Functional DemoAnalytics System

Freight Fraud Defense Network

Fraud defense layer for logistics teams that scores risk before freight moves or money is paid.

What it solves

Freight fraud is rising across logistics, exposing companies to fake carriers, double brokering, broker impersonation, spoofed domains, edited certificates of insurance, fake invoices, and payment-redirection scams. Most teams defend against this with manual checks, tribal knowledge, inbox review, spreadsheets, and disconnected systems. This fragmented process leaves gaps that let fraudulent carriers, documents, and payment changes slip through before a load is released or an invoice is paid.

Built for Freight brokers, 3PLs, carrier onboarding and dispatch teams, compliance and finance/AP teams, and logistics risk and fraud investigators.

Overview

Freight Fraud Defense Network scores brokers, carriers, documents, emails, domains, loads, invoices, and payment changes for fraud risk, then gives teams a simple, explainable decision before they release freight or pay. Each evaluation produces a 0-100 score, a status (Approved, Verify, Hold, Reject), a confidence level, plain-English reasons, a recommended action, an evidence list, and an audit trail. Risk is assessed across multiple categories including company identity, email and domain, document authenticity, load behavior, payment and invoice, and network relationships between entities. It is designed to feel like a clean security command center for non-technical operations users rather than a complex compliance tool.

What this demonstrates

Implements a multi-signal risk scoring engine that combines deterministic scoring with an Anthropic-backed analysis agent constrained to explain and rate confidence without overriding the authoritative score. Integrates Stripe payment confirmation via signed webhooks with organization-scoped payment records, S3-backed document storage, and Auth.js authentication. Built around pluggable provider abstractions (document AI, carrier verification, email risk, TMS, accounting) so concrete data sources can be swapped in behind a stable contract.

What makes it different

Most logistics systems manage freight. This product defends freight.

A security cockpit for freightFeels like a real-time risk operating system for fraud defense, not a generic compliance tool.
Score across many signalsWeighs identity, documents, email/domain, load behavior, payment, and network instead of one data source.
Always explain the scoreNever shows a risk number without plain-English reasons.
Plain English, not jargonTranslates risk into plain language and avoids technical terms in the UI.
Four simple statusesApproved, Verify, Hold, Reject — color-coded green, yellow, orange, red.
Decide before the load movesAnswers whether to trust a carrier, load, invoice, or payment before freight is released or money is paid.

Core capabilities · 12

Dashboard
Command center surfacing high-risk loads, payment holds, new carrier risks, document mismatches, and open cases as clickable cards.
Risk Queue
Central work queue for every item needing attention, filterable by status, risk level, entity type, and assignee.
Carrier Profile
One complete trust profile per carrier: identity, risk factors, documents, loads, communication, payment, and audit trail.
Broker Profile
Broker trust profile adding authority, bond, load-posting behavior, and double-brokering risk indicators.
Load Defense ScreenTrust Before Release
Pre-release view of a load's risk score, final status, top risk reasons, and recommended action.
Document Review
Uploads, classifies, and OCR-extracts documents, then compares fields to system records to flag mismatches and suspected edits.
Email and Domain Risk Review
Checks sender, reply-to, domain age, lookalikes, and SPF/DKIM/DMARC against known entity contacts.
Invoice and Payment ReviewPayment Change Lock
Compares invoices to loads and profiles, detects duplicates, and holds payment when instructions change.
Fraud Watchlist
Tracks known suspicious entities internally with reasons, evidence, severity, and links to loads and related entities.
Fraud Relationship Graph
Maps related entities by shared phones, addresses, emails, domains, documents, and bank/factoring info.
Verification Playbook
Recommends a concrete next action for every risk factor, with required approvals when needed.
Case Notes and Audit Trail
Logs every major action with actor, entity, before/after values, and timestamps for legal defensibility.

How it works

Search or open a carrier, broker, load, invoice, document, or email
See a clear fraud risk status and 0–100 score
Read the plain-English reasons behind the score
Follow the recommended next action from the verification playbook
Approve, verify, hold, or reject
Log the decision to the audit trail

How the score works

Risk Status

Company Identity Risk
Whether a broker or carrier is who they claim to be — DOT/MC validation, name and address match, authority, and insurance status.
Email and Domain Risk
Whether communications are legitimate — domain age, lookalike domains, SPF/DKIM/DMARC, and reply-to mismatch.
Document Risk
Whether uploaded documents are authentic and consistent — field mismatches, edited PDF metadata, and reused templates.
Load Behavior Risk
Load-level fraud signals — first-time carrier, high-value commodity, high-theft lane, and last-minute driver or dispatcher changes.
Payment and Invoice Risk
Payment fraud signals — new bank account, payment instruction changes, duplicate invoices, and mismatched remittance.
Network Relationship Risk
Connections to suspicious patterns — shared phones, addresses, domains, and bank or factoring accounts across entities.

Data model

Organization
User
Carrier
Broker
Load
Document
ExtractedDocumentField
EmailIdentity
DomainSignal
Invoice
PaymentChange
RiskScore
RiskFactor
Alert
WatchlistItem
CaseNote
AuditLog

Screens · 5

Document detail for a certificate of insurance showing extracted fields, review notes, and an Approved 0/100 document-risk score with no issues. — Document review — approved COI

Invoice INV-5002 detail with a payment-change lock flagging a bank-account change, a Hold 60/100 risk score, and a fraud-intelligence breakdown. — Held invoice — bank change flag

Risk queue table of open alerts filtered by status, type, and severity, listing critical and high items for carriers, invoices, documents, and email. — Risk queue

Carrier detail for Ghost Logistics LLC with a Reject 100/100 fraud score, recommended actions, and high-severity risk factors for document, email, and registry. — Carrier profile — reject score

Import & integrations page with a CSV import form for carriers showing expected columns and sample data, plus a list of external provider integrations on mock. — CSV import & integrations

How it is built

A Next.js application with server-side route handlers backing a React interface, persisting data through Prisma to a SQLite database. Documents are stored in AWS S3, payments are confirmed out-of-band through Stripe webhooks, and error monitoring runs through Sentry. External data and analysis are accessed through swappable provider abstractions rather than hard-wired vendors.