What FMCSA Data Does — and Doesn't — Tell You

Ask a broker how they vet carriers and the first answer is almost always the same: "We check them on FMCSA." It is the right first answer. It is a bad last answer.

The federal record is the floor of carrier vetting — genuinely load-bearing, freely available, and routinely misread as more than it is. Most freight fraud passes an FMCSA check, not because the data is wrong, but because of what the data was never designed to say. Worth being precise about both halves.

What the record actually tells you

The federal carrier registry is a real asset, and it answers real questions:

Authority. Whether the carrier holds active operating authority, what kind, and under which docket numbers. A revoked or inactive authority is a full stop, no further analysis needed.

Operating status and out-of-service orders. Whether the carrier is currently permitted to operate at all. An out-of-service order is the government telling you, in writing, not to use this carrier.

Safety data. The safety rating and the behavioral safety categories built from roadside inspections and crash records. Imperfect and much-argued-over, but grounded in physical events involving real trucks.

Insurance filings. Liability and cargo coverage on file, the underwriter, and cancellation dates. Filed data, with filing lag — but independent of anything the carrier emailed you.

The registered identity. Legal name, DBA, entity type, address, and the contact information of record — including the phone number that is supposed to reach the owner.

For establishing that a carrier exists, holds authority, and is not under a federal stop order, this is exactly the right tool. Now the other half.

What it cannot tell you

1. It has no memory

The record you pull today is a snapshot. It shows current values and says almost nothing about what those values were last month — and in fraud detection, the trajectory is the signal.

A carrier whose phone number, contact email, and insurance all changed three weeks ago looks, in a snapshot, identical to a carrier that has run clean and stable for a decade. Same active authority, same satisfactory posture, same tidy record. The difference between those two carriers is the entire ballgame, and the snapshot cannot see it. Contact-point churn immediately before aggressive booking activity is the signature of a hijacked identity — a pattern that exists only across time, invisible at any single moment.

2. It tells you what the record says — not who controls it

The registered contact information is exactly that: registered. It reflects whatever the last person with access to the record filed. When a carrier's identity is hijacked at the registry level, the fraudster updates the record itself — and from that moment, the official phone number of record rings a phone the fraudster is holding.

This corrupts the industry's favorite verification ritual. "We called the number on file" proves you reached whoever controls the filing. Usually that is the owner. In precisely the scenario you are vetting against, it is not — which is why a confident phone interview, on its own, should never be the thing that approves a carrier. In Happy Tactic's scoring, a flawless owner interview is deliberately capped well below the approval threshold for exactly this reason: fraudsters who hijacked the record also control the registered phone. Voice is one leg of evidence, never the verdict.

3. Insurance on file is not insurance in force

Filings lag events. A policy can be cancelled, or sitting in a pending-cancellation state, while the filing still shows coverage. The registry tells you insurance was placed and filed; it cannot tell you the policy is alive this morning, what equipment and drivers it currently covers, or that the named insured precisely matches the entity trying to haul your load. Those answers live with the insurer, and they are obtainable — from the source, not from a PDF in the carrier's outbox.

4. It says nothing about who shows up

The record vets a company. Your dock receives a person and a truck. Nothing in the federal data connects the driver holding the bill of lading to the carrier whose authority booked the load — no license check, no identity match, no link between the VIN backing into the door and the equipment on the carrier's policy. In a stolen-identity theft, the company in the record is legitimate and the person at the dock is the crime. The registry is structurally blind to that gap.

5. Safety scores measure safety, not honesty

The safety data reflects inspections and crashes. It is evidence about how a fleet operates on the road. It contains no information about whether the entity quoting you freight is who it claims to be. A fraudster impersonating a safe carrier inherits the safe carrier's spotless numbers — indeed, that spotlessness is part of what makes the identity worth stealing. A great safety record makes a carrier attractive. It does not make an email from that carrier authentic.

How to actually use FMCSA data

Three practices turn the registry from a checkbox into an instrument.

Treat it as a baseline, not a verdict. The record establishes that a real carrier exists and may legally operate. Every remaining question — are you talking to that carrier, is the coverage alive, who is driving — needs evidence the registry does not hold.

Read it longitudinally. One snapshot is weak; a series is powerful. Diffing today's record against prior pulls surfaces the changes that matter: status flips, contact swaps, insurance events. This is the reasoning behind Happy Tactic's change-log history — versioned snapshots of every carrier's federal record, each new one diffed against the last on six fields (DOT status, operating status, safety rating, allow-to-operate, out-of-service, entity type), merged with carrier-registry history into one deduplicated timeline from three independent sources. When you look a carrier up, you don't see a snapshot — you see its story, and the story is where fraud shows up first.

Keep reading it after approval. The record changes after onboarding — revocations, out-of-service orders, insurance cancellations all land mid-relationship. Verified carriers should be monitored continuously against the registry's change feeds (ours are polled on a roughly five-minute cycle) with adverse changes triggering alerts, so an approval is a live status with a tripwire rather than a laminated certificate from last quarter.

The honest summary

FMCSA data is necessary and nowhere near sufficient. It authenticates a company's existence and legal standing; it cannot authenticate a phone call, a PDF, a driver, or a truck, and it cannot see its own recent past unless you keep receipts.

The brokers who get burned rarely skipped the FMCSA check. They did it, it came back clean, and they stopped there — mistaking the floor for the ceiling. Check the record. Then keep going: the story over time, the evidence beyond the record, and the person at the dock.

FMCSA's registration system changed in 2026. See what FMCSA Motus means for carrier vetting.