---
title: "Account takeover (ATO)"
url: https://carrierkyc.com/glossary/account-takeover
description: "Account takeover is a criminal gaining control of a real carrier's or broker's accounts, such as its FMCSA login, email or load board, and operating as that company."
---

# Account takeover (ATO)

**Definition:** Account takeover is a criminal gaining control of a real carrier's or broker's accounts, such as its FMCSA login, email or load board, and operating as that company.

Also called: ATO, Account hijacking, FMCSA account hijacking. Category: Fraud.

FMCSA has named the hijacking of motor carrier accounts, and the selling of carrier numbers and PINs, among the fraud it sees in registration records. The usual path starts with phishing: a fake FMCSA email, a fake compliance notice or a stolen email password. With control of the FMCSA record or the carrier's mailbox, the attacker changes the phone and email on file so verification calls and confirmations reach them instead.

For a factor, takeover is hard to spot because every public check passes. The authority is old, the insurance is real and the safety record is clean, because they belong to a real company. Verisk CargoNet notes that compromised accounts can give criminals shipment details, contact directories and transportation software, letting them impersonate trusted parties while appearing legitimate.

> **Red flag: Red flags** Phone or email on the FMCSA record changed in the last 90 days. An applicant whose name differs from the company official on file. An email domain registered recently. A bank account in a different name or state from the carrier. A carrier owner who says, when called at a long-standing number, that they never applied.

The defense is to verify the person and the bank account, not just the authority. CarrierKYC's Verified Payee checks that the applicant controls the carrier and that the account belongs to it, and re-verifies every bank or ownership change before the next ACH. See [carrier identity theft](https://carrierkyc.com/guides/carrier-identity-theft).

## Related

- [Carrier identity theft in 2026: takeovers, PIN phishing and Motus](https://carrierkyc.com/guides/carrier-identity-theft)
- [USDOT PIN](https://carrierkyc.com/glossary/usdot-pin)
- [Remit-to change](https://carrierkyc.com/glossary/remit-to-change)
- [MC takeover](https://carrierkyc.com/glossary/mc-takeover)
- [Carrier risk check](https://carrierkyc.com/tools/carrier-check)

## Sources

- [Federal Register: Availability of Motus, FMCSA's New Registration System](https://www.federalregister.gov/documents/2026/04/29/2026-08334/availability-of-motus-fmcsas-new-registration-system) (FMCSA notice, 2026-04-29)
- [Verisk: Cargo theft losses more than double to $304 million in Q2](https://www.verisk.com/company/newsroom/cargo-theft-losses-more-than-double-to-$304-million-in-q2-despite-a-drop-in-thefts-driven-by-high-value-metals-and-technology-heists/) (Verisk CargoNet press release, 2026-08-06)