Quick access
Identity And Access Abuse In Freight Portals
Load Route And Asset Manipulation
Payment And Settlement Fraud
Marketplace And Content Integrity
Compliance And Safety Data Integrity
Identity And Access Abuse In Freight Portals
Ato Login Hub Vs Hour Heatmap
New logins from unfamiliar hubs immediately before tender acceptance.
Failed Vs Successful Logins
Spike of failed logins followed by a successful one (ATO credential testing).
Devices Carrier Accounts Network
Many carrier accounts tied to the same device/IP bidding the same lanes.
Device Fingerprint Reuse Across Mc Numbers
Reused device fingerprints across distinct MC numbers.
| device_id | accounts | mc_numbers |
|---|---|---|
| Dev-1 | C117, C119, C107, C114 | 100098 |
| Dev-2 | C103 | 100152, 100109 |
| Dev-3 | C111, C116 | 100023 |
| Dev-4 | C106 | 100193, 100072 |
| Dev-5 | C105, C116, C101, C115 | 100054, 100006, 100234 |
| Dev-6 | C115 | 100192, 100008, 100075, 100110 |
| Dev-7 | C104 | 100163, 100023 |
| Dev-8 | C119, C112 | 100172 |
| Dev-9 | C117 | 100230, 100163, 100247 |
| Dev-10 | C105, C109, C113, C108 | 100051, 100064 |
Device-fingerprint solution: Detects suspicious reuse of device identities across multiple carriers. See: https://www.crossclassify.com/solutions/device-fingerprint/
Contact Change Password Reset Coupling
Email/phone change followed by password reset within minutes — indicates social engineering of support.
MFA solution: Adds secure verification when resets closely follow profile edits. See: https://www.crossclassify.com/solutions/account-takeover/
Support Ticket Credential Change Proximity
Support tickets immediately preceding credential changes.
| ticket_id | channel | change_event | minutes_before_change |
|---|---|---|---|
| T1 | chat | pwd_reset | 60 |
| T2 | phone | email_change | 15 |
| T3 | pwd_reset | 5 | |
| T4 | chat | mfa_reset | 8 |
| T5 | phone | pwd_reset | 3 |
| T6 | chat | pwd_reset | 120 |
| T7 | email_change | 30 | |
| T8 | chat | pwd_reset | 7 |
| T9 | phone | mfa_reset | 4 |
Load Route And Asset Manipulation
Eld Gps Speed Anomaly
Truck speeds exceed policy thresholds.
Teleport Detection
Teleport jumps between pings.
Device-fingerprint solution: Ensures telematics data integrity by binding to devices. See: https://www.crossclassify.com/solutions/device-fingerprint/
Tender Accept Fast Cancel Sequences
Accept-then-fast-cancel sequences.
Dispatch Device Managing Carriers
Same device orchestrates dispatch for many carriers.
| device | distinct_carriers |
|---|---|
| D1 | 8 |
| D2 | 3 |
| D3 | 3 |
| D4 | 3 |
| D5 | 1 |
| D6 | 2 |
| D7 | 1 |
| D8 | 3 |
| D9 | 3 |
| D10 | 1 |
Device-fingerprint solution: Blocks fraudulent broker hubs managing many carriers. See: https://www.crossclassify.com/solutions/device-fingerprint/
Holds By Lane Day Low Conversion
High holds with low conversion across lanes/days.
Holds Created Per Device Shippers
Same device creates holds for many shippers.
| device | shippers | total_holds |
|---|---|---|
| H1 | 3 | 19 |
| H2 | 9 | 55 |
| H3 | 3 | 14 |
| H4 | 1 | 12 |
| H5 | 2 | 10 |
| H6 | 3 | 12 |
| H7 | 3 | 7 |
| H8 | 2 | 14 |
| H9 | 2 | 20 |
| H10 | 2 | 15 |
Payment And Settlement Fraud
Bank Change Large Payout 24h
Payout bank change followed by large payout within 24h.
Avs Cvv Mismatch Rate By Bin
AVS/CVV mismatch spikes by BIN.
Carriers Bank Accounts Duplicate Payout Targets
Same bank account used by multiple carriers.
