Phishing scammers target motor carriers in new wave of fraudulent DOT emails
A new and increasingly aggressive phishing campaign is sweeping through the motor carrier industry, with scammers impersonating officials from the U.S. Department of Transportation (USDOT) and the Federal Motor Carrier Safety Administration (FMCSA). These fraudulent emails, often polished, convincing, and designed to mimic official correspondence, are tricking motor carriers into surrendering sensitive information or making unauthorized payments.
A growing threat to motor carriers
Motor carriers nationwide are being urged to stay alert as FMCSA reports a surge in deceptive emails crafted to look like legitimate government communication. These messages frequently include professional looking documents, official appearing logos, and language that mirrors real FMCSA notices. While they may appear authentic, they are engineered to harvest personal data, financial information, or login credentials that can compromise a carrier’s operations.
FMCSA has emphasized that these emails do not originate from USDOT or the agency itself. One of the most reliable warning signs is the sender’s email domain. Official FMCSA correspondence almost always comes from an address ending in .gov. Although there are rare exceptions, such as customer satisfaction surveys sent after contacting the FMCSA Contact Center, those messages never request personal, financial, or account information.
How scammers create a false sense of urgency
Industry reports note that the sophistication of these phishing attempts has increased significantly. Many messages convey a sense of urgency, warning recipients that their USDOT number is at risk, that compliance updates are overdue, or that immediate payment is required to avoid penalties. These tactics are designed to pressure carriers into responding quickly without verifying the source.
FMCSA stresses that it never demands payment or sensitive information through unsolicited email. Any message requesting such information should be treated as a scam.
Key warning signs to watch for
Motor carriers can protect themselves by watching for several common red flags:
- Non-government email domains or sender addresses that appear slightly altered;
- Unexpected requests for payment, especially those tied to threats or deadlines;
- Embedded links directing users to unfamiliar login pages;
- Attachments that claim to be compliance documents or renewal notices; and
- Spelling or formatting inconsistencies, even in otherwise professional looking messages.
Protecting your business from phishing attempts
To reduce the risk of falling victim to these scams, FMCSA recommends that carriers:
- Verify the sender’s domain before responding to any message;
- Avoid clicking links in unsolicited emails, especially those requesting payment or personal data;
- Log in directly to official FMCSA or USDOT portals rather than using email links; and
- Report suspicious emails to the appropriate fraud reporting channels.
As phishing schemes continue to evolve, awareness remains the strongest defense. Carriers who stay informed, verify communications, and follow FMCSA’s recommended precautions can significantly reduce their risk.
Key to remember: In an industry where compliance and safety are paramount, protecting your business from fraud is just as critical as protecting your fleet or cargo.
