Back to Driver Error
Driver Fatigue

ELD Fraud

AI

Arnold & Itkin Research Team

Reviewed by Adam Lewis

The goal of the electronic logging device (ELD) mandate was simple: by connecting the logging system to the truck’s engine, driving time would become nearly impossible to hide. The final rule, published December 16, 2015, and effective December 18, 2017, requires ELDs to synchronize with the vehicle engine and automatically record driving time. The mandate was intended to address the long history of paper log manipulation that plagued the trucking industry.

The mandate worked, in part. Hours-of-service violations fell sharply after the ELD rollout, a trend the FMCSA attributes to improved compliance.1 But the reduction in recorded violations does not reflect the complete picture. The commercial pressure to keep trucks moving beyond legal driving limits did not disappear when paper logs did. Carriers and drivers adapted, exploiting gaps in the ELD system and in the regulatory framework’s enforcement capacity.

Federal Prohibitions on Falsification and Tampering

The federal prohibition is unambiguous. Under 49 C.F.R. Part 386, a person who knowingly falsifies, destroys, mutilates, or changes a report or record required under Parts 390 through 399 of the Federal Motor Carrier Safety Regulations is subject to a maximum civil penalty of $15,846 if the falsification misrepresents a fact that constitutes a safety violation.2 Carriers that require or permit egregious violations of driving-time limits face additional exposure. The regulatory framework makes clear that liability for log falsification applies to the carrier, not just the driver. Under 49 C.F.R. § 395.8, no driver or motor carrier may disable, deactivate, disengage, jam, or otherwise block or degrade a signal transmission or reception, or reengineer, reprogram, or otherwise tamper with an ELD so that the device does not accurately record and retain data. The FMCSA’s own regulatory guidance is equally direct: "a carrier is liable both for the actions of its drivers in submitting false documents and for its own actions in accepting false documents."3

The Methods of ELD Fraud

ELD fraud takes several forms, ranging from opportunistic misuse of legitimate features to deliberate, carrier-directed criminal schemes. The most common methods include fictitious co-driver accounts, device disconnection, personal conveyance abuse, and back-end record alteration.

Fictitious Co-Driver Accounts, Known as “Ghost Drivers”

The most consequential form of ELD fraud involves creating a second driver account that serves as a reset mechanism. The structure of the ELD system requires each driver to log in under their own credentials. Driving time accumulates against that account. When the driver approaches the 11-hour limit, the carrier adds a fictitious or inactive co-driver account to the ELD profile. The primary driver logs out and the fictitious account logs in, opening a fresh 11-hour driving window. The real driver never stops. The federal regulations are explicit: no driver or motor carrier may reengineer, reprogram, or otherwise tamper with an ELD so that the device does not accurately record and retain data. Adding a fictitious account to circumvent driving limits is a direct violation of this prohibition.4 These multi-driver login schemes are the most deliberate forms of manipulation and the one most directly tied to documented fatal crashes.

The Commercial Vehicle Safety Alliance (CVSA) has documented similar schemes in its inspection bulletins. In one example, a motor carrier created a fictitious ELD account using the same driver’s name but slightly altered credentials by changing a letter from uppercase to lowercase and modifying one digit in the CDL number. The driver alternated between the two accounts to continue driving after exceeding hours-of-service limits.5

Disconnecting the Device

A simpler but well-documented method involves physically disconnecting the ELD, or in app-based systems, disconnecting the smartphone from the hardware transmitter during driving periods the carrier wants to conceal.

Personal Conveyance Abuse

Personal conveyance status allows a driver to use the truck for personal, off-duty purposes without the time counting against available driving hours, such as traveling from a truck stop to a nearby restaurant. Drivers can falsify logs by misusing personal conveyance, such as by switching from on-duty driving to personal conveyance status once their available hours are exhausted in order to:

  • Finish delivering current loads,
  • Advance their position for the next pickup, or
  • Perform other work-related moves, such as driving to a repair shop.6

Because personal conveyance is recorded with lower location precision than on-duty driving, it can partially obscure where the truck was and what it was doing during the concealed period.

Back-End Record Alteration

The most technically sophisticated fraud involves a third-party service or carrier back-office staff member altering ELD records after the fact, either through exploits in ELD software or through direct manipulation of the underlying data. This category of fraud has grown significantly since the ELD mandate took effect.

ELD tampering has become so widespread that sales agents are cold-calling motor carriers offering "ELD editing" services. One such company, Logbook Hub, advertises on Facebook that it can "FIX your logbook" for $30 a week. CVSA’s Roadside Inspections Specialist, Jeremy Disbrow, has described a scenario where carriers instruct their drivers to call when the drivers run out of available time. The carrier then "contacts a third party who is able to quickly alter the records to eliminate any violations", without any record in the ELD file that edits were made.7

One industry veteran, Dave Moss, reported that at his last company, his logs were "edited overseas." When he raised the issue with management, management told him, "We have to do this to make money."8

The Economic Pressure Behind the Fraud

The economic stakes explain why this fraud has become industrialized. A carrier operating with falsified logs can move more freight per driver per week than a fully compliant competitor. The resulting cost differential is significant enough to affect contract bids and rate negotiations. Compliant carriers lose work to non-compliant ones. Some industry observers have characterized ELD fraud not just as a safety problem but as market distortion: it penalizes honesty and rewards falsification, with the cost externalized onto the public in the form of crash risk.8

Jeremy Disbrow, CVSA’s Roadside Inspection Specialist, stated that these third-party companies are "completely fabricating the record to show a compliant ELD file without any violations, and in many cases, even falsify[ing] electronic supporting documents to match the ELD file."7 Federal ELD technical specifications require that any edits to a record be flagged and identifiable to safety officials. Under 49 C.F.R. § 395.30, a motor carrier must not alter or erase, or permit or require alteration or erasure of the original information collected concerning the driver’s hours of service, the source data streams used to provide that information, or information contained in any ELD. When records are altered without triggering edit indicators, inspectors confronting the data cannot tell it has been changed.

