LogisticsIndustry ContextThursday, October 22, 20264 min read

Feds charge driver in alleged $12M cargo theft scheme built on hijacked carrier identities

Freightwaves11h agogeneral
Feds charge driver in alleged $12M cargo theft scheme built on hijacked carrier identities
Executive Summary

At least 24 shipments vanished after drivers collected merchandise from distribution centers. Authorities also uncovered fraudulent licenses, altered identities and ransom demands. The post Feds charge driver in alleged $12M cargo theft scheme built on hijacked carrier identities appeared first on FreightWaves.

Source Lens

Industry Context

Useful background context, but lower-priority than direct platform, community, or operator intelligence.

Impact Level

medium

Use this briefing to decide whether your team needs an immediate workflow, policy, or reporting change.

Key Stat / Trigger

No single quantitative trigger surfaced in this report.

Focus on the operational implication, not just the headline.

Relevant For
Brand SellersAgencies

Full Coverage

Federal prosecutors have uncovered an alleged cargo theft conspiracy involving at least 24 freight shipments and millions in stolen merchandise. Investigators say suspects took control of established trucking companies and used their identities to secure legitimate freight contracts.

Drivers then collected shipments from distribution facilities, but the cargo never reached its intended destinations. Authorities estimate that thefts involving one defendant exceeded $12 million in retail value. The U. S. Attorney’s Office for the District of Connecticut announced federal charges against Nursulton Khaydarov on October 21.

Khaydarov, 33, is a citizen of Uzbekistan and lawful permanent resident of the United States. Prosecutors accuse him of participating in a conspiracy that targeted interstate shipments from California and other locations. He pleaded not guilty during an appearance in federal court in Bridgeport, Connecticut.

According to federal investigators, the operation began around September 2025 and involved multiple motor carriers. Participants purchased trucking businesses or otherwise assumed control of their existing operations. They obtained U. S.

Department of Transportation numbers, motor carrier identification numbers, business email accounts and ownership identities. The group then impersonated previous owners to negotiate transportation agreements with freight brokers.

How the alleged carrier takeover scheme worked The suspects relied on established business identities rather than creating entirely new trucking companies. Prosecutors contend that these arrangements allowed participants to exploit existing reputations and relationships within the freight industry.

Brokers negotiated interstate transportation contracts with individuals posing as legitimate carrier representatives. After drivers collected the merchandise, the shipments disappeared before reaching their scheduled delivery locations. The scheme resembles a growing problem involving the buying and selling of established trucking companies.

Some operators acquire existing businesses to obtain operating histories, established credentials and relationships with freight brokers. Older authorities may pass routine vetting more easily because their federal records already show years of activity.

FMCSA has warned against buying, selling or leasing operating authority outside legitimate corporate transactions. For freight brokers, the challenge extends beyond confirming an active DOT number or valid insurance. Recent ownership changes, updated contact information and unfamiliar email domains can warrant additional verification.

Insurance changes and inconsistencies between registration records also deserve closer examination. An established operating history means little if brokers cannot verify who actually controls the company. The indictment describes additional steps participants allegedly took to conceal their activities.

Prosecutors accuse the group of switching tractor license plates and using burner phones with encrypted messaging applications. Court records also describe efforts to defeat electronic shipment tracking systems. Investigators contend that participants provided false explanations about delayed or missing freight after completing pickups.

Images from an FBI affidavit show a tractor-trailer and a close-up of its license plate, which investigators examined during an alleged $12 million cargo theft conspiracy. (Source: FBI affidavit/U. S. District Court) Federal investigators also documented ransom demands involving stolen shipments.

According to the indictment, participants requested cryptocurrency or electronic transfers in exchange for returning merchandise. An FBI affidavit identifies approximately $121,000 in cryptocurrency that Khaydarov’s Coinbase account received across 33 transactions.

Those payments occurred between November 2025 and May 2026, although investigators did not establish that every transfer represented ransom. The stolen merchandise covered several categories of commercial freight. Prosecutors identified hard drives, stereo equipment, clothing, electronics and computer equipment among the missing products.

Other shipments contained food items, nicotine products and additional consumer goods. Investigators attributed more than $12 million in estimated retail losses to thefts involving Khaydarov personally. Multiple driver identities uncovered Federal court documents also describe several fraudulent driver’s licenses connected to Khaydarov.

Authorities identified five different names appearing on those documents. Each license displayed his photograph with altered facial features. Investigators also confirmed that he possessed a valid New Jersey commercial driver’s license.

A photograph included in an FBI affidavit shows an individual investigators identify as Nursulton Khaydarov inside a truck cab during the cargo theft investigation. (Source: FBI affidavit/U. S. District Court) One documented incident inv

Original Source

This briefing is based on reporting from Freightwaves. Use the original post for full primary-source context.

View original
LinkedIn Post Generator

Style

Audience

Keep exploring

A better next move starts here.

News → context → decision