The Driver Who Never Existed: What Three Federal CDL Fraud Cases Reveal About Carrier Identity Risk

Three federal criminal cases — in Kentucky, South Dakota, and Connecticut — landed in the same Transport Topics report last week, and the common thread is not a compliance technicality. It is the same exploit repeated three times: a real U.S. citizen's identity, stripped away and grafted onto a commercial driver license to put a stranger behind the wheel of a commercial motor vehicle.

The facts are specific. A Kentucky jury convicted Joel Sanchez-Mendoza on February 24, 2026, on two counts of aggravated identity theft and related false-citizenship charges after he purchased a Puerto Rican's name, date of birth, and Social Security number and used that package to obtain a Kentucky CDL and employment. He was sentenced June 26 to two years' imprisonment. In South Dakota, Atuchukwu Markrufus Onyeanusi was stopped for speeding in Craig County, Oklahoma, on November 10, 2025, carrying a Texas CDL bearing his own photograph under another person's name, along with a matching false Social Security card. He pleaded guilty February 27, 2026, and was sentenced May 20 to time served plus one year supervised release. In Connecticut, Flor Consuelo del Carmen Caballero Bernabe is awaiting trial on charges that include passport fraud, identity theft, and false statements to FMCSA — and according to court documents, she allegedly operated commercial motor vehicles under a stolen Puerto Rican identity for approximately 25 years.

Three cases. Three states. Three CDLs issued to people who, on paper, did not exist.

What This Means for Carrier Vetting

The CDL is the foundational identity document in commercial trucking. When a broker asks a carrier to confirm who is driving, the CDL number is the answer. These cases demonstrate that the answer can be fabricated in a way that passes every surface-level check: the license number is real, the issuing state is real, the photo matches the person presenting it — but the name, SSN, and citizenship underlying the license belong to someone else entirely.

This is not a new attack surface; it is a persistent one. The FMCSA has identified approximately 75 entry-level driver training schools suspected of fraudulent activities, including falsifying training records, and has removed nearly 10,000 schools from its Training Provider Registry for failing to meet safety standards. That cleanup addresses the supply side — the schools that manufacture unearned credentials. The demand side, individuals purchasing or constructing stolen identities specifically to obtain CDLs and FMCSA-regulated employment, runs in parallel and is handled case by case in federal court.

For a freight broker or shipper, the implication is direct: a carrier can have active FMCSA authority, current insurance, and a properly issued CDL on file — and still have a driver whose legal identity is borrowed. The vetting signals that matter most in this environment are not the documents themselves but the consistency of the identity record underneath them.

The Caballero Bernabe case is the starkest illustration of the exposure window. If the allegations are proven, FMCSA-regulated carriers employed that driver, and FMCSA-administered medical examination forms were allegedly used to maintain a CDL, for roughly 25 years before federal charges were filed. No routine broker onboarding check, run at any single point in time, would have surfaced the underlying identity theft — because the license itself was valid.

What can surface it is cross-referencing: name–DOT entity relationships, SSN-linked carrier histories, and SOS officer records that either confirm or contradict the identity presented at onboarding.

How to Protect Your Business

The CDL fraud pattern described in these three federal cases points to specific, checkable signals. Each of the following can be pulled before a load is tendered:

Red flags to check:

• Name–MC number mismatch: Confirm the authorized contact name on the carrier's operating authority exactly matches the name on the CDL presented. A discrepancy between FMCSA SAFER records and the document in hand is a hard stop. Pull the Company Snapshot on SAFER and compare officer names field by field.
• Authority age vs. driver tenure: A carrier with authority issued in the last 12 months presenting a driver with a CDL first issued 20 years ago under that same entity raises a red flag — the two histories cannot align.
• SOS officer records vs. CDL identity: Secretary of State filings for the carrier's registered entity name should match the names of principals in FMCSA records. If the CDL name does not appear anywhere in the corporate history, that disconnection warrants a callback verification.
• Shared phone or email across unrelated carriers: A dispatcher or driver contact linked to multiple unrelated USDOT numbers — especially if those numbers have prior revocations — is a pattern associated with identity recycling, not coincidence.
• Prior-revoke DOT links on the same address or EIN: Revoked authority at the same physical address or tax ID as an active carrier is a chameleon signal. Run it before every new carrier relationship, not just at initial onboarding.
• CDL state vs. carrier domicile mismatch: A Kentucky-domiciled carrier presenting a driver with a Texas CDL and a South Dakota employment record should trigger a direct state-DMV verification request. Multi-state document trails are not automatically fraudulent, but they are the pattern these cases display.
• Drug & Alcohol Clearinghouse status: Confirm the driver's name and CDL number return a clean record in the Drug & Alcohol Clearinghouse. Because a stolen identity may carry a different clearinghouse history than the actual person driving, a discrepancy here can be an early signal of a fabricated credential.

None of these checks requires access to federal criminal databases. They require methodical cross-referencing of records that are already public or program-accessible — and a commitment to running them every time, not just on first contact.

Three federal prosecutions in a single news cycle is not a statistical anomaly. It is a signal that identity theft as a CDL acquisition strategy is active, documented, and worth building into your standard carrier onboarding workflow today.