Inspector Findings

In 2025, falsification of records of duty status was the second most-cited driver violation in CVSA inspection data, with 58,382 violations recorded. And five of the top ten driver violations were related to hours-of-service or ELD compliance. In response, CVSA has designated ELD tampering as the driver focus for its 2026 International Roadcheck.9

Roadside inspectors are finding complete altering of records of duty status (RODS) without any indication that they were edited at all. Per ELD technical specifications, driving time detected by the ELD cannot be reassigned to a non-driving duty status. Any edits that are made to the record must show that they were edited such that the edits are identifiable to safety officials. However, in practice, inspectors are encountering altered RODS with no indications of edits.10

Disbrow described the detection challenge as follows:

"The falsifications are often many hours or days off from what actually occurred. For example, a fuel receipt and bill of lading may say the driver was in Fargo, N.D., on Jan. 1 at 11 a.m., but the record of duty status shows the driver picked up in Fargo on Dec. 30 and was in Santa Fe, N.M., on Jan. 1. . . . The inspector can prove the ROD is false but cannot determine when the driver was actually driving or resting because the entire record is inaccurate."11

The issue of record falsification is known to CVSA inspectors. Disbrow stated that inspectors around the country agree that ELD fraud is not isolated incidents.

ELD tampering is happening on an "industrial scale". Businesses are created to help motor carriers elude HOS regulations. "This type of tampering cannot happen unintentionally. It is not a simple error in a record of duty because a driver accidentally made a mistake," says Disbrow.12

New CVSA Out-of-Service Criteria

To address this issue, CVSA updated its North American Standard Out-of-Service Criteria to address tampered ELD records. The New OOS Criteria distinguishes between traditional "false log" violations and false-log violations resulting from ELD tampering.

Traditional "false log" violations are misuse of personal conveyance or failure to log into the ELD. These types of violations are easier for inspectors to detect. When "a driver is over hours at the time of the inspection…inspectors can usually determine how much rest was actually taken and whether the driver should be placed out of service."13

More concerning, however, are records of duty status that have been reengineered, reprogrammed, or otherwise tampered with because the ELD does not accurately record or retain the required data. These altered logs may show no indication that any changes were made. For false-log violations that result from ELD tampering, new out-of-service criteria prescribe a specific violation. Drivers will also be placed out-of-service for 10 hours if records have been so thoroughly altered that inspectors cannot determine the last rest period.14

2026 International Roadcheck Focus

ELD tampering is a serious problem recognized by regulators. In response, regulators targeted ELD tampering, falsification, and manipulation during the 2026 International Roadcheck. The Roadcheck, which was scheduled to take place May 12-14, was the largest targeted commercial vehicle enforcement program in North America. During this period, inspectors reviewed each driver’s ROD status and checked for false or manipulated entries with specific attention to signs of ELD tampering.15

Sources

Frequently Asked Questions

  • The goal of the electronic logging device (ELD) mandate was to make driving time nearly impossible to hide. The mandate worked, in part, but the commercial pressure to keep trucks moving beyond legal driving limits did not disappear when paper logs did. Carriers and drivers adapted, exploiting gaps in the ELD system and in the regulatory framework’s enforcement capacity. ELD fraud takes several forms, ranging from opportunistic misuse of legitimate features to deliberate, carrier-directed criminal schemes.

  • The most common methods include fictitious co-driver accounts, device disconnection, personal conveyance abuse, and back-end record alteration. Fictitious co-driver accounts involve creating a second driver account that serves as a reset mechanism. Device disconnection involves physically disconnecting the ELD, or in app-based systems, the smartphone from the hardware transmitter, during driving periods the carrier wants to conceal. Drivers can falsify logs by misusing personal conveyance, such as by switching from on-duty driving to personal conveyance status once their available hours are exhausted. The most technically sophisticated fraud involves a third-party service or carrier back-office staff member altering ELD records after the fact.

  • The most consequential form of ELD fraud involves creating a second driver account that serves as a reset mechanism. Driving time accumulates against that account. When the driver approaches the 11-hour limit, the carrier adds a fictitious or inactive co-driver account to the ELD profile. The primary driver logs out and the fictitious account logs in, opening a fresh 11-hour driving window. The real driver never stops. Adding a fictitious account to circumvent driving limits is a direct violation of ELD fraud prohibitions.

  • The regulatory framework makes clear that liability for log falsification applies to the carrier, not just the driver. Under 49 C.F.R. § 395.8, no driver or motor carrier may disable, deactivate, disengage, jam, or otherwise block or degrade a signal transmission or reception, or reengineer, reprogram, or otherwise tamper with an ELD so that the device does not accurately record and retain data. The FMCSA’s own regulatory guidance is equally direct: a carrier is liable both for the actions of its drivers in submitting false documents and for its own actions in accepting false documents.

  • In 2025, falsification of records of duty status was the second most-cited driver violation in CVSA inspection data, with 58,382 violations recorded. CVSA has updated its North American Standard Out-of-Service Criteria to distinguish between traditional "false log" violations and false-log violations resulting from ELD tampering. For false-log violations that result from ELD tampering, new out-of-service criteria prescribe a specific violation. Drivers will also be placed out-of-service for 10 hours if records have been so thoroughly altered that inspectors cannot determine the last rest period.