How to tell if a carrier is legit (with a live FMCSA check)

To check if a carrier is legit, look up its USDOT or MC number on FMCSA's SAFER Company Snapshot, confirm its authority is active for the freight you are funding, confirm insurance and a BOC-3 are on file, check how old the registration really is and what changed recently, and then prove that the person in front of you actually controls that carrier. Everything before that last step uses public data. The last step never can.

That last check is where the money goes now. In its April 2026 Federal Register notice on Motus, FMCSA said it has seen a significant increase in presumed fraud where erroneous information about a registered entity is being used, and it listed identity theft, hijacked FMCSA accounts and the sale of motor carrier numbers and PINs among the examples. A fraudster borrowing a real carrier's clean record passes every public check, because the record is genuinely clean.

You can run the public half in one step with the free carrier check. It reads FMCSA's census, authority, insurance and out-of-service data and shows the source dataset and as-of date for every fact. The rest of this guide explains what each signal means, so you can read SAFER yourself and know exactly where it stops.

A USDOT number identifies the legal entity registered with FMCSA. An MC number is a docket number for operating authority, the permission to haul regulated freight for hire across state lines. One USDOT can hold several dockets, and SAFER lets you search by USDOT number, MC/MX number or company name.

MC numbers still exist. FMCSA's April 2026 notice said the Phase II release of Motus would not eliminate MC and FF docket numbers, so retiring them would take a later change. Search by either number, but key your own records on the USDOT, because it is the identifier FMCSA uses for every registration.

Each snapshot states the date its data reflects, so save it with that date. In October 2026, SAFER's licensing, insurance and pending-cancellation links go to the carrier's page in Motus, FMCSA's new registration system, rather than to the old Licensing and Insurance (L&I) screens.

Order matters because each check narrows the next one. Work from the record itself, to its permission to operate, to its history, and only then to the person.

1. 1

   Match the identifiers

   Look the carrier up yourself by USDOT number, then confirm the MC docket, legal name and DBA all point to the same entity. Never start from a number or phone in an email signature; that is how impersonators steer you to a real record they don't control.

2. 2

   Confirm it may operate

   USDOT Status should be ACTIVE and Operating Authority Status should read AUTHORIZED FOR property. A carrier with only broker authority, or none, should not be invoicing you as the hauler.

3. 3

   Check insurance on file

   For-hire carriers of nonhazardous property in vehicles of 10,001 pounds or more need at least $750,000 of public liability coverage under 49 CFR 387.9. Confirm the filing, look for a pending cancellation, and confirm the certificate with the agent directly.

4. 4

   Check the BOC-3

   A carrier needs a process-agent filing to keep its authority. Motus records involuntary suspensions with reasons such as "no active process agent (BOC-3) filing on file", so a missing filing eventually becomes a status problem.

5. 5

   Date the registration

   Read USDOT age from the census add_date and authority age from the earliest grant date in the authority history. Do not infer age from the size of the number.

6. 6

   Look for recent changes

   Compare the census phone, cell_phone, email_address, physical address, company_officer_1 and company_officer_2 with what the applicant gave you, and note the mcs150_date. A change in the last 30 to 90 days, right before a first funding request, earns a call to a number you found independently.

7. 7

   Check safety and orders

   Look for out-of-service orders, revocations and suspensions, and compare the inspection count with the fleet size the carrier claims.

8. 8

   Look for related entities

   Check whether the phone, email or address is shared with revoked or inactive carriers. That is the main public signal for chameleon carriers, and the carrier check counts these links for you.

FMCSA moved registration into Motus in May 2026, and that changed how a lookup should be read. The legacy L&I open datasets now say they were last refreshed on 05/14/2026 and will no longer be updated. Motus publishes its own datasets, refreshed as recently as 2026-10-18 when we checked, but on 2026-10-19 the Motus carrier file held about 166,000 authority records, while the frozen legacy file still listed about 402,000 dockets with an active authority.

