US Cargo Theft by Corridor: The 2026 Regional Risk Map for Supply Chain Leaders

TL;DR: Cargo theft in 2026 is increasingly driven by organized criminal networks that impersonate legitimate carriers, harvesting credentials and acquiring motor carrier businesses to secure high-value loads directly at the origin dock. CargoNet recorded 767 supply chain crime events in Q1 (first quarter) 2026, with losses holding at $131.58 million. Separately, Overhaul's Q1 2026 Cargo Theft Report found deceptive pickup schemes rose 31% year over year, across its own distinct 574-incident dataset. National averages obscure the real story: corridor-level concentration in Southern California, the Northeast I-95 corridor, and emerging secondary markets like Memphis and Phoenix drives the majority of US freight losses. Use this map to score lanes by theft exposure, tighten carrier contract requirements by corridor, and configure alert thresholds before your next high-value load departs.

Cargo theft in the United States cost an estimated $725 million in 2025, up 60% over 2024, according to CargoNet/Verisk annual data. That number will not tell you whether your Dallas-to-Atlanta lane is at elevated risk next quarter. This guide maps where US freight theft is concentrated in 2026, down to specific corridors, counties, and intermodal handoff points, so supply chain directors can make routing, carrier assignment, and security investment decisions based on route-level evidence rather than national averages.

How Cargo Theft Risk Is Distributed Across NAMER in 2026

Cargo theft in North America (NAMER) is not evenly distributed. California and Texas were the dominant theft states entering 2025, with California recording a 33% rise in incidents in 2024 and Texas a 39% surge, per CargoNet's 2024 annual analysis. Both states sit at the center of the US freight network: the Los Angeles/Long Beach port complex and the Houston port district are among the five busiest container gateways in the country, together handling roughly 40% of US containerized import volume, per American Association of Port Authorities (AAPA) annual throughput data. By 2025, however, that concentration was already dispersing: California's incident share remained the highest nationally at 1,218 events but Los Angeles County fell 11% as activity displaced inland, while New Jersey (+50%), Indiana (+30%), and Pennsylvania (+24%) each recorded significant year-over-year increases, per CargoNet 2025 annual data. Where freight concentrates, organized theft follows. In 2026, that concentration is shifting.

A note on data sources: The corridor-level figures below draw on two separate Q1 2026 reports with different methodologies and incident-capture scopes. CargoNet's Q1 2026 analysis recorded 767 supply chain crime events across the United States and Canada. Overhaul's Q1 2026 Cargo Theft Report recorded 574 total incidents using its own proprietary capture methodology. The two totals are not comparable and should not be read as one continuous dataset. Where both sources are cited within the same corridor entry, each figure is attributed to its own report.

For 2026, the five primary risk corridors ranked by current exposure are:

1. Southern California / Inland Empire (I-10, I-15, Highway 99): California increased from 255 to 277 incidents in Q1 2026, per CargoNet Q1 2026, and accounted for 36% of all reported incidents nationally, per Overhaul's Q1 2026 Cargo Theft Report, via NICB. Organized crime networks with California as a primary operating environment are sustaining and growing activity even as national volume falls.
2. Northeast I-95 Corridor (New Jersey to Boston): New Jersey surged from 27 to 59 incidents in Q1 2026, a 119% year-over-year jump, per CargoNet Q1 2026. Both California and New Jersey are identified as primary operating environments for organized crime networks with a nexus in the New York City metropolitan area.
3. Memphis / Tennessee (I-40, I-55 interchange): Tennessee ranked 4th nationally in Q1 2026, accounting for 12% of all reported incidents, per Overhaul Q1 2026, via NICB. Organized groups expanded beyond traditional hotspots into freight hubs including Memphis as California and Northeast corridors absorbed enforcement pressure, per Tive Q1 2026 analysis. CargoNet Q1 2026 identifies the Southeast as a region of reduced domestic criminal organization activity overall, with more targeted operations concentrating in California and the New York City metro area.
4. Texas Triangle (I-35, I-45, I-10: Dallas, Houston, San Antonio): Texas declined from 102 to 80 incidents in Q1 2026, a 22% year-over-year drop, per CargoNet Q1 2026. Texas still accounted for 17% of all reported incidents nationally, per Overhaul Q1 2026, via NICB, ranking 2nd behind California. Opportunistic activity common in Dallas-Fort Worth and Houston corridors is giving way to more targeted operations elsewhere.
5. Chicago / Midwest Intermodal (I-80, I-94): Illinois ranked 3rd nationally in Q1 2026 at 13% of all reported incidents, per Overhaul Q1 2026, via NICB.

