Driver Charged in Alleged $12M Cargo Theft Using Hijacked Carrier Identities

Feds charge driver in alleged $12 million cargo theft scheme built on hijacked carrier identities

Federal prosecutors have charged a truck driver in an alleged cargo theft conspiracy that involved at least 24 freight shipments and more than $12 million in estimated retail losses.

Investigators say the operation relied on established trucking companies whose identities were allegedly taken over or used without authorization. Participants then posed as legitimate carrier representatives, secured freight through normal brokered transactions and dispatched drivers to pick up merchandise from distribution centers. The shipments allegedly disappeared before reaching their scheduled destinations.

Nursulton Khaydarov, 33, was charged in federal court in Connecticut on Oct. 21. He is a citizen of Uzbekistan and a lawful permanent resident of the United States. Khaydarov pleaded not guilty during an appearance in Bridgeport and has remained in custody since his arrest.

The indictment charges him with conspiracy, an offense that carries a maximum sentence of five years in prison. The allegations have not been proven in court.

How the alleged carrier identity scheme worked

According to federal investigators, the operation began around September 2025 and involved multiple motor carriers. The participants allegedly purchased trucking businesses or otherwise assumed control of existing operations. They then obtained or used Department of Transportation numbers, motor carrier identification numbers, company email accounts and ownership information connected to those businesses.

Using those established identities, the group allegedly impersonated previous owners while negotiating transportation agreements with freight brokers. That allowed the suspects to present themselves as representatives of carriers with operating histories and existing business relationships rather than as entirely new companies.

After drivers collected the freight, prosecutors say the loads failed to arrive at their intended destinations. Investigators attributed more than $12 million in estimated retail losses to thefts involving Khaydarov personally.

The missing freight included hard drives, stereo equipment, clothing, electronics and computer equipment. Other shipments reportedly contained food products, nicotine products and other consumer goods.

For professional drivers, the case highlights the risks that can arise when a driver is dispatched under a carrier identity that may not reflect who actually controls the operation. A valid truck, a legitimate-looking dispatch and an active carrier record may not tell the entire story if ownership, contact information or company control has recently changed.

Investigators describe efforts to conceal the shipments

Court documents describe several steps the participants allegedly took to avoid detection. Prosecutors accuse them of switching tractor license plates, using burner phones and communicating through encrypted messaging applications.

Investigators also contend that the group attempted to defeat electronic shipment tracking systems. After pickups, participants allegedly provided false explanations for delayed or missing freight.

Authorities further documented ransom demands involving some of the stolen shipments. According to the indictment, participants requested cryptocurrency or electronic payments in exchange for returning merchandise.

An FBI affidavit identified approximately $121,000 in cryptocurrency received by Khaydarov’s Coinbase account through 33 transactions between November 2025 and May 2026. Investigators have not established that every transfer represented a ransom payment.

Multiple driver identities allegedly used

Federal court documents also describe several fraudulent driver’s licenses connected to Khaydarov. Authorities identified five different names on the documents, each bearing his photograph with altered facial features. Investigators also confirmed that Khaydarov held a valid New Jersey commercial driver’s license.

One incident involved a shipment of pistachios traveling from Terra Bella, California, to Laredo, Texas. Investigators said the driver collected the shipment on Dec. 19, 2025, while presenting an Illinois license identifying him as Sayid Makhmudarov. State motor vehicle records showed no matching license, and photographs connected the document to Khaydarov, according to the affidavit.

California’s pistachio industry has faced cargo theft concerns, particularly during harvest season when large volumes of high-value product move through the transportation network.

On May 18, police in Ontario, California, stopped a tractor-trailer linked by investigators to suspected cargo thefts. Khaydarov identified himself with his valid New Jersey license. Officers found suspected counterfeit identification and a nicotine product that investigators said matched merchandise from an earlier theft.

Police impounded the equipment, and FBI agents later searched the tractor under a federal warrant. Khaydarov was arrested in Ontario on June 1, 2026, following a criminal complaint. A grand jury in New Haven, Connecticut, returned the indictment on Sept. 22.

Why carrier verification matters

The investigation illustrates how established carrier identities can be used to obtain freight through seemingly legitimate brokerage transactions. A carrier’s active DOT number, insurance record and operating history may not independently confirm who is currently controlling the company or communicating with brokers.

The alleged scheme also reflects a broader concern surrounding the purchase, sale or transfer of established trucking businesses. Existing companies can carry operating histories, business relationships and credentials that may receive more trust during routine freight-matching and onboarding processes.

For drivers, warning signs may include unfamiliar dispatch contacts, sudden changes in company ownership or payment instructions, inconsistent equipment and registration information, or requests to use identification that does not belong to them. Drivers should understand which carrier is assigning the load and ensure that the paperwork and instructions match the legitimate operating entity.

Federal authorities have not publicly identified the affected carriers, brokers, shippers or distribution facilities. They also have not disclosed how the participants allegedly obtained control of the trucking businesses or how much of the stolen merchandise has been recovered.

The FBI is leading the investigation with assistance from Homeland Security Investigations, IRS Criminal Investigation, the U.S. Department of Transportation’s Office of Inspector General, and police departments in Fullerton and Ontario, California. Assistant U.S. Attorneys David T. Huang and Larysa J. Kern are handling the prosecution.