While Washington debates fraud legislation and FMCSA tightens its registration gates, a quieter market has kept right on trading — and the product it sells is you. New research published this week by Overdrive reveals a thriving underground trade in motor carrier authorities: thousands of MC numbers openly listed for sale on Facebook and Telegram, changing hands for five figures, most of them without a single ownership change ever recorded with FMCSA. If you hold an operating authority with a few clean years on it, you are not just a carrier in this market. You are inventory.

This is not an abstract compliance story. A sold or hijacked authority is the raw material behind the double brokering, phantom pickups, and strategic cargo theft we broke down in the small carrier fraud defense playbook — and when a criminal operates behind an authority that looks like yours, the freight claims, the insurance fallout, and the reputational wreckage land on a legitimate business. Today we walk through what the investigation found, why your authority is the product, and the five moves to make this week to keep your identity off the shelf.

What the Investigation Actually Found

Researchers at Alphaloops combed through roughly 9,950 Facebook group posts, 79,600 Telegram messages, and Facebook Marketplace listings, and documented 3,774 separate MC number sale listings, according to Overdrive’s report, updated July 16. The going rates tell you exactly what the market values: median asking prices ran $11,500 on Facebook Marketplace, $14,000 on Telegram, and $24,000 in Facebook groups, with one authority listed at $75,000. Sellers advertised access to platforms like Amazon Relay, and listings already integrated with carrier vetting platforms commanded prices more than 150 percent higher — because what the buyer is really purchasing is the trust your clean history generates. Facebook alone carries 100 to 200 for-sale posts a month, and the researchers believe they captured only about 70 percent of the market.

The most damning numbers are the ones that show how invisible these deals are to the system built to catch them. Of 710 MC numbers the researchers saw marked as sold, 84.8 percent showed no recorded ownership change with FMCSA, and 95 percent recorded no change in legal business name. On Telegram, over 99 percent of listings traced back to just four email addresses — this is organized commerce, not scattered opportunism. Payment typically moves by Zelle, the paperwork never moves at all, and the authority keeps operating under a name that no longer describes who is behind the wheel. As FreightWaves put it in its investigation of the underground authority market, a fraudster needs only hours with a believable identity to book and steal loads — and among more than 1.8 million entities registered with USDOT, an agency with a $964 million budget cannot audit its way to every one of them.

Why This Lands on Small Carriers Hardest

FMCSA is not ignoring the problem — its March 2026 guidance states flatly that upon discovering attempts to sell, purchase, or lease a USDOT number, the agency will initiate proceedings to inactivate it, and the broader identity crackdown has already reshaped registration, as we covered in our report on the SAFER Transport Act and FMCSA’s vetting overhaul. But the enforcement gap between 3,774 listings and any realistic audit capacity means the first line of defense is you. And the stakes run in both directions: if your authority gets hijacked or spoofed, you inherit the claims and the blacklistings; and every hijacked authority in circulation is why brokers now vet legitimate small carriers like suspects — the same pressure behind Highway tying broker vetting to your ELD connection. Here are the five moves, in order.

Move One: Lock Down Your FMCSA Registration This Week

Your registration record is the deed to your business, and most carriers have not looked at theirs in years. This week, log into the FMCSA portal and verify every field: legal name, principal address, phone, email, and company officers. Fraudsters begin an authority takeover by quietly filing an update that swaps the contact email and phone to theirs — after that, they receive the correspondence, they “are” the company, and you find out when the claims arrive. Confirm your Login.gov credentials are yours alone, with two-factor authentication on an account you control — not a former partner’s cell number, not the compliance service you dropped two years ago. Then put a recurring 15-minute appointment on your calendar for the first Monday of each quarter to pull your own SAFER snapshot and confirm nothing has moved. Your MCS-150 biennial update is also your natural checkpoint — never let a third party file it from an address you cannot access.

Move Two: Learn the Signs Your Authority Is Being Shopped

Hijacked authorities announce themselves — if you know what to listen for. The classic tells: a broker calls about a load you never booked or a driver you never hired; your insurance agent gets certificate requests you did not initiate; a factoring company you have never used runs a verification on your MC; carrier packet requests arrive from brokers you never contacted; or your safety scores shift on inspections in states your trucks do not run. Any one of these means someone may be operating as you right now. Search your own MC and DOT numbers online monthly — it takes five minutes, and if your identity is listed for sale in one of these groups, you want to be the first to know, not the last. Make sure your dispatcher and drivers know these red flags too, because the first strange call usually reaches them, not you.

Move Three: Never Buy a Number — and Never Sell Yours Informally

The temptation runs both ways, so be clear about both. If you are entering the market or restarting, an “aged MC” for $14,000 looks like a shortcut past the new-entrant grind — broker 90-day rules, insurance surcharges, the audit we covered this week. It is not a shortcut; it is a trap. Under FMCSA’s March guidance, a discovered sale triggers proceedings to inactivate the number — meaning your $14,000 buys an authority that can be switched off the moment anyone looks closely, and you inherit whatever history its previous operators created. If you are exiting the industry, that same buyer offering cash by Zelle for your clean MC is asking you to hand a weapon to a fraud ring with your name still engraved on it — and remember that 95 percent of these “sales” never even change the legal business name. A legitimate exit is an asset sale or a proper corporate transaction — stock, assets, and liabilities together, documented with FMCSA — done with a transportation attorney. If your buyer resists that structure, you are not selling a business. You are selling your identity.

Move Four: Assume You Are Being Vetted Harder — and Make It Easy

Every one of those 3,774 listings makes brokers and shippers more suspicious of every legitimate small carrier — that is the tax fraud levies on the honest. Your countermove is consistency. Keep one set of contact information everywhere your company appears: FMCSA registration, your insurance certificates, your carrier packet, your email domain, and your vetting-platform profiles should all match to the letter. A legitimate carrier whose FMCSA email differs from its packet email looks exactly like a hijacked authority to a fraud algorithm, and mismatches now cost you loads silently. While you are at it, claim and complete your profiles on the major vetting platforms yourself — the research showed listings advertising vetting-platform integration at premium prices precisely because those profiles carry trust. Occupy your own identity before someone rents it.

Move Five: Know Exactly What to Do the Day You Find Out

If you discover your authority listed for sale or operating without you, speed decides how much it costs. The same day: report it to FMCSA through the National Consumer Complaint Database at nccdb.fmcsa.dot.gov and call the DOT Office of Inspector General hotline; notify your insurance agent in writing so fraudulent certificate requests get flagged instead of filled; alert your factoring company to freeze verifications you did not originate; and call your top brokers and shippers personally, before their fraud team calls you. Screenshot the listing — group name, seller handle, asking price, date — because that evidence is what turns your report from a complaint into a case. Then change every credential connected to your operation, starting with Login.gov and your email. Carriers who move within 24 hours contain these episodes; carriers who wait a week spend a year cleaning up.

Bottom Line

The underground authority market prices your reputation at $11,500 to $24,000 — and 85 percent of the time, the system never even records that the sale happened. Regulators are moving, but between 3,774 listings and four email addresses running an entire Telegram marketplace, the defense that matters is the one you run yourself: a locked-down registration, a quarterly self-check, consistent identity everywhere, a flat refusal to buy or sell numbers, and a same-day response plan. Your MC number took years of clean operation to build its value. Spend an hour this week making sure you are the only one who ever gets to spend it.

Innovative Logistics Group