Carrier insurance fraud
Fake certificate of insurance: how to catch a forged or doctored COI
A certificate of insurance is one of the easiest documents in freight to fake. It is a PDF a carrier hands you, not a live feed from the insurer, so a bad actor can lift a real template, change the named insured, inflate the limits, or push the expiration date out a year, and you would never know from the file alone. The dangerous part is that a fake COI looks exactly like a real one, because the format is the same; only the facts behind it are wrong. This page walks through how fake certificates of insurance get made, why a carrier-supplied COI is structurally not proof of active coverage, and the concrete steps that catch a doctored certificate before a load moves.
Check a carrier now
Run an MC or DOT number now, free and with no account, to see whether active insurance is on file with FMCSA, instead of trusting only the certificate a carrier emailed you.
Just the number works — with or without the MC/DOT prefix, and spaces are fine. Tip: prefix an MC number with “MC” (e.g. MC123456) so it isn't read as a DOT number.
Why a certificate of insurance is so easy to fake
An ACORD certificate of insurance is a static document. It records what someone typed up at one moment in time, nothing more. It does not phone home to the insurer, it does not update when a policy cancels, and it carries no live link to the underlying policy. That makes it a convenient courtesy document and a weak verification tool, because every field on it is text a person entered and can re-enter.
Fraudsters exploit exactly that. A COI is usually a PDF emailed straight from the carrier or its dispatch service to you, with no neutral party in between. Whoever controls that PDF controls what it says. The certificate format looks official and standardized, which is precisely why a doctored one passes a glance: the layout is legitimate even when the facts are not.
How fake and doctored COIs actually get made
Most fake certificates fall into a few patterns. You do not need to spot the forgery in the file. You need to know these exist so you stop treating the PDF as the answer.
- Field edits to a real certificate. A genuine COI is opened in a PDF editor and the numbers are changed: limits raised to meet your minimum, an expired policy date pushed forward, or a cargo line added that the policy never had. The insurer logo and template stay real; only the facts are altered.
- Swapped named insured. A bad actor takes a legitimate carrier's certificate and replaces the named insured with their own company, or impersonates a clean carrier and forwards that carrier's real COI under a stolen MC number, so the document is authentic but describes someone other than who you are tendering to.
- Fabricated from a blank template. ACORD-style templates are widely available online. A certificate can be built from scratch with an invented policy number, a real insurer's name, and an agency contact that routes back to the fraudster instead of the actual broker of record.
- Stale but genuine. The certificate was real when issued, but the policy was cancelled or lapsed afterward. Nothing on the document changes when coverage ends, so a year-old COI for a now-uninsured carrier can still look perfectly valid.
The authoritative source is not the certificate
Two sources sit outside a carrier's PDF editor: the insurance filing on record with FMCSA, and the insurer itself. Federal law (49 CFR § 387.301) bars a for-hire carrier from operating in interstate commerce 'unless and until there shall have been filed with and accepted by the FMCSA…certificates of insurance,' and that coverage must 'remain in effect at all times' — and the insurer must give FMCSA 30 days' written notice before a policy can be cancelled (49 CFR § 387.313), which can lead to revocation of the carrier's authority. That filing is the federal record, and the carrier does not control it.
- FMCSA insurance on file. Pull the carrier's record and confirm active insurance is actually on file. If the certificate describes coverage the federal filing does not show, or the filing shows nothing active, the certificate and the record disagree, and the record is the one the carrier cannot edit.
- The insurer or broker of record, directly. Call the agency using a number you found independently, not the contact printed on the certificate. Confirm the policy is in force, that the carrier is the named insured, and that the limits and dates match. This is the check a fabricated agency contact cannot survive.
- Treat the COI as a starting point. A certificate is fine as a courtesy record and as the place you read off a policy number to verify. By itself it is not evidence that coverage exists today. The filing and the insurer are where you confirm that.
How to catch a fake COI before you tender
You catch a fake by comparing the certificate against the sources the carrier cannot touch, and by treating mismatches as a hard stop rather than a paperwork hiccup. A quick, repeatable pass beats a careful read of a document that can lie.
- Match the named insured to the carrier you booked. The legal name and address on the COI should match the carrier on the FMCSA record and the entity on your rate confirmation. A name that is close but not exact is a classic identity-reuse and impersonation tell.
- Cross-check the insurer and dates against FMCSA. Compare what the certificate claims to the active insurance on file in the federal record. A certificate showing coverage the filing does not is one of the most reliable signs of a doctored or stale COI.