Before mapping corridor-level exposure, it helps to understand what the headline incident numbers actually reflect and where national averages actively mislead routing decisions.

National Theft Volume and Trend Direction

The headline number from CargoNet's Q1 2026 report is deceptive: 767 supply chain crime events, down 5.3% year over year. Losses still held at $131.58 million for the quarter because organized criminal networks have stopped chasing volume and started chasing value. The average theft value reached $273,990 in 2025, up 36% from $202,364 in 2024, per CargoNet's annual analysis, reflecting more selective, high-value targeting by groups that have shifted their tactics fundamentally.

The defining shift is the rise of strategic theft, which the American Trucking Associations describes as using fraud and deception to trick shippers, brokers, and carriers into handing loads over to thieves instead of the legitimate receiver, as distinct from straight theft involving physical burglary, pilferage, or hijacking. Strategic theft covers fictitious pickups, carrier identity theft, and double-brokering schemes where criminals impersonate legitimate carriers using stolen or forged credentials to secure loads directly from the origin dock. By Q1 2026, impersonation-based theft had matured into a systematic, scalable criminal methodology, with deceptive pickup schemes and strategic cargo theft rising 31% year over year, per Overhaul's Q1 2026 Cargo Theft Report, via NICB, even as overall incident volume fell.

Criminal networks now operate through two documented methods. The first, described in detail in the Federal Bureau of Investigation (FBI)/Internet Crime Complaint Center (IC3) April 2026 Public Service Announcement, is cyber-enabled account compromise: threat actors send spoofed emails impersonating brokers, using shortened or falsified URLs, that direct targets to phishing websites hosting malicious executable files. Once clicked, those files download remote monitoring and management software, giving threat actors undetected, total access to broker and carrier computer systems. With that access, they post fraudulent loads on load boards using compromised accounts, bid on real loads posing as legitimate carriers, manipulate bills of lading, and reroute freight to complicit drivers for cross-docking or transloading. The second method, per CargoNet Q1 2026, is outright acquisition of legitimate motor carrier businesses through social media and peer-to-peer marketplaces, giving criminal networks an operating authority with a clean load history.

Strategic theft succeeds without ever triggering a GPS alert on the tractor, because the criminal arrives with paperwork that looks legitimate and loads the cargo onto their own equipment. Carrier GPS tracks the tractor. It does not track the cargo.

Why Corridor-Level Data Matters for Routing Decisions

A national theft rate is a useful benchmark for insurance actuaries. It is not useful for a supply chain director deciding which carrier to assign to a specific lane next quarter. Corridor-level data reveals the actual exposure for each route, which dictates the security requirements written into carrier contracts, the tracker deployment density appropriate for each lane, and the alert thresholds configured before a shipment departs.

National incident volume fell 5.3% in Q1 2026, per CargoNet, yet New Jersey surged 119% over the same period while Texas dropped 22%. A single national figure pointing in one direction while two individual states move in opposite directions at triple-digit magnitude is the clearest illustration of why national averages do not inform lane-level security decisions. The Tive 2026 Buyer's Guide frames the on time and in full (OTIF) exposure directly: the cost of missing visibility is measured in incidents you could not detect and intervention windows you could not use.

High-Risk Corridors and Freight Lanes

The five corridors below account for the majority of documented US freight losses. Each carries a distinct risk profile, cargo target mix, and dominant theft method.

Southern California and Inland Empire

California accounted for 36% of all reported cargo theft incidents nationally in Q1 2026, per Overhaul's Q1 2026 Cargo Theft Report, via NICB, and recorded 1,218 incidents across 2025, per CargoNet annual data. Within California, the geography of that risk has shifted: Los Angeles County fell 11% while Kern County surged 82% and San Joaquin County rose 44%, per CargoNet 2025 data, indicating that the overall volume of theft activity within California is redistributing inland rather than declining. Food and beverage (+47%), metals (+77%, driven largely by copper products), and enterprise computing hardware and cryptocurrency mining equipment emerged as the primary growth targets in 2025, per CargoNet annual data. Consumer-grade electronics such as televisions and personal computers declined as a theft category over the same period, as organized networks shifted toward goods that move more easily through resale channels.

