This publish is a part of a collection sponsored by IAT Insurance coverage Group.
The Federal Motor Service Security Administration (FMCSA) has issued a warning a few refined phishing rip-off concentrating on motor carriers. Fraudulent emails, posing as official communications from the FMCSA are being despatched to registered entities with the intent of extracting delicate info.
These emails are designed to seem professional, full with the FMCSA brand and formatting that carefully mimics real correspondence. Nonetheless, the content material and data requested are clear pink flags for these within the know.
Instance of phishing electronic mail
Rip-off particulars
The phishing emails in query ask carriers to finish an hooked up registration type. This kind goes past the standard requests, asking for private particulars such because the provider’s social safety quantity, USDOT private identification quantity and RMIS ID. In some instances, carriers are even requested to add copies of their certificates of insurance coverage and driver’s license, beneath the ironic pretense of “fraud safety.”
Don’t full this type!
Recognizing the pink flags
The FMCSA has emphasised they might by no means request such delicate info through electronic mail types. Official communications from the FMCSA regarding info requests will both direct you to log in to your portal account or will come straight from an FMCSA-dedicated mailbox. Furthermore, any professional electronic mail from the FMCSA will come from an official FMCSA electronic mail handle and never from the doubtful addresses at the moment getting used for these fraudulent requests: security@fmcsa.gov or submitting@fmcsa.gov.
Additionally, use the official FMCSA web site for biennial updates. Transportation corporations should replace their info each two years, primarily based on the final digit of their DOT quantity. When you make any modifications to your fleet measurement, whether or not it grows or shrinks, replace your MCS-150 on the FMCSA web site. Solely obtain and fill out types from the official .gov web site. Failure to take action will influence your CSA scores and make you non-compliant.
It’s essential to stay vigilant and confirm any suspicious electronic mail seemingly from the FMCSA or different company. When you obtain an electronic mail demanding private particulars or threatening to cancel your USDOT quantity inside 24 hours for those who don’t comply, it’s a rip-off. The FMCSA and different U.S. businesses don’t function on this method.
5 tricks to shield your self from phishing scams
Listed below are 5 finest practices to guard your self and your corporation from falling sufferer to a phishing rip-off:
- Confirm the e-mail supply. At all times examine the sender’s true electronic mail handle by hovering your cursor over it to disclose the total handle. This observe will show you how to determine the e-mail supply and decide if it’s professional.
- Keep away from clicking on suspicious hyperlinks or downloading attachments. Likewise, if an electronic mail comprises hyperlinks, hover over them to see the place they lead earlier than clicking. If the URL appears to be like suspicious, do NOT click on it.
- Watch out for urgency. Phishing emails usually create a way of urgency to immediate fast motion. Be cautious of any electronic mail that threatens drastic motion if you don’t reply inside a brief timeframe.
- Don’t share private info by electronic mail. By no means present private or delicate info through unsecured electronic mail communications. Keep in mind, official businesses just like the FMCSA won’t ever request account numbers, passwords, Social Safety numbers, USDOT PIN, bank card particulars, copies of invoices or different private info through electronic mail types or an unsolicited textual content, telephone name or fax. When you obtain such a request, it’s a rip-off.
- Report suspicious emails. When you obtain a suspicious electronic mail, instantly report it to the FMCSA or your IT division. This helps forestall others from falling sufferer to the identical rip-off.
Why now? New login necessities from the FMCSA web site create confusion
In response to a presidential mandate for multi-factor authentication, the FMCSA started transitioning to Login.gov in 2024 to boost on-line security and safety. This transition requires all customers with credentials for any FMCSA system to make use of a Login.gov account to entry FMCSA methods as a substitute of utilizing their DOT PIN.
As of January 1, www.login.gov is the only methodology for accessing the FMCSA portal and the Unified Registration System; nevertheless, throughout this era of transition, the phishing rip-off is benefiting from carriers who is perhaps confused by the brand new system.
To log in, you will need to now use the federal portal through Login.gov. The FMCSA PIN is now not legitimate for accessing the system. Be sure to request a brand new login from Login.gov, choose who shall be accountable for the login, and make sure you full the verification course of by hitting the “GO” button or the “SMS” button, relying on the system you’re accessing.
ASK A LOSS CONTROL REPRESENTATIVE
Have a query on the right way to mitigate danger? E mail losscontroldirect@iatinsurance.com for an opportunity to see your query answered in a future weblog.
By Nancy Ross-Anderson
Subjects
Trucking
Fascinated by Trucking?
Get computerized alerts for this subject.
