Federal prosecutors in Connecticut unsealed a case this week that every small carrier should read twice — because the weapon in it was not a crowbar or a hacked password. It was a trucking company like yours. On October 21, the U.S. Attorney’s Office announced that Nursulton Khaydarov, a 33-year-old CDL holder, pleaded not guilty to conspiracy charges in a ring that allegedly bought or took control of real motor carriers — their DOT numbers, MC authority, business email accounts, and even the owners’ identities — then posed as the previous owners to book freight and steal it. At least 24 loads vanished, worth more than $12 million at retail. Some were held for ransom. The lesson for you is blunt: your authority is now a theft tool with a street price, and this article is about keeping it out of the market.

What Prosecutors Say Happened

According to the indictment, the scheme ran from roughly September 2025: co-conspirators acquired several existing motor carriers, used those companies’ clean reputations to win interstate loads from brokers, sent a driver to pick up the freight — hard drives, electronics, clothing, food, nicotine products — and the cargo never arrived. FreightWaves reports the group allegedly switched tractor plates, ran burner phones with encrypted messaging, and tried to defeat tracking; Khaydarov himself held a valid New Jersey CDL plus fraudulent licenses under five different names, all carrying his photo. This is not a lone bad actor slipping through — it is the industrialized version of what security analysts have been charting all year. Cargo-theft tracking firms say deception was used in 92% of thefts involving high-value technology shipments, quarterly losses hit $304.6 million with the average stolen shipment worth $564,009, and thieves have stolen more than $150 million in AI equipment this year alone. The muscle has left the business. The paperwork does the stealing now.

Why Your MC Is the Target

Brokers have spent two years hardening their vetting — we covered this week’s tightening in Broker Vetting Is Tightening: Clean Up Your Profile — and a brand-new MC now waits out a 90-day freeze at most brokerages before anyone will tender it a load. So thieves stopped making fake carriers and started buying real ones. An aged authority with years of clean inspections is a skeleton key: it opens the broker’s door on reputation the crooks never earned. That is exactly why FMCSA issued a bulletin in March warning carriers never to sell, buy, or lease a USDOT number or MC authority outside a legitimate corporate transaction — the agency says it will revoke everything attached to a number that changes hands improperly, regardless of what either party intended. The same reporting notes chameleon carriers are about three times more likely than legitimate new entrants to be involved in serious crashes, and the proposed SAFER Transport Act would bar convicted freight-fraud felons from getting DOT numbers and require ownership changes to be reported within 30 days. The rest of this article is the part that matters: what you do about it this week. Call it the Authority Shield — four moves that keep your MC off the black market and keep you from touching someone else’s.

Move One: Never Sell Your Number — and Say No Like You Mean It

If you run an aged authority with a decent safety record, you have probably already had the call, the text, or the Facebook message: “We buy MC numbers — $10,000 cash for yours.” Understand what is actually being purchased. Not your trucks, not your customers — your reputation, to be worn as a mask. If that mask is used the way prosecutors describe in Connecticut, the paper trail starts at your name, your signature, and your years of filings. You will spend months explaining yourself to investigators, brokers, and insurers while FMCSA revokes the number anyway, because a sole proprietor’s DOT number cannot legally be transferred at all, and a corporate sale only survives if ownership records are properly updated with FMCSA. The $10,000 is not a payday. It is a down payment on your subpoena. When the call comes, end it on the record:

Then actually save the message or log the call — number, date, what was offered. If a stolen-load investigation ever brushes against your MC, a dated log of solicitations you refused is evidence of exactly who you are.

Move Two: If You Exit, Retire the Authority — Don’t Abandon It

The most dangerous MC in America is the one whose owner quietly parked the trucks and walked away. A dormant authority with live registration, a stale email address, and an owner who never checks FMCSA records is precisely what a takeover crew wants — nobody is watching the house. If you are winding down, do it formally: request voluntary revocation of your operating authority through FMCSA, update your MCS-150 to reflect the shutdown, cancel your BOC-3 and insurance filings in the right order, and keep copies of everything. If you are selling a genuine, incorporated business — trucks, contracts, goodwill — do it as a real corporate transaction with a lawyer, and make sure the buyer updates FMCSA’s ownership and officer records immediately, because the March bulletin treats sloppy paperwork on a legitimate deal as its own violation. A clean shutdown costs you an afternoon. An abandoned number can cost you your name.

Move Three: Don’t Buy an Aged MC Either

The temptation runs the other way too. New carriers stuck behind the 90-day broker freeze get pitched aged MCs as a shortcut — skip the wait, inherit the clean score. Here is why that shortcut now leads off a cliff: the exact fingerprint of this theft ring is an aged authority with a recent ownership change, new contact details, and an unfamiliar email domain, and every serious vetting platform brokers use now flags that pattern on sight. Buy a naked MC number and you have paid real money to make yourself indistinguishable from the people who stole $12 million. You also inherit whatever is buried in the number — conditional ratings, crash history, unpaid judgments — and you stand on the wrong side of a bulletin that says FMCSA will revoke improperly transferred authority no matter how innocent your intent. If you are new, be new: run your 90 days clean, work direct shippers who vet the human being instead of the number’s age, and build the record honestly. It is slower, and it is yours.

Move Four: Lock the Takeover Doors

The Connecticut ring took over companies with the owners’ participation — but the same playbook runs without it, through hijacked FMCSA logins and compromised email, which is how the scams we covered in the Amazon Relay case were built. So harden the three doors a takeover walks through. Door one, your FMCSA account: make sure your login.gov credentials are yours alone, with two-factor authentication on and the recovery email and phone pointing at you, not a former partner or an old dispatcher. Door two, your business email: the domain registration, the admin password, and the inbox that brokers know you by — two-factor on all of it, because the indictment specifically lists business email accounts among what the ring acquired. Door three, your public record: put a 15-minute monthly check on the calendar — pull your own SAFER snapshot and licensing-and-insurance record, and verify the officers, address, phone, and email are exactly what you set. A hijack starts with a quiet record change weeks before the first stolen load; the carrier who checks monthly catches it while it is still a password reset instead of a federal case. And when a broker’s tightened vetting asks you to verify a legitimate change you made — new address, new insurer — treat the friction as a feature and answer fast, with documents. The verification wall that annoys you is the same wall that makes your stolen identity worthless.

One More Tell for Your Own Protection

Flip the lens before you partner with anyone. If a carrier offers you overflow freight, or a “dispatcher” offers to put loads on your trucks under their customer relationships, run the same check the brokers run: how old is the authority, did ownership or contact information change recently, does the email domain match the company, does the phone number on FMCSA’s record — not the one on the rate con — reach the same people? A company that changed hands last month and books like it has twenty years of relationships is the exact profile in this indictment. Verify by callback to the number on the federal record, the same discipline we drilled in the Golden-Hour response plan, and walk away loudly when the answers wobble.

The Bottom Line

Twenty-four loads and $12 million were allegedly stolen not with force but with purchased trust — real carriers’ numbers, names, and inboxes worn like a uniform. Your authority holds the kind of value thieves now shop for, so treat it like the asset it is: never sell it, retire it properly when you exit, never buy someone else’s, and lock the login, the email, and the record it lives behind. The carriers who survive this era of freight crime will not be the ones who were never targeted. They will be the ones who were not worth the trouble.

Innovative Logistics Group