For port-to-warehouse drayage on these lanes, Tive Solo 5G trackers use GPS (accurate to 20 meters), WiFi geolocation (accurate to 50 meters), and cellular triangulation (accurate to 500 meters) to maintain continuous location coverage across drayage carrier handoffs. When a container moves from a terminal dray to a third-party transload facility, the tracker keeps transmitting on its preconfigured transmission schedule regardless of which carrier has custody. Software-only platforms that rely on carrier-reported data cannot replicate that continuity at the physical layer.

Texas Triangle: Dallas, Houston, San Antonio

Texas declined from 102 to 80 incidents in Q1 2026, a 22% drop per CargoNet, with the types of opportunistic theft historically common in the Dallas-Fort Worth and Houston logistics corridors giving way to more targeted operations elsewhere.

All three Tive multi-network trackers include a light sensor relevant for Texas long-haul lanes. The Solo 5G and Tive Solo Pro add GPS alongside cellular and WiFi geolocation, making them the appropriate choice for long-haul routes where precise location at the moment of door-open matters for recovery response. The Tive Solo Lite provides light, temperature, and motion monitoring via cellular and WiFi geolocation for lower-value lanes where cost-aware deployment is a factor. All three detect even low-light conditions the moment a trailer door opens, flagging unauthorized access during cargo staging or an unscheduled stop before the shipment reaches its destination.

Atlanta and Southeast Corridor

Atlanta sits at the intersection of I-75, I-85, and I-20, making it one of the country's primary cargo redistribution points. That logistics density makes it a target for fictitious pickup schemes and cargo redirection operations, where criminal networks use Atlanta's hub status to receive and rapidly move stolen loads before discovery. Tennessee accounted for 12% of all reported cargo theft incidents nationally in Q1 2026, ranking 4th behind California (36%), Texas (17%), and Illinois (13%), per Overhaul's Q1 2026 Cargo Theft Report, via NICB.

Chicago and Midwest Intermodal Hubs

Chicago anchors one of NAMER's largest inland rail interchange networks, creating persistent exposure along the I-80 and I-94 corridors. The risk profile centers on the transition from rail to over-the-road (OTR) transport, a handoff window where cargo often sits unmonitored for extended periods at rail ramps and transload facilities. Indiana recorded a 30% year-over-year increase in incidents in 2025, per CargoNet annual data, with Indianapolis emerging as a secondary market absorbing displacement activity as enforcement pressure builds in primary California and Northeast hubs.

Northeast I-95 Corridor

New Jersey incidents surged 119% to 59 in Q1 2026, making the Northeast I-95 corridor the fastest-accelerating risk zone in the country. CargoNet's Q1 analysis identifies a clear pattern: organized crime groups with a nexus in California and the New York City metropolitan area are sustaining or growing East Coast activity while domestic criminal organizations show reduced activity in Texas and the Southeast.

For pharmaceutical lanes on this corridor, Solo Pro trackers provide validated, audit-ready condition monitoring covering both physical security and temperature compliance under Food and Drug Administration (FDA) 21 Code of Federal Regulations (CFR) Part 11 and GxP/GAMP 5 (Good Automated Manufacturing Practice) requirements. Buyers should confirm how FDA 21 CFR Part 11 and GxP/GAMP 5 validation apply to their specific program directly with Tive. A door opening that compromises physical security on a pharma shipment may simultaneously trigger a temperature excursion, creating dual liability on a single event.

Counties and Metro Areas With Elevated Theft Rates

Metro-level incident counts still mask the county-specific concentration that drives carrier assignment and tracker deployment decisions on individual lanes.

Counties With Documented Elevated or Rising Incident Rates

The table below reflects incident trends from CargoNet 2024 and 2025 annual data and Overhaul, via NICB, and CargoNet Q1 2026 reporting. State-level figures are sourced directly from CargoNet. County-level commodity breakdowns are noted only where CargoNet or Overhaul name the county explicitly. All other county-level rows reflect the closest available state-level figure with that limitation stated. Trend direction indicates year-over-year change for 2025 versus 2024 unless otherwise noted.

Emerging Hotspots in Secondary Markets

CargoNet data identifies a consistent displacement pattern: as enforcement pressure builds in primary metros, criminal networks relocate to adjacent logistics hubs that offer comparable freight density with less law enforcement concentration. Phoenix (AZ), Memphis (TN), Charlotte (NC), and Indianapolis (IN) each show rising incident rates while primary hubs like Los Angeles County and Harris County decline. The operational response is tighter alert threshold configuration: shorter transmission intervals and narrower geofence parameters on trackers deployed through these corridors.

