The Broker's Carrier Vetting Checklist for 2026

Most vetting failures are not knowledge failures. Brokers know what a stolen identity looks like after the fact. The failures are process failures — a step skipped under load-board pressure, a check done on the fraudster's paperwork instead of the public record, a carrier approved once and never looked at again.

So here is the process, written down. Nine steps, in order. Each one exists because a specific fraud pattern walks through the gap it closes.

1. Pull the federal record — all of it

Start with the FMCSA record: authority status, operating status, out-of-service orders, safety data, docket numbers. Confirm the authority is active and matches the operation in front of you — a carrier with dry-van authority and a reefer load story deserves a question.

The mistake at this step is not skipping it; almost nobody skips it. The mistake is treating a clean record as clearance. A hijacked carrier identity has a clean record — that is why it was hijacked. Step one establishes that a real carrier exists. It says nothing about whether you are talking to it.

2. Read the history, not the snapshot

This is the step most vetting processes do not have, and it is the one that catches identity theft before it costs anything.

A point-in-time check shows you today's record. Fraud lives in the recent changes. A carrier whose phone number, email, and insurance all changed in the last few weeks looks identical to a healthy carrier in a snapshot — and looks like a flashing alarm in a timeline. Contact-information churn immediately before a burst of booking activity is the classic pre-theft pattern: the fraudster redirects the carrier's public contact points to lines they control, then goes shopping.

Compare the current record to what it looked like last month and the month before. If you cannot see the history, treat every data point in the snapshot as unconfirmed.

3. Call the number of record — not the number on the email

When you verify by phone, the number you dial is the entire check. Call the number printed in the rate confirmation or the email signature and you have verified only that the fraudster answers their own phone.

Dial the carrier's number of public record, from the registry, and talk to the owner. Confirm the company name, the MC and DOT, the address, and — critically — whether the person who contacted you is actually authorized to accept loads on this carrier's behalf. Nominee-dispatcher fraud dies at that last question more often than at any other.

One honest caveat: if the registry record itself was hijacked, the registered phone belongs to the fraudster too. A good phone interview is a strong piece of evidence. It is never sufficient on its own — which is why the next step exists.

4. Chase the old numbers

If step two showed a recent phone change, the previous number is the most valuable phone number in the file. The person who used to hold it is the person a fraudster least wants you to reach — often the real carrier, unaware their identity is in use.

Call it. Text it. "Did your company recently change its number, or is someone using your MC?" is a thirty-second conversation that has ended entire fraud runs. Old phone numbers don't lie.

5. Verify insurance at the source

Do not accept the emailed COI as proof of anything — it is a snapshot, produced on request, delivered by the party you are vetting. Doctored certificates, cancelled-after-issuance policies, and stolen genuine certificates all look identical in an inbox.

Verify with the source instead: confirm the policy is in force today, confirm there is no pending cancellation, and check the named insured against the carrier's legal name character by character. A near-miss on the legal name is not a typo until proven otherwise. The federal registry's insurance filings — coverage on file, underwriter, cancellation dates — give you an independent reference point that never touched the carrier's outbox.

6. Put the dispatcher authorization in writing

If a dispatcher or agent is working the carrier's loads, get the owner's written, signed authorization naming them. Verbal "yes, they work with us" evaporates exactly when you need it. The signature should come from the owner you reached at the number of record — not from the dispatcher vouching for themselves.

7. Identify the driver before the freight moves

The load is not hauled by an MC number. It is hauled by a person in a truck, and in an identity-theft scenario that person is the only pure fraud artifact in the file. Before pickup: license captured front and back with the barcode actually decoded, a live selfie with the ID in frame, and the truck's VIN — validated and, ideally, matched against the equipment on the carrier's insurance.

A name and a truck number texted to the shipper is not a driver check. It is a courtesy.

8. Keep watching after approval

Vetting that ends at onboarding is vetting with an expiration problem. Authority gets revoked. Insurance lapses. Out-of-service orders land. All of it happens after your check cleared.

Two disciplines close the gap. Monitor approved carriers for adverse changes — authority, out-of-service, insurance — and treat any of them as a reason to stop tendering until re-verified. And give every approval an expiry date, so "vetted" is a status that lapses on its own instead of a permanent badge earned once in 2023.

9. Write everything down

Keep the evidence: what you checked, when, what it showed, who signed. When a claim or a dispute arrives, "we vetted them" is an assertion; a dated evidence trail is a defense. If a check ever fails later, the trail also tells you exactly which of your other carriers were approved on the same weak evidence.

The honest problem with this checklist

Done properly, this is real work — registry pulls, history comparison, phone calls, insurer confirmation, signatures, driver evidence, ongoing monitoring — multiplied by every new carrier, on load-board deadlines. The checklist does not fail because brokers disagree with it. It fails at 4:55 p.m. on a Friday with a hot load uncovered.

That is the case for making the process machine-enforced rather than willpower-enforced. Happy Tactic runs this checklist as a 13-step verification pipeline with the steps hard-coded in order — the broker cannot skip around, and 34 automated cross-checks run across everything the pipeline gathers. Approved carriers are monitored on a roughly five-minute cycle, adverse changes trigger alerts, and every verification expires — 30 days by default, configurable from 7 to 60 — after which the system simply will not tender to that carrier until it is re-verified. Every verdict ships with its evidence trail attached.

Whether you run the checklist by hand or let software refuse to let you skip it, the list itself is the point: nine steps, in order, every carrier, every time. The trial is 7 days with full Pro access if you would rather watch the pipeline run it than do it by hand.

Fraud is a numbers game played against your busiest afternoon. Process beats vigilance.

If you're comparing tools, read what to look for in carrier vetting software. And since the Supreme Court's Montgomery ruling, it's worth reading what to document when you select a carrier.