet only the carrier's DOT number miss the controlling party entirely. A dispatcher contact resolving to a foreign number or VoIP prefix is a direct red flag.
How long should a carrier's operating authority be active before I book them?
Industry best practice is a minimum of 12 months of active authority, with a documented inspection history in FMCSA's Safety Measurement System. Authorities registered within the last 6 months and carrying no prior inspections have not actually operated under scrutiny — and are a common feature of shell carriers assembled for theft runs.
Can the same phone number appearing on multiple carrier FMCSA filings be a fraud signal?
Yes. A single phone number, email address, or EIN linked to multiple carrier registrations indicates one controlling party operating behind several MC numbers. This shared-infrastructure pattern is a classic chameleon-carrier marker. CRIM Report cross-references contact data across carrier filings specifically to surface this signal before a load is tendered.
What cargo is most targeted by organized theft rings?
High-value, easily resellable commodities dominate: electronics, liquor, cryptocurrency mining hardware, meat, seafood, clothing, and skincare products. The SDNY June 2026 indictment listed all of these as targets. Commodity diversity across a short booking window — a single carrier booking refrigerated meat one day and electronics the next — is a behavioral red flag worth escalating.
Spotted fraud, or vetting a carrier?
Sign up free to report freight fraud — once filed, the whole industry sees it — and to check any carrier's reports, identity, and authority in seconds.
Related posts
Three Vans, Two Brands, One Corridor: What the BNSF Boxcar Heists Reveal About Freight's Blind Spot
Two separate BNSF boxcar burglaries in San Bernardino County — $123K in Brooks shoes on August 22 and $150K in New Balance shoes on August 24 — expose a repeating playbook that freight brokers and shippers are still not built to stop.
They Crashed the Escort Vehicle First: What the $111M Semiconductor Heist Tells Every Broker About DOT Credential Theft
Thieves deliberately rammed security escorts to isolate two high-value semiconductor loads, then redirected the trucks — and the whole scheme ran on stolen DOT credentials. Here is what that means for your carrier-vetting process.