Account-opening solution: Detects shell carrier accounts sharing payout targets. See: https://www.crossclassify.com/solutions/account-opening/
Rate Confirmation Edits After Acceptance
Rate confirmation edits after acceptance.
| ratecon_id | edited_by | minutes_after_accept |
|---|---|---|
| R1 | u1 | 5 |
| R2 | u2 | 60 |
| R3 | u3 | 8 |
| R4 | u1 | 12 |
| R5 | u3 | 180 |
| R6 | u4 | 15 |
| R7 | u2 | 7 |
| R8 | u1 | 240 |
| R9 | u5 | 20 |
| R10 | u3 | 6 |
Disputes Per Shipper Top Offenders
Repeat disputes by shipper.
Chargeback Rate By Haul Distance Load Value
High-value short-haul chargebacks.
Marketplace And Content Integrity
Review Volume By Account Cohort
Review bursts from new accounts on the same day.
Account-opening solution: Prevents mass fake carrier or shipper profiles. See: https://www.crossclassify.com/solutions/account-opening/
Ips Profiles Coordinated Review Posting
IP clusters posting across multiple profiles.
Requests Per User Agent Group
Excessive search requests from headless or uncommon user-agents.
Bot-attack solution: Prevents scraping attempts by automated user-agents. See: https://www.crossclassify.com/solutions/bot-attack/
Search To Booking Ratio By Ip Range
High search-to-booking ratios from IP ranges.
| ip_range | searches | bookings | ratio |
|---|---|---|---|
| Block-1 | 1366 | 196 | 6.97 |
| Block-2 | 2222 | 175 | 12.7 |
| Block-3 | 2132 | 63 | 350 |
| Block-4 | 315 | 31 | 10.16 |
| Block-5 | 2588 | 15 | 172.53 |
| Block-6 | 2873 | 82 | 35.04 |
| Block-7 | 1845 | 73 | 25.27 |
| Block-8 | 1248 | 55 | 22.69 |
| Block-9 | 1408 | 17 | 82.82 |
| Block-10 | 2375 | 192 | 12.37 |
Quoted Vs Charged Freight Rate Delta
Mismatch between quoted and charged rate.
| booking_id | quoted_rate | charged_rate | delta |
|---|---|---|---|
| B1 | 1184.13 | 1800.13 | 616 |
| B2 | 1456.78 | 1286.19 | -170.59 |
| B3 | 1323.45 | 1961.79 | 638.34 |
| B4 | 1678.9 | 1332.18 | -346.72 |
| B5 | 1234.56 | 1573.22 | 338.66 |
| B6 | 1890.12 | 1541.46 | -348.66 |
| B7 | 1567.89 | 889.61 | -678.28 |
| B8 | 1723.48 | 1260.28 | -463.2 |
| B9 | 1345.67 | 1649.4 | 303.73 |
| B10 | 1456.78 | 1123.88 | -332.9 |
Invalid Unsupported Service Codes Requests
Unsupported service codes in requests.
Compliance And Safety Data Integrity
Hos Off Duty Driving Violations Per Driver
HOS off-duty driving violations by driver.
Simultaneous Log Edit Times Across Drivers
Identical log edit times across drivers.
Coi Days To Expiry Negative Expired
Expired COI used at tender.
| carrier | doc | days_to_expiry |
|---|---|---|
| C1 | COI | 120 |
| C2 | COI | 107 |
| C3 | COI | 86 |
| C4 | COI | 48 |
| C5 | COI | 94 |
| C6 | COI | -13 |
| C7 | COI | -28 |
| C8 | COI | 93 |
| C9 | COI | 67 |
| C10 | COI | 67 |
Account-opening solution: Blocks expired insurance documents during onboarding. See: https://www.crossclassify.com/solutions/account-opening/
Pdf Fingerprint Reuse Across Carriers
PDF fingerprint reuse across carriers.
| doc_hash | carriers_used |
|---|---|
| H1 | 3 |
| H2 | 1 |
| H3 | 9 |
| H4 | 1 |
| H5 | 5 |
| H6 | 4 |
| H7 | 3 |
Safety Inspection Submissions Per Minute Burst
Burst of inspection submissions in one minute.
Inspection Geofence Hit Vs Facility
Inspections outside facility geofence.
| inspection_id | facility | geofence_hit |
|---|---|---|
| I1 | DC-1 | Yes |
| I2 | DC-1 | No |
| I3 | DC-1 | Yes |
| I4 | DC-1 | Yes |
| I5 | DC-1 | No |
| I6 | DC-1 | Yes |
| I7 | DC-1 | Yes |
| I8 | DC-1 | No |
| I9 | DC-1 | Yes |
| I10 | DC-1 | Yes |