Reports of scammers impersonating Highway, brokers, FMCSA, or other trusted companies in the transportation industry are increasing. These scams often involve fake rate confirmations, onboarding requests, account notices, or links asking you to verify information.
If a message is unexpected or creates urgency, stop before you act. Take a moment to verify the sender and destination before clicking a link, downloading an attachment, or entering sensitive information.
If something feels suspicious, trust your instincts and report it. You do not need to confirm that it is fraudulent before taking action.
Before you click
Take a few seconds to check:
The sender’s full email address and domain. Hover over the sender’s name in your inbox to see the address actually sending the message.
The destination URL. Hover over buttons and links to see where they lead before clicking.
Whether the message uses urgency, threats, or account suspension warnings
Whether you were expecting the message or request
Whether it asks for a password, verification code, personal information, payment, or documents
Whether the link redirects you to a different or unfamiliar website
When accessing Highway, use your normal login method or navigate directly to Highway. Do not rely on a link from an unexpected message.
Highway will never ask you to share your password or one-time verification code by email.
Common scams targeting carriers:
Fake rate confirmations
Scammers may send fake rate confirmations with embedded links to fraudulent websites. These pages may be designed to look like a broker, Highway, or another trusted transportation company.
Before clicking a button, hover over it to view the full URL. If the destination looks unfamiliar or does not match the company that sent the message, do not continue.
Do not enter login credentials or sensitive information until you have independently confirmed the request with the broker or company that sent it.
Fake Highway messages
A message may appear to come from Highway but use a lookalike email address or website. Be cautious of domains that:
Misspell “Highway”
Add extra words or characters
Use an unexpected domain ending
Redirect you to another website
Ask you to log in or verify information unexpectedly
Fake FMCSA or government notices
Scammers may impersonate FMCSA or other government agencies and ask you to update your carrier profile, verify your authority, submit documents, or pay a fee.
If you need to access an FMCSA service, navigate directly to the official FMCSA website. Do not use a link from an unexpected email.
Fake onboarding or verification requests
Some messages ask carriers to complete a new identity, insurance, onboarding, or compliance process. Before uploading documents or providing personal information, confirm the request using a trusted phone number or website—not the contact information provided in the message.
How to report a suspicious message
You do not need to be certain that a message is fraudulent before reporting it. If something looks suspicious, report it.
Do not reply to the sender or click additional links.
Forward the original message to phishing@highway.com.
Include the original email and full headers when possible.
Include the suspicious link, sender address, and a screenshot if available.
Never include your password, verification code, or other sensitive information in the report.
You can also report suspected fraud and phishing attempts to:
Your email provider’s spam or phishing reporting tool
If you clicked a suspicious link
If you clicked the link but did not enter information:
Close the webpage.
Do not download anything or install software.
Report the message to Highway.
Run a security scan if a file downloaded or the site asked you to install something.
If you entered a password or other sensitive information, act immediately:
Change the password by going directly to the legitimate website.
Change the password anywhere else you reused it.
Enable multifactor authentication if available.
Contact your email provider or company IT administrator.
Notify Highway and any affected brokers or business contacts.
Contact your bank or financial institution if you provided financial information.
If you downloaded a file or believe your device may be compromised, disconnect it from the internet and contact your company’s IT or security provider.
Known impersonation websites
The following websites have been reported as impersonating Highway or other trusted transportation services. Do not visit these websites or enter information on them:
highwayorder.com
highwaytender.com
highwaysender.com
highwayrz.com
highwayskyway.site
This list may change as new campaigns are identified. A website not appearing on this list should not automatically be treated as safe.