Overview
Freight fraud didn't explode because criminals got smarter. It exploded because the industry digitized a high-trust network without ever stopping to verify who was actually on it.
That's the argument Michael Caney, co-founder and CRO of Highway, makes in this episode. His reference point is the savings and loan crisis of the 1980s and the 2008 financial collapse — both cases where a system operated on assumed trust until someone noticed the hole and started exploiting it at scale. Freight in the 2010s made the same mistake: digital load boards and book-it-now flows created speed and scale but stripped out the identity checks that made the old fax-and-phone system, however clunky, reasonably hard to defraud.
Highway's answer was to build what Caney calls "know your carrier" — banking-grade identity verification applied to motor carriers before they ever touch a load. In just Q2 of one year, Highway blocked 700 carrier users from 40 countries attempting unauthorized logins, stopped 50,000 fraudulent inbound phone calls, and flagged 300 unauthorized FMCSA contact changes. Inbox-related fraud attempts grew 40% between January and June, from 90,000 incidents to 187,000.
The fraud vectors themselves have evolved. Early attackers brute-forced carrier vetting portals. Once identity checks made that harder, they moved to phone social engineering: calling broker reps pretending to be the driver on a load, then extracting just enough information — a pickup number, a reference code, a facility name — to intercept the shipment. International call centers have organized around this, archiving public load board data and web-scraping shipper names and locations to make their calls sound credible.
Caney's prescription is both technical and cultural. On the product side, Highway secures rate confirmations behind a login so that even a compromised email inbox can't hand a fraudster the documents they need. On the culture side, he argues that brokers who do this well have one thing in common: they're willing to say no. They track overrides. They treat fraud prevention like a SOC 2 audit — a company-wide mandate, not a software feature.
The second half of the episode covers Highway's Trusted Freight Exchange (TFX), a carrier network built on proof-of-stake identity claims — ELD-connected, insurance-verified, location-confirmed — where brokers stay the point of the transaction and carriers can move through their favorite partners without downloading anything or getting flooded with calls.
Key Takeaways
Fraud needs three things: prospective gain, anonymity, and urgency. Freight has all three by default. A $250,000 cargo theft rarely results in a prosecution. International actors operate outside FBI jurisdiction. And the pressure to cover loads fast means brokers are always rushing. Attackers understand this structure and design for it.
The attack vector keeps moving outward. Once Highway made it harder to brute-force a carrier vetting portal, fraudsters moved to phone calls and phished inboxes. Bad actors now web-scrape public load boards, archive shipper names and locations, and call broker reps pretending to be drivers — asking for just enough detail to complete an impersonation. Platforms get better; the perimeter just shifts.
A compromised inbox is more dangerous than most brokers realize. An attacker inside a carrier's Gmail account sits silently, watches for incoming rate confirmations, deletes them before the carrier sees them, and uses the load details to impersonate the carrier elsewhere. Highway blocks this by requiring a login to access the rate con itself — so the document is never just sitting in an email thread.
Culture beats technology when technology can be overridden. Caney tracks the correlation between manual overrides of Highway alerts and fraud incidents at broker customers. The data is direct: brokers who ignore their own rules get hit. The best performers treat every override as a signal worth investigating, not a bureaucratic obstacle to cover a truck.
The exchange model inverts the marketplace. A marketplace extracts rent from every transaction and optimizes for its own volume, not any individual producer's interests. An exchange sets rules that all participants agree to, creating conforming transactions that can be underwritten, automated, and paid out almost instantly. In Highway's TFX, carriers connect their ELDs, verify their insurance, and confirm their truck location — and in return get paid in a LoadPay wallet on delivery, without factoring fees or float time.
Notable Quotes
"For fraud, you need three things. You need prospective gain, anonymity, and urgency. You steal something for $250,000 with cargo — they ain't taking you to jail. You rob a bank, they'll take you to jail. You steal cargo, they're like, sorry."
"Nobody can answer the question — who's really hauling your freight — with certainty. Nobody. And so that was the essence of it."
"You just sound like you know what you're talking about. And if you sound like you know what you're talking about, you can unfortunately get a carrier rep to tell you certain things. That's why we have to trap it at the phone."
"There's no amount of acceptable fraud, but there is an acceptable amount of risk. If you do it right, even in that acceptable risk, you're going to have a very good opportunity to recover that cargo."
"A carrier consumes freight. If you want to show up and consume freight here, you're going to operate with a level of transparency that's not required in marketplaces, because it's a different model. For an exchange to work, it's got to be a high trust environment."
Episode Chapters
- 00:00Opening: fraud needs prospective gain, anonymity, and urgency
- 02:04Welcome and Michael Caney intro
- 04:05Historical lens: savings & loan crisis, the trust-without-verification problem
- 06:08Jordan Graft at TriumphPay and the question "who's really hauling your freight?"
- 08:10The carrier vetting gap: insurance packets, tracking dots, no KYC
- 10:13International call centers and the perfect fraud environment
- 12:15Attack vectors: from brute-force onboarding to social engineering
- 16:25How bad actors extract pickup numbers by impersonating drivers
- 18:33Sold MCs: behavior changes, overbooked loads, and the subtle pattern
- 20:37Fished inboxes: fake login pages, silent monitoring, deleted sent mail
- 22:39The numbers: 90K to 187K blocked inbox incidents in six months
- 24:42Culture as defense: conviction, overrides, and the billion-dollar broker with zero fraud
- 28:53No acceptable fraud, but there is an acceptable amount of risk
- 33:17Cargo recovery and credit-style worthiness ratings for carriers
- 35:17Trusted Freight Exchange: exchange vs. marketplace model explained
- 39:25Conforming transactions: how TFX rules enable underwriting and fast payment
- 43:26ELD-backed proof of stake; why Highway is free for carriers
- 47:29Load lock: auto-assigning trucks, no-touch loads, catching carriers breaking bad
- 49:38Future: instant carrier payment, LoadPay wallets, broker stays the point
Full Transcript
Expand
The Freight Show
New episodes on freight, logistics, and AI. Subscribe to get notified.