Intermodal Handoff Points and Vulnerability Windows

Cargo is most exposed when it changes custody. A shipment that moves from a long-haul carrier to a drayage operator to a transload facility encounters three distinct custody gaps where a physical tracker independent of any carrier's reporting system is the only continuous data source.

The table below maps the primary vulnerability windows against the appropriate mitigation layer:

High-Risk Nodes vs. Mitigation Strategies

Each node type below presents a distinct exposure profile. Port drayage and consolidation facilities generate the highest volume of custody-gap incidents, driven by carrier handoff complexity.

Port Drayage, Staging, and Consolidation Facilities

Port drayage moves cargo in short runs involving frequent driver changes, unattended trailer drops, and staging areas with open access. Criminal networks exploit that complexity through fictitious pickups and carrier impersonation, using forged credentials to take possession of loads that are then redirected rather than delivered to their intended destination. Entire truckloads and rail containers are redirected through identity spoofing schemes executed via email and load board fraud, per CargoNet. Consolidation centers compound the risk because multiple carriers and warehouse staff have simultaneous access to freight, making inside-job attribution without device-level event records extremely difficult.

Tive's global cellular, WiFi, and GPS trackers provide the ground-truth location layer that reveals when a container enters an unexpected staging zone or when a drayage run takes significantly longer than the route should require. The Seal, built with TydenBrooks, is an International Organization for Standardization (ISO) 17712 High-Security and Customs-Trade Partnership Against Terrorism (C-TPAT) certified smart cable lock paired with a Solo 5G tracker. It alerts instantly on cable cut, device damage, and forced entry or tampering, plus separation from its paired tracker, each with precise location at the moment of compromise and a timestamped audit trail in the Tive cloud for insurance claims and dispute resolution.

Rail Ramps and Transload Facilities

Rail operations present organized theft groups with extended dwell-time windows. Criminal groups have exploited slow-moving trains in urban and semi-rural areas using coordinated tactics including cutting brake lines, sabotaging signal equipment, and staging offloading operations supported by lookouts and radio communication, with multiple cases indicating prior knowledge of container contents and railcar placement, per the Roanoke Group 2026 Cargo Theft Report. Rail cargo theft accounted for approximately 10% of all reported cargo theft incidents, with heightened exposure along key corridors in California, Arizona, and the Midwest, and major rail hubs including Chicago, Memphis, and Southern California particularly affected. The transition from rail to truck, where cargo is off-loaded, palletized, or re-wrapped for OTR delivery, is a primary pilferage window.

Smart Route Deviation Alerts configured on trackers accompanying rail-to-truck transfers flag the moment a shipment leaves its expected path, including departures toward unauthorized staging locations during transload operations.

Rest Stops and Unsecured Parking Zones

The "red zone" principle in freight security designates the first 200 miles from load origin as the highest-risk window for theft, a concept originating with FreightWatch International and subsequently adopted by cargo security firms including Overhaul. Shippers running high-value lanes should write a no-stop rule for the first 200 miles into carrier contracts.

Practical Checklist for Handoff Security:

1. Verify carrier identity: Call back to verified numbers on file before releasing any load, not to numbers provided on the pickup request.
2. Configure tight geofence departure alerts: Any stop outside an authorized fuel stop or rest area within the first 200 miles triggers an immediate alert.
3. Set shorter transmission intervals in high-risk zones: Tive's patented bi-directional connectivity lets logistics teams adjust tracker transmission schedules while shipments are in transit, tightening intervals through known theft corridors without recalling the device.
4. Activate the Seal on high-value loads: Physical cut and tamper alerts at the container door provide a second confirmation layer independent of location data.
5. Add the carrier as a Collaborator: Shared real-time visibility removes the information asymmetry that criminal networks rely on during handoffs.

Cargo Categories at Highest Risk by Region

Theft targeting varies by commodity. Organized networks prioritize cargo that is easy to move, difficult to trace, and high in value per unit, which produces different risk profiles by corridor.

Electronics and Consumer Goods

High-value electronics carry the highest theft targeting rate in the Southern California and Northeast corridors. The average stolen load value reached $273,990 in 2025, driven in part by selective electronics targeting, per CargoNet's annual analysis. The Solo 5G and Solo Pro both cover shock (to 12G) and light sensors alongside GPS and temperature, matching electronics shipments where physical security, impact detection, and chain-of-custody documentation matter for insurance claims. The Solo Pro adds tilt detection and a built-in ePaper display showing temperature, alarm status, and mean kinetic temperature (MKT), providing instant condition evidence at receipt without requiring a platform login.

