DOT, MC, and insurance: what to show publicly vs keep private on your trucking website

One rule decides every field

A carrier website pulls you in two directions. To get booked you want to prove you are legitimate, which argues for showing your credentials. But you are also a target, which argues for hiding. You do not have to guess field by field — one question resolves almost every case: does this detail help an honest broker verify me, or could a criminal use it against me?

Most information falls cleanly on one side of that line. Publish the verification signals; gate the exploitable data. Get the split right and you become more trustworthy to brokers and less useful to scammers at the same time. This guide walks the fields one by one. For why scammers are hunting this data in the first place, the double-brokering guide has the background; here we focus on the decision.

Show publicly: the verification layer

These items are either already public or purely reputational. Displaying them shortens a broker's verification and makes you look established, with little downside and real upside.

• Your legal company name and any DBA, matching your FMCSA authority exactly.
• Your MC and USDOT numbers, which are already public in SAFER.
• Your service area, primary lanes, and equipment types.
• A plain-language insurance summary (for example, '$1M auto liability, $100K cargo') without policy numbers.
• A business phone and business email that match your carrier packet.
• Years in operation, references, and any associations or certifications.

Keep private: the exploitable layer

This is the data that lets a criminal impersonate you, redirect your money, or steal your identity. None of it needs to be one public click away, and posting it hands scammers the exact material they are looking for.

• Voided checks, bank account and routing numbers, and payment-portal logins.
• Your signed W-9 showing your EIN or Social Security number.
• Driver personal information — CDL numbers, dates of birth, medical cards.
• Your exact home address if you operate from home; show a service area instead.
• Detailed insurance policy numbers and internal broker-setup credentials.

The three borderline fields, decided

Most fields are obvious once you apply the rule; a few sit on the fence and cause the most second-guessing. Here is where each one lands, and why.

• The insurance certificate — summary public, full COI on request. The summary proves coverage exists; the full document names your insurer and agent, which an impostor could use to sound convincing, so it goes to brokers actually onboarding you.
• Your address — region public, street private. Brokers need to know your operating area, not where you park the truck, so a service-area presentation satisfies verification without exposing your home.
• Your safety and CSA data — already public, so linking to it is fine. It lives in FMCSA regardless; pointing brokers to your own clean record can help, and hiding it does nothing because they can pull it anyway.

The insurance certificate: the field people get wrong

Insurance is where carriers most often misjudge the line, so it is worth its own look. A short coverage summary on your public site is exactly right — it tells a broker at a glance that you carry adequate limits and reassures a shipper without a phone call. The full certificate of insurance, with your agent's details and policy numbers, is fine to share but belongs on request or in a gated packet.

The reason is specific: the full COI identifies your insurer and agent, and combined with your public MC it gives an impostor material to impersonate you convincingly. The summary builds trust in the open; the full document goes to brokers who are genuinely onboarding you. Both audiences are served, and you have not handed anyone a script.

Two tiers by design — the display decision, not just storage

The clean way to implement all of this is to think of your site as two tiers. The public tier is your verification layer — name, MC, DOT, service area, equipment, coverage summary — built to be found and to close a broker's doubts. The gated tier is your document layer — full COI, W-9, voided check or factoring notice — behind a request form or a password shared during setup.

This is a display decision, not merely where files sit: the public tier decides what a stranger sees at a glance, and that is what shapes trust. Draw the line deliberately and you get maximum trust for anyone verifying you and minimum exposure for anyone trying to exploit you — while onboarding still moves fast, because the moment a broker commits, the private material is one link away.