So a complete authority history means reading the frozen legacy records and the Motus records together. A carrier that hasn't touched Motus yet may appear only in the legacy file, and anything that happened to it after 2026-05-14 will appear only in Motus.

New USDOT and docket numbers are also randomized. In the census file, carriers added on the same day in October 2026 carry USDOT numbers ranging from the 4 millions to the 9 millions, and new Motus dockets run to 8 digits. The old habit of reading a high MC number as a new carrier no longer works.

Motus also adds identity proofing. FMCSA says every new applicant must pass identity verification with a government ID and a face scan, and that existing registrants will be verified when they first access the system. That makes fake new registrations harder; it does nothing about a fraudster who controls a real carrier's email, or who is pretending to be that carrier on the phone with you.

Expect some noise while the data settles. Motus authority history includes more than 2,000 reinstatements labeled as corrections to how legacy common and contract authority were consolidated, so a status that flipped once proves nothing. A status that flips around the time of your application deserves a question. For the background, see FMCSA Motus explained.

Not by itself. New authority carries real risk, and many brokers and factors apply extra scrutiny for a carrier's first months. That scrutiny is exactly why aged authority is valuable to fraudsters, who buy it, hijack it or claim to be its new owner.

Treat age as one input that has to agree with everything else. A carrier registered a decade ago that has never factored, has a new officer, a new phone and a new bank, and suddenly lands a large contract is riskier than a 6-month-old carrier whose story holds together. See change-of-ownership and bought-MC fraud for how this plays out.

None of these proves fraud on its own. Each one is a reason to slow down and verify through a channel the applicant doesn't control.

• Phone, email or officer names changed in the last 90 days, followed quickly by a factoring application.
• A free webmail address replacing a company domain in the census email_address field.
• An mcs150_date within days of the application, with no change in fleet size to explain it.
• Authority recently reinstated after an involuntary suspension for an insurance or BOC-3 cancellation.
• Liability insurance on file below the required minimum, or a pending cancellation.
• A physical address, phone or email shared with carriers that were revoked or put out of service.
• A claimed fleet with no inspection history, or inspections under equipment the carrier says it doesn't run.
• A legal name that differs by a word or a suffix from a well-known carrier with a similar DBA.

FMCSA data describes an entity. It does not tell you who is typing into your onboarding form, who answered the phone, or who owns the account on the voided check.

Contact data is only as good as the account that controls it. If someone has taken over a carrier's FMCSA login, they can change the phone and email on the record, and your "independent" callback then leads straight back to them. That is why the history of contact changes matters as much as the current values.

Bank ownership is the larger gap. FMCSA holds no bank data at all, and a voided check or bank letter is easy to edit. Before the first ACH, confirm that the account belongs to the carrier's legal entity through the bank or a bank-data provider, and confirm the applicant matches an officer on the record with an ID and selfie check. The carrier identity theft guide covers the takeover patterns in detail.

This is the gap we built Verified Payee to close: identity, bank-ownership, FMCSA and UCC checks at onboarding, and re-verification of every bank or ownership change before the next ACH. The demo walks through it with simulated data.

Use the lookup as a gate, a record and a tripwire. As a gate, it screens out carriers that may not operate. As a record, it documents what you knew and when. As a tripwire, a re-run before funding catches what changed since onboarding.

• SAFER snapshot or carrier-check result saved with its as-of date
• Authority type and status match the freight being invoiced
• Insurance on file at or above the minimum, no pending cancellation, confirmed with the agent
• BOC-3 on file
• USDOT age taken from add_date and authority age from grant dates, not from number size
• Contact and officer changes in the last 90 days reviewed and explained
• Links to revoked or out-of-service carriers reviewed
• Applicant's identity matched to an officer on the record
• Bank account ownership matched to the carrier's legal entity
• UCC search run, and any prior factor's lien released

Brokers can use the same sequence at load tender. The difference is time: a broker has minutes and one load, while a factor has the whole relationship. That is why a factor should re-run the public checks before acting on any bank, remit-to or ownership change, not just at setup.