Pharmaceuticals and Life Sciences

Pharmaceutical cargo occupies the highest value-per-unit category in freight theft, with a single failed pharma shipment costing $150,000 to $750,000 in product loss alone. Pharma cargo moves heavily through corridors that connect major port terminals, distribution centers, and hospital supply chains, making any high-incident corridor a relevant exposure for high-value pharmaceutical lanes, particularly those with documented strategic theft activity.

For pharma lanes, Solo Pro is the appropriate tracker. It covers the full sensor set, including temperature, humidity, light, shock (to 12G), tilt, and motion, along with a built-in ePaper display showing temperature, alarm status, and MKT for instant accept/reject at receipt. The Solo Pro is fully validated under FDA 21 CFR Part 11 and European Union (EU) Annex 11, and every tracker ships with a 3-Point National Institute of Standards and Technology (NIST) traceable Certificate of Calibration. Tive also holds Food Safety Modernization Act (FSMA) and GxP/GAMP 5 compliance. Buyers should confirm how FDA 21 CFR Part 11, EU Annex 11, FSMA, and GxP/GAMP 5 validation apply to their specific program directly with Tive.

Compliance and Security

For regulated cargo, real-time condition monitoring is a procurement gate. A door opening on a pharma trailer is simultaneously a physical security breach and a potential temperature excursion.

Tive's BioPharma Dive research (December 2024) found that real-time tracking and condition monitoring rank among the primary defenses pharma leaders identify for protecting cold chain integrity across high-risk corridors.

Food and Beverage

Food and beverage freight is highly targeted because perishable products carry no serialized identification, making stolen loads easy to redistribute. Food and beverage theft rose 47% in 2025 to 708 confirmed incidents nationally, per CargoNet annual data, with meat and seafood heavily targeted in the Northeast and tree nut thefts concentrated on the West Coast; in Q1 2026, food and beverage remained the top stolen category at 144 events, with seafood targeting climbing sharply. Solo Lite trackers provide cost-aware real-time multi-network tracking for food and beverage shipments, monitoring temperature, light, and motion across cellular and WiFi geolocation with +/-0.5 degrees Celsius NIST-traceable temperature accuracy. Triple T Transport's outcome shows the direct impact: temperature claims on Ready Pac shipments dropped from 8 in 2023 to zero in 2024, including one $75,000 shipment saved from spoilage.

Apparel and Retail Inventory

Tive's reusable shipment templates allow logistics teams to configure and deploy trackers at scale across seasonal loads without per-shipment manual setup.

How to Use This Map in Lane Planning and Carrier Assignment

Converting corridor risk data into operational decisions requires a lane-level scoring framework applied to your specific cargo profile, not a national benchmark used uniformly across routes.

Scoring Lanes by Theft Exposure

A route-level risk score combines four variables: corridor theft rate, cargo value, handoff frequency (number of carrier custody transfers on the lane), and historical incident data from your own shipment records. The Tive Platform aggregates historical shipment data to run lane and carrier scorecards, ranking lanes by combined risk exposure rather than national benchmarks. The output is a tiered deployment model: high-value loads on high-risk corridors with multiple handoffs get full sensor coverage and tight alert thresholds, while lower-risk lanes use temperature-only or audit-trail trackers with standard intervals.

Adjusting Carrier Requirements for High-Risk Corridors

Writing security requirements into carrier contracts for elevated-risk lanes is a direct operational action. Requirements worth including for Tier 1 corridors:

• Mandatory team drivers on loads exceeding $100,000 in value on Southern California and Northeast I-95 lanes.
• No-stop rules within 200 miles of origin.
• Real-time tracker deployment confirmed before load departure.
• Carrier identity verification callback protocol using numbers on file, not numbers on the pickup request.

Tive's platform supports shared visibility between shippers and carriers: adding carriers as Collaborators or sending public sharing links means both parties see the same real-time location and condition data, removing the information asymmetry that criminal networks rely on during handoffs.

