Verifying DOT Notices and Avoiding Fake Motus Requests
A notice demanding an update or payment puts a carrier in a bind. Acting on it could expose the company to a scam, but ignoring it might mean missing a deadline. Keep the original message. Check the official site for a real outstanding task before deciding who should receive documents or money.
The Federal Motor Carrier Safety Administration’s fraud alert describes impersonation of the Motus registration system and of auditors. Someone who knows your company name and USDOT number may simply have looked them up in public records. This article concerns registration and audit notices. Check tax, insurance and state matters with the responsible agencies separately.
Verify through an independent channel
If you have not clicked or replied, save the original email. Note the sender, reply-to address and notice number. Contact FMCSA through its official support page or at 1-800-832-5660. Ask whether the requirement is real, who handles it and where to submit the material. During verification, avoid the buttons, attachments and telephone numbers supplied in the suspicious message.
For registration, type the address for the official Motus portal (motus.dot.gov) yourself or follow the official FMCSA Motus instructions. The real system does verify individual identity and uses company account permissions. When asked to verify your identity, establish that you are on the official site before proceeding.
Read the URL in the browser address bar. A government logo or “.gov” printed on a page can be copied. If you cannot verify the address, use the official telephone number above. You do not need to open a suspicious link to test it.
Check what the charge or remote audit is actually for
The registration update information says the biennial update itself is free. A third-party service charging a fee should identify the service, payee and scope of authorization so the carrier can compare these with its contract. A charge alone does not establish fraud, but a private service fee is not a mandatory government charge. The free update does not mean all registration transactions are free.
Nor must every audit take place on site. The official safety audit information says a New Entrant Safety Audit may require electronic submission. Verify the auditor’s identity and the submission address before uploading documents.
If a password or identity document was disclosed
The Login.gov account protection guidance warns against giving a password or security code to anyone. If an employee or service provider needs to help, authorize the appropriate role in the system. Do not share individual login credentials.
If you entered a password on a fake page, use a trusted device to reach the real site and change that account’s password promptly. Change any other account using the same password. Follow the unrecognized sign-in guidance to check for unfamiliar sign-ins and authentication methods. Contact official support about anything unexpected. Check the linked email account, company profile and account permissions for unauthorized changes.
A password change alone does not address disclosed identity documents. At IdentityTheft.gov, use the identity theft recovery guide to select the protective or recovery steps that fit the information disclosed and whether anyone has used it.
If money was sent or someone accessed the device
The Federal Trade Commission’s guidance after a scam recommends contacting the bank, card issuer or payment provider immediately. Use the number on the card or contact details in the official app or on the official website. Describe the transaction, amount and recipient and ask whether the payment can be reversed or refunded. Do not wait to assemble the full complaint. Recovery depends on the payment method and circumstances.
If someone used remote access to control the computer or phone, end that access. The same guidance recommends updating security software, scanning the device and addressing what it finds. If you are unsure how, ask the manufacturer or a trusted technician for assistance. Another company representative can contact the bank and protect accounts while the device is being examined.
Preserve original evidence and follow up after reporting
Have one person gather the original email and headers, chat history and payment records. Make a timeline of what was disclosed, how much was paid and whom you contacted. Save suspicious URLs as text without reopening them. Give identity and account information only to people who actually need it.
Submit scam information through the FTC fraud reporting portal. Cybercrime can also be reported to the FBI Internet Crime Complaint Center (IC3). Under the IC3 filing instructions, the system does not accept attachments. Retain originals securely and save the submitted report before closing the page. Do not expect to receive the full report by email. Reporting does not guarantee a case-specific investigation or recovery. Follow up separately with the bank and on account restoration.
Verify any genuine company obligation while responding to the false notice. The transition notice checked on September 8, 2026 deferred USDOT number deactivation on the ground that a required biennial update had not been completed from June 1, 2026 onward. It provided additional time, but the update remained due. Check status problems arising from other causes separately. Give the official reply and confirmed deadline to a named person to follow through until the real task is complete.
Disclaimer. This article draws on official public FMCSA, Login.gov, FTC and FBI IC3 materials as of September 8, 2026. It provides general information, not legal, financial or individual cybersecurity advice. Systems, procedures and temporary measures may change. Use current agency guidance and the actual account record. The suggested verification, evidence and division of work are not universal requirements or a guarantee about a notice’s authenticity, an investigation or recovery of funds. Contact the relevant agencies and qualified professionals for identity misuse, a major loss or a complex account compromise. The author and publisher accept no liability for losses arising from actions taken on the basis of this article.
Federal Bureau of Investigation, Internet Crime Complaint Center. “Frequently Asked Questions.” https://www.ic3.gov/Home/FAQ. Accessed 8 Sept. 2026.
Federal Motor Carrier Safety Administration. “Fraud Alerts.” https://www.fmcsa.dot.gov/registration/fraud-alerts. Accessed 8 Sept. 2026.
Federal Motor Carrier Safety Administration. “Move into Motus.” https://www.fmcsa.dot.gov/registration/move-motus. Accessed 8 Sept. 2026.
Federal Motor Carrier Safety Administration. “Safety Audits.” https://ai.fmcsa.dot.gov/NewEntrant/SafetyAudits.aspx. Accessed 8 Sept. 2026.
Federal Motor Carrier Safety Administration. “Temporary Suspension of USDOT Inactivation in Motus.” https://www.fmcsa.dot.gov/registration/temporary-suspension-usdot-inactivation-motus. Accessed 8 Sept. 2026.
Federal Motor Carrier Safety Administration. “Updating Your Registration or Authority.” https://www.fmcsa.dot.gov/registration/updating-your-registration. Accessed 8 Sept. 2026.
Federal Trade Commission. “How To Recognize and Avoid Phishing Scams.” https://consumer.ftc.gov/articles/how-recognize-avoid-phishing-scams. Accessed 8 Sept. 2026.
Federal Trade Commission. “What To Do if You Were Scammed.” https://consumer.ftc.gov/articles/what-do-if-you-were-scammed. Accessed 8 Sept. 2026.
General Services Administration, Login.gov. “Fraud and Security.” https://www.login.gov/help/fraud-concerns/overview/. Accessed 8 Sept. 2026.
General Services Administration, Login.gov. “How Do I Protect My Account from Fraud?.” https://www.login.gov/help/fraud-concerns/protect-account-from-fraud/. Accessed 8 Sept. 2026.