Key points:
- Cargo theft losses more than doubled to $304.6 million in Q2 2026 even as incident volume fell 26 percent, as organized thieves shift from force to deception.
- GPS spoofing, which feeds fleet tracking systems false location data while a load is being stolen, is now a documented technique in supply chain crime.
- VicOne and Mobile Defender Inc. outline a three-layer approach to detect, correlate, and respond to location manipulation.
Cargo thieves are stealing fewer loads and taking far more money. In the second quarter of 2026, Verisk CargoNet recorded 677 supply chain crime events across the United States and Canada, down 26 percent from a year earlier. Over the same period, estimated losses more than doubled to $304.6 million, and the average theft with a reported value reached $564,009, pushed up by a handful of multimillion-dollar heists. As CargoNet's Keith Lewis put it, "Lower incident volume should not be mistaken for lower risk."
Behind those numbers is a move from force to deception. A 2026 report from BSI Consulting and Munich Re Specialty found that strategic theft, built on impersonation and cyber intrusion rather than break-ins, made up about 30 percent of reported U.S. cargo theft incidents in 2025. CargoNet counted 158 fictitious pickups in the second quarter of 2026 alone.
How GPS spoofing enables cargo theft: location data as an attack surface
Fleets have spent years building visibility: telematics on every tractor, trackers on trailers, geofences around yards and corridors. Organized thieves have noticed.
The National Motor Freight Traffic Association's 2026 Transportation Industry Cybersecurity Trends Report warns that "a prevalent technique used was GPS spoofing, where criminals manipulate location data of trucks or trailers," using it to hide unauthorized route changes or mislead tracking systems during load thefts. The same report describes cyber-enabled thieves who "spoofed or jammed GPS signals to facilitate physical theft of shipments."
Jamming and spoofing are different problems:
- Jamming drowns out the satellite signal. The tracker loses its position, and the dot on the map freezes or disappears. That is disruptive, but a well-run operations team can treat a sudden loss of signal as a warning.
- Spoofing feeds the receiver a false signal. The tracker keeps reporting, and the dot keeps moving along a believable route. Nothing looks wrong, which is exactly the point.
A spoofed tracker can keep a geofence from ever alerting, because as far as the system knows, the load never left its route. By the time anyone realizes the location was fiction, the trailer can be far away, and the investigation starts from bad data.
What transportation risk teams, carriers, and insurers said about GPS spoofing
In late September, Mobile Defender Inc. joined VicOne at the NMFTA Cybersecurity Conference in Long Beach to talk with transportation risk teams, carriers and insurers. A few themes stood out:
- Risk teams already know about spoofing. Corporate transportation risk managers did not need it explained. Their question was how a spoofing event would show up during an investigation.
- Carriers want protection that works with what they already have. Fleets on different telematics providers asked whether detection depends on a specific vendor.
- Insurers are watching. Fleets earn discounts for GPS tracking today. As spoofing grows, verified detection, not tracking alone, may become what earns them.
How VicOne and Mobile Defender Inc. detect and respond to GPS spoofing
Mobile Defender Inc. and VicOne approach GPS location manipulation in three layers - detection at the vehicle, correlation across the fleet, and a structured response playbook.
- Detect it at the vehicle. A tracker cannot tell on its own that its GPS fix is false. Detection means checking the reported position against independent evidence that a spoofer does not control. Mobile Defender Inc. builds this detection for vehicles and trailers, and bringing it directly into the vehicle through VicOne xCarbon is under evaluation with VicOne R&D.
- See it across the fleet. One vehicle's alert is a data point. The same pattern on several trucks along the same corridor is an operation. Spoofing detections from Mobile Defender Inc. can be delivered into VicOne xNexus, VicOne's vehicle security operations platform, where they are correlated with other vehicle threats and turned into fleet-level threat intelligence. The two companies have validated this integration in a joint proof of concept.
- Respond with a playbook. Detection only helps if someone acts on it. When a location cannot be trusted, contact the driver through a verified channel, confirm the load's status with the receiver, and bring investigators and the insurer in early with the evidence.
Five questions fleet security and risk teams should ask about GPS spoofing exposure
- If a truck's GPS were spoofed today, would anything in your stack notice, or would the map look normal?
- Do you get alerts for spoofing as well as jamming, or only for lost signal?
- Can your security or operations team see location anomalies across the whole fleet, not one vehicle at a time?
- Does location verification work with the telematics you already run?
- If a load disappears, could you give investigators and your insurer evidence that the location data was manipulated?
If any answer is "no" or "we don't know," that is the gap organized thieves are counting on.
Frequently asked questions
What is GPS spoofing in cargo theft?
GPS spoofing feeds a vehicle's tracker a false satellite signal. The tracker keeps reporting a believable route while the truck or trailer is somewhere else, which lets thieves hide unauthorized route changes and mislead tracking systems during load thefts.
How is GPS spoofing different from GPS jamming?
Jamming drowns out the satellite signal, so the tracker loses its position and the dot on the map freezes or disappears. Spoofing replaces the signal with a false one, so the dot keeps moving and nothing looks wrong. Operations teams can treat a lost signal as a warning, but spoofing gives them no visible alert.
Can geofencing detect GPS spoofing?
Not on its own. A spoofed tracker can keep a geofence from ever alerting, because the system believes the load never left its route. Detecting spoofing means checking the reported position against independent evidence that a spoofer does not control.
How are cargo theft losses changing in 2026?
According to CargoNet's Q2 2026 data, reported supply chain crime events in the United States and Canada fell 26 percent from a year earlier. Over the same period, estimated losses more than doubled to $304.6 million, and the average theft with a reported value reached $564,009.
About Mobile Defender Inc.
Mobile Defender Inc. develops real-time GPS spoofing and hidden tracker detection for vehicles and fleets. Its patent-pending technology was developed at the NYU Center for Cybersecurity and is backed by peer-reviewed research.
About VicOne
VicOne, headquartered in Tokyo, Japan, is a cybersecurity leader for Physical AI, built on proven automotive cybersecurity expertise. Its software and services protect the digital systems that shape how vehicles and robots see, decide, and act. VicOne helps OEMs, Tier 1 suppliers, robot makers, and operators identify cyber risks early, assess their potential safety impact, and protect systems in operation, helping maintain safe, reliable behavior across real-world deployments. With 180+ zero-days uncovered across automotive and robotics, 100M+ new threat intelligence signals added monthly, and 30 U.S. patent applications pending in AIDV and AI security, VicOne combines specialized Physical AI security research with global threat intelligence. As a Trend Micro subsidiary, VicOne is backed by decades of global cybersecurity expertise. For more information, visit vicone.com.
