Beware of Phishing Scam: Fraudulent FMCSA Emails Seek Sensitive Data

 

The Federal Motor Carrier Safety Administration (FMCSA) has issued a warning about a recent phishing scam targeting entities registered with the FMCSA.  The scam involves emails sent from addresses that appear to be official FMCSA addresses, such as safety@fmcsa.gov or filing@fmcsa.gov. These emails, however, are not legitimate.

 

The Scam Details

The emails contain a PDF form resembling the official MCSA-5889 form but have been altered to request sensitive information, including Social Security Numbers (SSN) and USDOT Personal Identification Numbers (PIN).  The FMCSA has emphasized that they would never request such information on their forms.  Additionally, the emails often use threatening language, demanding a response within a day under the threat of fines.

 

FMCSA's Response

The FMCSA advises recipients not to fill out the attached forms or respond to these emails.  Authentic communications from the FMCSA will either ask carriers to log in to their portal account at FMCSA Login (dot.gov) or come from a dedicated FMCSA mailbox, usually ending in ".gov".  The FMCSA encourages verification of any suspicious emails or communications.

 

Verification and Reporting

To avoid falling victim to these scams, the FMCSA provides several verification tips:

  • Official communications will request logins to FMCSA portals or come from dedicated FMCSA mailboxes.
  • Verify any suspicious emails, even those with ".gov" extensions.
  • Follow the Federal Trade Commission's (FTC) email verification procedures.
  • Contact the FMCSA's Office of Registration directly through their official page.

 

If you suspect that your company has been a victim of fraud or identity theft, report the incident on the FMCSA’s website under the Fraud Advisory link or contact the DOT Office of Inspector General at 800-424-9071 or hotline@oig.dot.gov.

 

Previous Scams

This is not the first-time scammers have targeted FMCSA or other transportation-related agencies.  Earlier in February, a similar phishing scam disguised as a safety audit requested personal identification numbers and Social Security numbers.  In June, the Massachusetts Department of Transportation warned about a text messaging scam claiming to represent the state’s tolling agency and requesting payments for unpaid tolls.

 

Staying Safe

Trucking companies and drivers should remain vigilant and always verify the authenticity of any communication requesting personal or sensitive information.  By following FMCSA guidelines and reporting suspicious activities, you can protect your business and personal data from phishing scams.

Comments

Popular posts from this blog

Shippers at Risk: Understanding Vicarious Liability in the Transport Industry

The Household Goods Shipping Consumer Protection Act: Empowering FMCSA to Combat Fraud

Ensuring Safety and Compliance: The Essentials of Hazmat Shipping