Freight Forwarder Scams: Verify the Booking and the Payment Change
Verify changed payment instructions through an independently established contact channel before sending funds.
AI-generated editorial illustration.
How can a shipper check a suspicious forwarder payment request?
Verify changed payment instructions through an independently established contact channel before sending funds. Compare the contracting entity, booking and bank beneficiary, and escalate unexplained differences. A professional email, copied bill of lading or familiar logo does not prove that the sender controls the legitimate account or is authorised to collect payment.
Treat a last-minute change as a verification event
The FBI's April 2026 alert on cyber-enabled cargo theft describes fraud affecting freight movements. Checking the physical shipment and the identity behind an instruction are both necessary. A genuine shipment can still feature in a fraudulent message.
Use contact details established before the suspicious request, rather than its telephone number or link. Confirm the exact instruction with an authorised person and follow company payment controls. This process reduces uncertainty; it is not a promise that one check detects every scam.
| Warning sign | Verification step | Evidence to retain |
|---|---|---|
| New bank account | Independent callback to an established contact | Confirmation and approval |
| Different beneficiary | Reconcile the entity and contract | Supporting explanation |
| Urgent release threat | Check the genuine provider's booking | Actual shipment status |
| Changed collection details | Verify the authorised transport party | Dispatch records |
| Unfamiliar login link | Use the known portal directly | Message preserved safely |
A real booking can sit inside a false email
In a fictional case, a fraudster copies an invoice and changes only the bank details. The shipment number and vessel name are correct, so the buyer assumes the document is authentic. Independent confirmation with the established forwarder reveals that no account change was requested.
Do not send credentials or sensitive documents to the suspicious sender. If funds were transferred, contact the bank promptly through its genuine channel, report through the relevant authorities and notify affected partners using verified details. Preserve messages and transaction information for investigation.
Ask what the insurance addresses
Cargo theft, misdelivery, fraudulent payment and cyber compromise are different scenarios. Marine cargo, liability, crime and cyber policies can have different triggers and exclusions. A forwarder's certificate is not a guarantee that a shipper's diverted payment will be reimbursed.
Describe the transaction and loss accurately when notifying an insurer. Separate missing goods from money sent to an incorrect account, and retain the checks performed. Avoid publicly accusing a named provider before identity and facts are established.
Read the broker selection guide, review marine cargo insurance, or submit a shipment enquiry through the site's application page.
Key takeaways
- Independently verify changed payment and collection instructions.
- A genuine booking reference does not authenticate an email.
- Separate cargo loss, payment fraud and cyber events when reviewing cover.
Frequently asked questions
How can a shipper check a suspicious forwarder payment request?
Verify changed payment instructions through an independently established contact channel before sending funds. Compare the contracting entity, booking and bank beneficiary, and escalate unexplained differences. A professional email, copied bill of lading or familiar logo does not prove that the sender controls the legitimate account or is authorised to collect payment.
Sources & further reading
General information, not a coverage determination or offer. Actual cover is subject to policy wording, insurer terms, underwriting and applicable law.