Truck crash scene involving eld data concerns in kentucky

How Trucking Companies Falsify ELD and HOS Records

Electronic logs were supposed to stop fraud. Here’s how it still happens — and how we find it.

Forbes Best-In-State 2025
Super Lawyers 2017–2026
1,000+ Five-Star Reviews — 4.9/5
$0 Out-Of-Pocket — Always
ELD falsification occurs when drivers or motor carriers manipulate electronic logging device data to conceal hours-of-service violations. Common methods include ghost driver accounts, unassigned driving time, carrier-directed back-office edits, and using non-certified ELDs. When a crash follows falsified records, those records become powerful evidence of a carrier’s deliberate disregard for federal safety rules.

ELDs Were Supposed to Stop Log Fraud — Here’s Why They Haven’t

The FMCSA’s ELD mandate under 49 CFR Part 395, Subpart B took effect in December 2017. Congress and the agency expected electronic logging devices to end the era of paper log falsification — the old-fashioned “pencil whipping” where drivers simply wrote in whatever hours looked compliant. In one sense, the mandate succeeded. FMCSA’s own ELD Oversight Report to Congress noted that the percentage of driver inspections yielding an HOS violation dropped from 1.19% in December 2017 to 0.77% in December 2021.

But compliance with recordkeeping is not the same as actual compliance with hours of service. As inspectors and investigators have found — and as a 2024 NTSB report confirmed — trucking companies and drivers have developed a range of methods to defeat ELD safeguards and create the appearance of compliance while pushing drivers well past legal limits.

$15,846 Maximum penalty per false ELD log entry under 49 CFR Part 386
$19,246 Maximum carrier penalty per non-recordkeeping HOS violation (2025)
3 Dead Killed in 2022 Virginia crash traced directly to ghost-driver ELD fraud (NTSB)

The Ghost Driver Scheme

The most disturbing ELD fraud method documented by the NTSB is the ghost driver scheme. Here is how it worked in the 2022 Williamsburg, Virginia crash that killed three people and injured multiple others:

A tractor-trailer driver for Illinois-based Triton Logistics reached his 11-hour driving limit. Instead of stopping, he called the carrier’s HOS department — based in Lithuania — and asked them to add a fictitious co-driver to his ELD system. Once the ghost driver was logged in, the real driver had a fresh 11-hour window. All driving time from that point appeared on the ghost driver’s record, with no violations visible on the real driver’s log. The driver told investigators he could use this method every time he hit his limit. Other Triton drivers did the same.

The NTSB’s investigation found that fatigue from excess driving and lack of sleep opportunity caused the driver to fail to brake or take evasive action before the crash. After an FMCSA on-site review, Triton was assigned a conditional safety rating and cited for violations related to false duty status records and permitting drivers to exceed the 11-hour limit.

CVSA Inspectors: “We see this every shift”

Jeremy Disbrow, a roadside inspection specialist with the Commercial Vehicle Safety Alliance, told Transport Topics after the NTSB report was released: “It was pretty clear from the inspectors around the country that this isn’t an isolated incident by any means. The average inspector is seeing this every shift, at least once or twice. There’s a number of ways that they’re falsifying [logs].” FMCSA confirmed it has seen a rise in detected falsification instances in recent years as enforcement officers have become more skilled at identifying it.

The Six Methods of ELD Falsification

  • Ghost Driver / Fictitious Co-Driver Accounts Carriers create fake or former driver accounts in the ELD system. When a driver reaches an HOS limit, the carrier logs him in under the ghost account, giving him a fresh driving window. The real driver’s records show no violation.
  • Unassigned Driving Time Manipulation When a truck moves at speeds over 15 mph without a logged-in driver, the ELD records it as “unassigned” driving time. Under FMCSA rules, carriers must either assign or explain all unassigned time — but the most common ELD falsification method is deliberately logging out before driving past a limit so the excess hours appear as unassigned rather than as a violation. Inspectors treat unassigned time as a red flag requiring investigation.
  • Carrier-Directed Back-Office Edits Drivers can make edits to their own ELD records and those edits show up as annotated changes visible to inspectors. But when carrier back-office personnel make edits on behalf of drivers, those changes have, in some cases, not appeared as edits. The NTSB recommended that FMCSA require ELD providers to maintain an audit log tracking every edit — including who made it, when, and what was changed.
  • Personal Conveyance Abuse “Personal conveyance” mode allows a driver to move a truck without it counting as on-duty driving time — the theory being the driver is using the vehicle for personal reasons after a delivery. Abusing personal conveyance by logging off-duty miles as personal conveyance while actually running loads is a documented falsification method that inspectors look for when mileage patterns do not match routing records.
  • Fake ELD Malfunction Claims A driver who claims an ELD malfunction is permitted to revert to paper logs. Under 49 CFR § 395.34, the carrier must repair or replace the ELD within 8 days. Some drivers exploit this window to “hand-write” the past seven days of logs, giving themselves extra hours. Inspectors look for this pattern when paper logs appear for vehicles with registered ELDs.
  • Using Non-Certified or Revoked ELDs FMCSA has revoked multiple ELD devices from its registered list for failing to meet minimum technical requirements. Some carriers continued using revoked devices — devices that may not enforce HOS limits or accurately record driving time. FMCSA confirmed it removes noncompliant ELD providers and trains enforcement personnel specifically to identify devices enabling falsification.

