IN Brief:
- Trucks accounted for 70% of reported cargo theft incidents globally, but criminals also exploited warehouses, rail corridors, ports, waterways, and custody transfers.
- Insider involvement featured in 22% of recorded incidents, while strategic fraud increasingly used compromised communications, false identities, and digital freight platforms.
- Effective security requires intelligence-led controls that track changing commodity values, routes, custody transfers, market conditions, and emerging digital vulnerabilities.
By Mike Yarwood, MD Loss Prevention at TT Club
Cargo theft continued to test global supply chain resilience throughout 2025, as organised criminal networks adopted more sophisticated, technology-enabled and increasingly adaptive methods. The global cargo theft landscape is becoming increasingly complex, with criminals exploiting weaknesses across road, rail, sea, storage facilities and digital freight platforms.
While the threat is worldwide, its form is shaped by local conditions, cargo types and the way goods move through supply chains. Brazil, Mexico, India, the United States, Indonesia, Chile, China, Germany and South Africa recorded the highest numbers of reported incidents during the year. Ecuador, meanwhile, saw one of the sharpest increases, with theft cases nearly doubling as gang-related violence intensified in coastal provinces.
Where cargo theft risk is shifting
Trucks remained the primary target, accounting for 70% of incidents globally. But the key lesson is that cargo theft is not simply a road-freight issue. Criminals seek out the weakest point in a journey, whether that is an unsecured parking location, a warehouse, a rail corridor, a port or a handover between transport modes. This makes custody transfers particularly vulnerable: every change in location, documentation or responsibility can create a gap for criminals to exploit.
The prominence of insider involvement reinforces this point. Some 22% of recorded global incidents involved insiders, often through incremental pilferage enabled by weak inventory controls, poor access management or employee and contractor collusion. The issue is especially significant where goods remain in storage or move through complex networks of warehouses, cross-docks and production sites. In Asia, for example, half of reported incidents took place at warehouses and production facilities, while organised theft schemes on China’s inland waterways have involved insiders targeting high-volume commodities.
Nor do criminals limit themselves to a fixed range of products. Food and beverage remained the most commonly stolen commodity group, followed by agricultural products, electronics, automotive parts, construction materials and metals. These goods have established secondary markets, high demand and often fragmented supply chains. Yet theft patterns are also driven by shifting economic and geopolitical circumstances. Rare earth minerals have emerged as a target in China, while pharmaceutical thefts in India have risen from historically low levels. As commodity values, availability and regulation change, so too does the appeal of cargo to organised crime groups.
This need to follow the changing risk profile of goods is illustrated by metals such as copper. Rising prices and strong global demand can quickly increase the attractiveness of materials that might otherwise be viewed as routine cargo. The theft risk can extend beyond finished products to coils, cabling, scrap and semi-processed materials held at yards, terminals, warehouses and production facilities, or transported by road and rail. Historic claims data is therefore valuable, but it cannot be the sole basis for security decisions. Businesses must also monitor market conditions and assess what criminals may target next.
Physical and digital theft converge
The growing sophistication of theft methods is equally important. In the United States, rail theft rose from around 4% of incidents in 2024 to 10% in 2025. Organised groups targeted freight trains in Arizona and California through carefully planned operations involving infrastructure sabotage, communications equipment and, in some cases, armed lookouts. Electronics, footwear, appliances and other consumer goods were frequent targets.
Strategic fraud is increasingly complementing physical theft, as criminals use compromised emails, fraudulent documents and false identities to arrange fictitious pick-ups, unauthorised double or triple brokering and route diversions. In Europe, this sits alongside more conventional crime: warehouses accounted for 33% of theft locations, while drivers remain vulnerable at unsecured parking areas and rest stops. The result is a blurred line between physical and digital theft, where a fraudulent identity can secure access to a legitimate load and weak verification or site controls enable its removal.
The response must be as dynamic as the threat. Security measures should reflect the value, liquidity and current attractiveness of cargo, rather than relying on a static assessment of risk. This includes reviewing routes, parking arrangements and dwell times; strengthening access controls and inventory reconciliation; using GPS tracking and tamper-evident seals; and applying greater scrutiny to subcontracted transport providers.
Digital controls demand equal attention. Public load boards can provide flexibility and capacity, but they can also expose cargo information to data scraping, carrier impersonation and unauthorised rebrokering. Organisations should minimise unnecessary shipment details, verify carrier credentials independently, use centralised and auditable communications, and ensure staff can recognise and escalate suspicious activity.
Cargo theft is not a static or predictable risk. Reducing exposure requires intelligence sharing, sound governance, technology and practical operational discipline across every stage of the supply chain.