Building Visibility Investment Cases by Lane

The cost-of-inaction framework starts with value at risk per load, multiplied by incident probability for the corridor, minus the cost of monitoring. Venture Metals+ prevented more than $1 million in losses across the first half of 2026; in one March 2026 incident, a $250,000 recycled copper shipment triggered both a Smart Route Deviation Alert and a light alert, the Director of Transportation confirmed via the Tive platform that the truck was heading in the wrong direction, worked with local police to detain the driver, and recovered the entire load. For copper and metals freight, the Potomac Metals customer story shows a $175,000 load tracked 400 miles off course in October 2024, recovered within hours via real-time location data.

Ubictum's case illustrates recovery in high-risk Latin America (LATAM) corridors: Tive helped Ubictum recover two stolen shipments valued at $100,000 across two incidents, with a tracker continuing to report location data even after criminals found and discarded it in a river, providing enough location pings for law enforcement to recover the cargo.

The return on investment (ROI) threshold becomes clear when a single detected loss covers months of monitoring costs. Estimate the value of real-time visibility on your lanes with the Tive ROI Calculator, or talk to Tive's team about monitoring your highest-risk shipment lanes.

FAQs

What Data Sources Inform This Regional Breakdown?

This analysis draws on Verisk CargoNet's 2025 annual report, covering 3,594 supply chain crime events across the United States and Canada; CargoNet's 2024 annual report, covering 3,625 incidents across the United States and Canada; and CargoNet's Q1 2026 analysis, covering 767 supply chain crime events for the quarter, supplemented by FBI Cargo Theft Program reporting, National Insurance Crime Bureau data, first-party Tive customer outcomes, and Tive's 2026 Buyer's Guide research.

How Often Do High-Risk Corridors Shift?

Significantly and quickly. CargoNet's 2025 annual data recorded major year-over-year increases in New Jersey (+50%), Indiana (+30%), and Pennsylvania (+24%) relative to 2024, states that had not previously ranked as primary theft corridors. By Q1 2026, that shift had accelerated further: New Jersey surged 119% year over year, from 27 to 59 confirmed incidents, while Texas dropped 22% as organized groups relocated activity to Northeast logistics infrastructure. Port and rail interchange locations are fixed, but county-level incident concentration, dominant theft methods, and targeted cargo categories all shift on a quarterly cycle as criminal networks respond to enforcement pressure and anti-fraud tool deployment. Treating a corridor risk assessment from 12 months ago as current leaves lane security decisions based on conditions that no longer exist. Quarterly CargoNet data is the appropriate update cadence for lane-level risk scoring.

How Does In-Transit Visibility Reduce Theft Exposure?

Real-time location and condition data gives logistics teams an intervention window that post-delivery reports cannot provide. When a shipment deviates from its expected route, stops outside an authorized zone, or shows a door-open event during transit, an alert during that window lets the team act: notify law enforcement, contact the carrier, or trigger a recovery response before the load is redistributed and unrecoverable.

Does Carrier GPS Cover the Same Ground as a Shipment Tracker?

Carrier GPS tracks the tractor. It does not track the trailer or the cargo inside it. When a trailer is dropped, cargo is pilfered, or a fraudulent carrier transfers goods onto their own equipment, the tractor's GPS reports nothing unusual. Tive's multi-network trackers travel with the cargo, maintaining continuous location and condition data across every carrier handoff and custody transfer, independent of which vehicle has the load.

What is the Financial Exposure of a Single High-Value Theft on an OTIF Scorecard?

A single theft triggers an OTIF miss, customer penalty clauses, insurance claims, and premium pressure, with the average stolen load valued at $273,990 in 2025 per CargoNet annual data. For pharmaceutical or electronics loads in high-risk corridors, product loss alone can exceed $750,000, before factoring in remediation costs and regulatory consequences.

Key Terms Glossary

Strategic theft: Cargo theft executed by impersonating legitimate carriers using forged credentials to secure loads at origin, rather than physical break-in during transit.

Fictitious pickup: A specific form of strategic theft where criminals present falsified paperwork at a shipper's dock to take possession of a load that is then redirected to an unauthorized destination.

Red zone: The 200-mile radius around a shipment's origin point, designated as the highest-risk window for theft due to concentration of criminal activity near major distribution and port facilities.

Pilfering: The theft of a portion of a shipment, typically a few pallets or boxes removed during a transload, handoff, or overnight stop, rather than the theft of an entire trailer or container.

Dwell time: The period a loaded trailer or container sits stationary at a facility, parking area, or staging zone between carrier handoffs, representing the primary physical vulnerability window for cargo theft.

‍