How Forensic ELD Data Recovery Works

When a truck crash triggers litigation, attorneys must obtain the full ELD dataset — not just the driver’s clean-looking log. A complete ELD production request includes:

  • The original, unedited RODS (Record of Duty Status) data for the 14 days before the crash
  • The full edit history — every change made to every record, with timestamps and user IDs
  • Unassigned driving time records and the carrier’s written explanations for each event
  • Data diagnostic and malfunction event logs (including power compliance and positioning malfunctions)
  • Active driver list, including all accounts assigned to the subject vehicle in the 30 days before the crash
  • Supporting documents under 49 CFR § 395.11: fuel receipts, toll records, bills of lading, weigh tickets, and payroll records that must be cross-referenced against ELD data

The supporting documents are critical. ELD data tells you when and where the truck moved. Supporting documents tell you whether the movement makes sense. If the truck shows 10 hours of driving but the fuel receipts, toll records, and GPS telematics show a 16-hour route, the gap reveals falsification. When we find inconsistencies, we work with forensic data analysts to reconstruct the driver’s actual work history and establish the true picture of fatigue at the time of the crash.

Time Is Critical: ELD Data Has a Limited Window

ELD devices and carrier systems are not required to retain data indefinitely. Data can be overwritten, deleted in routine system maintenance, or “lost” in a server migration. FMCSA requires carriers to retain ELD data for six months, but that clock starts running the moment the crash happens. We send preservation demands and spoliation letters within hours of taking a case to every party in the chain — the driver, the carrier, the ELD provider, and the telematics service — to lock the data before it disappears.

What Falsified ELD Records Mean for Your Case

When we can establish that a carrier directed its drivers to falsify ELD records, the legal implications go far beyond the underlying hours-of-service violation. Carrier-directed falsification is not a driver making a mistake — it is a company policy of deliberate deception that creates a fatigued workforce and sends those drivers onto Kentucky highways. That level of conscious indifference to safety supports punitive damages claims, which can dramatically increase the total value of a case.

FMCSA acknowledges that knowing falsification of records carries a maximum civil penalty of $15,846 per false entry under 49 CFR Appendix B to Part 386. In a case where dozens of false entries were made over months or years, the regulatory exposure alone signals the severity of the conduct — and juries notice that signal.

Frequently Asked Questions

What exactly is an ELD and what does it record?
An Electronic Logging Device (ELD) is a device hardwired to a commercial motor vehicle’s engine that automatically records driving time by detecting when the engine is running and the vehicle is moving. Under 49 CFR Part 395, Subpart B, ELDs must capture duty status, driving time, on-duty not-driving time, and off-duty time. They must synchronize with engine data and record geographic location at every duty status change. The goal is a tamper-resistant record — but as multiple crashes have shown, that record can still be defeated.
Can a carrier edit a driver’s ELD records without the driver knowing?
Yes, in some cases. While drivers must be notified of carrier-suggested edits and given the opportunity to accept or reject them, there have been documented instances where carrier back-office personnel made edits that did not appear in the standard edit history visible to roadside inspectors. The NTSB recommended that FMCSA require a comprehensive audit log that captures every edit, including the identity of who made it, to close this gap. As of early 2026, FMCSA was reviewing potential rule changes.
How do attorneys uncover ELD falsification?
The process involves obtaining the full ELD dataset with complete edit history, then cross-referencing it against supporting documents — fuel receipts, toll records, GPS telematics, dispatch logs, and ECM (engine control module) data. When a driver’s log shows him resting but the truck’s GPS shows it moving, or when fuel purchases appear in locations the ELD log never recorded, those discrepancies reveal the falsification. Forensic data analysts can reconstruct actual driving time from raw ECM data even when ELD records have been manipulated.
Does ELD falsification make a case worth more?
Often yes. When a carrier directed its drivers to falsify records — not just a one-time driver mistake, but an organizational policy — that conduct can support punitive damages claims. Punitive damages are designed to punish deliberate, reckless corporate behavior and deter others from the same conduct. Carrier-directed ELD fraud is exactly the kind of evidence that can move a case from standard compensatory damages into punitive territory.
How long do I have to act before ELD data is gone?
FMCSA regulations require carriers to retain ELD data for six months. After that period, routine data maintenance may purge records. In practice, some carriers destroy records faster — especially after a crash. Acting within days of the collision to send legal preservation demands to the carrier, ELD provider, and telematics company is the only way to ensure that evidence survives.

The Evidence Is There. We Know How to Find It.

Insurance companies will try and minimize your pain. We don’t let that happen.

Get more. Get it faster. Get it with Sam Aguiar.

Start Your Free Case Review

Fill out the form below and our team will reach out to discuss your options.