- Verify the agency contact independently. Look up the listed agency's real phone number yourself and call it. If the only way to reach the agent is the contact on the certificate, you have verified nothing. That loop is what a fabricated COI is built to keep you inside.
- Inspect the file and the limits. Watch for edited PDFs, mismatched fonts in the limit fields, round numbers that conveniently equal your minimum, and an expiration date that lands suspiciously far out. Any one of these is a reason to verify, not to wave it through.
- Re-check at the moment you tender. Coverage that was real at onboarding can lapse before your next load. Confirm insurance on file at the time you actually hand over the freight, not just when you set the carrier up.
Where CarrierClear fits
CarrierClear does not read the PDF a carrier emails you. It goes to the source the carrier cannot edit. A free lookup pulls the carrier's FMCSA record and shows whether active insurance is on file, so you can compare the certificate to the federal filing in seconds and spot a coverage claim the record does not back up. Every check produces a dated PDF vetting record of what the federal data showed when you looked. CarrierClear is an information tool built on public FMCSA records; it does not certify any carrier's coverage.
Paid plans add more on the fraud angle behind fake certificates: a risk rating that always shows the exact reasons behind it, the full insurance picture of on-file versus required coverage for liability, cargo, and bond, OFAC sanctions screening, phone and address fraud screening on the contact details a carrier hands you, and an identity-reuse flag for carriers sharing an EIN or phone with others, the same recycled-identity pattern behind swapped-insured certificates. Paid plans also put the carrier under ongoing monitoring with email alerts and a dated change-history log, so a policy that lapses after you onboard can reach you before the next tender. Plans run Solo $49, Team $99, and Pro $199 a month.
Common questions
- Can you fake a certificate of insurance?
- Yes, easily. A certificate of insurance is a static PDF, usually emailed by the carrier, so anyone who controls that file can edit the limits, change the named insured, or push out the expiration date. The format stays legitimate while the facts are false, which is why a fake COI can pass a quick visual review. The way to be sure is to verify against the FMCSA insurance filing and the insurer directly, since the carrier cannot edit those.
- How do I verify a certificate of insurance is real?
- Compare it to two sources the carrier does not control. First, check the FMCSA record for active insurance on file and see whether it lines up with what the certificate claims. Second, look up the listed agency's phone number independently, not the one on the COI, and call to confirm the policy is in force and the carrier is the named insured. If the certificate describes coverage the federal filing does not show, treat it as suspect and stop.
- Why isn't a carrier-supplied COI proof of insurance?
- Because a certificate only records what was true at the moment it was issued, and it never updates. If the policy cancels or lapses the next day, the document still looks valid. It also has no live link to the insurer, so a doctored or fabricated certificate is hard to tell from a real one on the file alone. Confirmation of active coverage comes from the FMCSA filing and the insurer, not the PDF.
- What are the warning signs of a fake or doctored COI?
- A named insured that does not exactly match the carrier on the FMCSA record, an insurer or policy detail that conflicts with the federal filing, an agency contact you can only reach through the certificate itself, edited or mismatched fonts in the limit fields, limits that exactly hit your minimum, and an expiration date set unusually far out. Any one of these is a reason to verify before tendering, not to accept the document.
- Does CarrierClear check certificates of insurance?
- CarrierClear does not read the certificate a carrier emails you. It pulls the carrier's FMCSA record so you can see whether active insurance is on file and compare that to the certificate. It is an information tool built on public FMCSA records, not a certification of any carrier's coverage. It gives you the federal facts to catch a certificate that does not match, plus a dated record of what you checked.
Sources
- 1.49 CFR § 387.301 — Surety bond, certificate of insurance, or other securities (must be on file with FMCSA) — Cornell Law School, Legal Information Institute
- 2.49 CFR § 387.313 — Insurance cancellation requires 30-day written notice to FMCSA — Cornell Law School, Legal Information Institute
- 3.49 CFR § 387.9 — Minimum levels of financial responsibility ($750,000 general freight) — Cornell Law School, Legal Information Institute
How to verify carrier insurance →Freight fraud prevention playbook →Chameleon carriers and identity reuse →Carrier onboarding packet →
CarrierClear displays public FMCSA records and records your own verification. It is not legal advice and not a certification of any carrier’s fitness, legitimacy, or insurance. Verify independently before relying on any record. Comparisons reflect our understanding of publicly available information as of the date shown and may change; CarrierClear is not affiliated with, endorsed by, or sponsored by any other company named here, and all trademarks belong to their respective owners.