Introduction
At Super Dispatch, we are committed to maintaining a secure and trustworthy marketplace for shippers, brokers, and carriers. Recently, we’ve investigated a series of suspicious activities involving unauthorized access to user accounts and fraudulent load postings. This article outlines how such activity can occur, what users should watch out for, and how to protect your Super Dispatch account.
What Happened?
When unauthorized access attempts occur, Super Dispatch takes immediate action to investigate and protect our users. In some confirmed cases, bad actors have gained access to shipper accounts, dispatched vehicles without approval, and successfully arranged for pickup and delivery by unapproved carriers.
Our security team has traced some of these breaches back to phishing attempts, where fake websites are designed to mimic the official Shipper TMS login page. These scams aim to trick users into entering their credentials and verification codes.
Step-by-Step: How Phishing Websites Work
- A fake website is created that looked nearly identical to the Shipper TMS login screen.
- This fraudulent site is designed to trick users into entering their login information by replicating the official user interface.
- After entering their email and password, the fake site prompts the user for a verification code.
- This simulates Super Dispatch’s real two-factor authentication process, giving the attacker everything they needed to gain access.
- Once the verification code was submitted, the site redirects users to the official Super Dispatch homepage.
- This redirection is intended to avoid suspicion by making the user believe the login was legitimate.
This phishing method is particularly dangerous because it captures both login credentials and the verification code, bypassing the built-in security protections of two-factor authentication. If you ever suspect a login page or email is suspicious, do not proceed—always check the web address carefully and contact our support team for help.
Common Indicators of Fraud
Here are a few red flags that may indicate your account has been compromised:
- Loads appear in your system that you didn’t create or recognize.
- A load is dispatched to a carrier you didn’t authorize or contact.
- You receive delivery confirmation for a vehicle you never intended to move.
- Login notifications from unknown or foreign locations.
If any of these occur, you should immediately reach out to our support team.
Examples of Phishing Attempts
Phishing attacks are designed to trick you into handing over sensitive login information by pretending to be a trusted source. These scams often look convincing—but there are clear signs to help you identify whether a message or website is truly from Super Dispatch or not.
Here are a few examples and how to spot the red flags:
Example 1: Fake Login Page
A fraudulent website is created to look just like carrier.superdispatch.com or shipper.superdispatch.com, but the URL may look suspicious or unfamiliar.
- Red Flag: The website does not end in .superdispatch.com
- Super Dispatch Tip: Always double-check the full web address in your browser. Real Super Dispatch tools will only use domains that end in .superdispatch.com (e.g., carrier.superdispatch.com, shipper.superdispatch.com, or superdispatch.com).
Example 2: Suspicious Email Requesting Login Info
You receive an email asking you to “verify your account” or “log in now” using an attached link.
- Red Flag: The sender’s email address doesn’t end in @superdispatch.com
- Super Dispatch Tip: Super Dispatch will only send emails from verified accounts that end in @superdispatch.com. If you receive something from Gmail, Outlook, or another third-party provider, do not click on it.
Example 3: Verification Code Theft
You’re asked to share a verification code that you just received, possibly by someone pretending to be Super Dispatch.
- Red Flag: Anyone asking for your verification code directly
- Super Dispatch Tip: We will never ask for your verification code. Two-factor authentication (2FA) codes are for your use only—keep them private, even if someone claims to be from our team.
Example 4: Strange Grammar or Urgency
You receive a message filled with spelling errors or a high-pressure message like “Your account will be disabled in 24 hours unless you act now!”
- Red Flag: Poor grammar, urgency, and fear-based language
- Super Dispatch Tip: We’ll never pressure you with ultimatums or use aggressive language in emails or texts.
Stay Safe With These Quick Tips:
- Always check the domain of websites and email senders.
- Never enter login information into unfamiliar links.
- Never share your 2FA verification code.
- If you’re ever unsure—stop and contact our support team.
How Account Compromise Happens
Most account breaches don’t happen through brute force hacking—they happen through phishing or other forms of social engineering. These methods trick users into giving up their login credentials.
Examples include:
- Clicking on links in fake emails that mimic legitimate Super Dispatch login pages.
- Entering credentials on unofficial websites that closely resemble ours.
- Accidentally sharing verification codes with someone pretending to be a legitimate contact.
Once a bad actor gains access, they can post or dispatch loads and even attempt to steal vehicles.
How to Protect Your Account
Here are some steps you can take to protect your Super Dispatch account and business:
Only log in through official Super Dispatch websites:
- carrier.superdispatch.com
- shipper.superdispatch.com
Watch out for phishing attempts:
- Never enter your login credentials or verification codes on unofficial websites.
- Double-check that emails claiming to be from Super Dispatch end in @superdispatch.com.
- Be wary of links in emails or texts that seem suspicious.
Keep your email account secure:
- Use strong passwords.
- Enable two-factor authentication (2FA) on your email account, not just on Super Dispatch.
- Avoid sharing your login credentials with others.
Monitor your activity:
- Keep an eye on your account for any unusual activity or unexpected load updates.
- Contact us immediately if something doesn’t look right.
What To Do If You Think You’ve Been Compromised
If you believe your account has been accessed without your permission:
- Contact our support team immediately at support@superdispatch.com.
- Change your email and Super Dispatch passwords right away.
- Check your email account for signs of unauthorized access.
- Let us know if you’ve noticed any suspicious emails or texts.
Final Thoughts
Account security is a shared responsibility. While we continue to enhance our systems to prevent fraud, your vigilance is the first line of defense. We are actively working on additional safety features, including stronger login verification methods and phishing detection tools to help keep your business secure.
If you have questions or concerns about account security, please don’t hesitate to contact our support team.
Need Help?
Should you have any questions or need further assistance, please contact our support team at any time. You can reach us via email at support@superdispatch.com, or simply click on the chat icon in the bottom right-hand corner of your screen to start a conversation with us. We’re here to help and look forward to assisting you!
Comments