You can buy a Mexican commercial license online for $200. Six states will convert it to an American CDL without verifying your legal presence. And the federal audit just started.
Rob Carpenter
Somewhere between a Philadelphia apartment and a flea market in South Texas, between a wire transfer to a Mexican fixer and a California DMV counter that doesn’t blink at a birth certificate listing “No Name Given,” the American commercial driver’s license system broke. Not bent. Not stressed. Broke.
It is so broken that a 2025 federal audit found that one in four non-domiciled CDLs issued by California were improper. It broke so badly that Oklahoma state troopers pulled over commercial vehicles driven by individuals whose official government-issued CDLs listed their first name as “No Name Given.” It broke so completely that for $2,500 wired to the right contact in Mexico, a Honduran national who has never sat behind the wheel of a tractor-trailer can receive a digital Licencia Federal de Conductor, a Mexican federal commercial driver’s license, in his email inbox, printed against a backdrop of his garage door, and use it to drive 80,000 pounds of freight on American highways.
This is not a single problem. It is a constellation of failures, federal, state, and international, that have converged into what U.S. Transportation Secretary Sean Duffy called “an imminent hazard on America’s roadways” and “a direct threat to the safety of every family on the road.” At least five fatal crashes in the first eight months of 2025 involved non-domiciled CDL holders. In one, a driver attempted an illegal U-turn on the Florida Turnpike in St. Lucie County, killing three Americans. In another, a March crash in Austin involving 17 vehicles killed five people, including two children.
The crashes are the symptom. The disease is a licensing infrastructure so fragmented, so riddled with loopholes and willful state-level negligence, that it has effectively created multiple open doors for unvetted, unqualified, and in many cases undocumented individuals to obtain credentials to operate the deadliest vehicles on American roads. Those doors have names: AB 60, Driver’s Licenses for All, non-domiciled CDLs, reciprocal license recognition, and the newest and perhaps most brazen of them all, the Mexican mail-order CDL.
The $2,500 CDL You Never Have to Earn
The story of the mail-order Mexican CDL begins, ironically, with a modernization effort. In April 2021, Mexico’s Secretaría de Comunicaciones y Transportes began issuing digital versions of the Licencia Federal de Conductor, or LFC. The move was intended to reduce fraud by replacing hard-copy licenses that had long been counterfeited using materials sourced from China, from the same manufacturer, with licenses bearing the same holograms used by the Mexican government. U.S. Customs had been seizing counterfeit materials from cargo ships for years, but had never connected the dots to the downstream implications for American highway safety.
The digital transition didn’t kill the fraud. It supercharged it.
According to Maj. Omar Villarreal of the Texas Highway Patrol’s Commercial Vehicle Enforcement division, the scheme works like this: An aspiring driver, often not a Mexican national but a citizen of Honduras, Guatemala, El Salvador, Cuba, Nicaragua, Ecuador, Colombia, or Venezuela, hears through informal networks that a Mexican CDL is available for purchase. The buyer emails a photograph of themselves, provides basic biographical information, and wires between $2,000 and $5,000, depending on the state where the transaction is facilitated. What arrives is a digital LFC that, when queried through Mexico’s SCT verification portal, may appear legitimate or redirect to a fraudulent clone website that mimics the official system.
Texas enforcement officers began catching these fakes because of the photos. Where legitimate LFC photos would be taken in a Mexican government facility, the digital frauds showed drivers standing in front of garage doors, against residential backdrops, and against living room walls. The backgrounds told the story the documents were designed to hide: these licenses were never issued in Mexico. Many of the holders had never been to Mexico.
“We started noticing in the Austin area an uptick of commercial vehicles engaged in construction,” Villarreal told FreightWaves. That uptick soon gave way to massive encampments forming outside Texas cities, with 80 to 100 commercial vehicles at a time, housing operators working in short-haul construction and aggregate hauling. “We started seeing this crop up all over the major metropolitan areas of Texas.”
When officers interviewed the drivers, many disclosed they were Central American nationals who had acquired their Mexican LFCs without ever setting foot in a testing facility. The digital transition had opened the door to corruption within the Mexican government, which allegedly began selling LFCs to third-party vendors, who then resold them internationally. The result is a fully operational, transnational commercial licensing fraud operation, one that the Biden-era FMCSA and CVSA showed little appetite to address when Texas first raised the alarm.
Cabotage, the Border Zone, and the Legal Fiction
Under NAFTA and now under the USMCA, the United States, Mexico, and Canada agreed to recognize each other’s commercial driver’s licenses for international commerce. A Mexican driver holding a valid LFC can legally deliver international cargo into the United States, but only within designated commercial zones along the southern border or under limited long-haul authority granted to a small number of Mexican carriers following a 2011-2015 congressional pilot program.
The critical restriction is cabotage. Under 49 CFR § 365.501(b) and 19 CFR § 123.14(c), a Mexico-domiciled carrier may not provide point-to-point transportation within the United States for goods other than international cargo. Period. When a Mexican carrier delivers a load into the U.S., it must either find a return load to Mexico or deadhead home. It cannot haul freight from Dallas to Houston. It cannot pick up domestic loads. The regulation exists to protect American trucking jobs and ensure domestic freight moves on domestic credentials.
In theory.
In practice, as the Trucking and Enforcement Action Coalition noted in its 2025 recommendations, “there is nothing to stop drivers authorized for border-zone-only hauling from operating beyond the zone without proper authorization or language proficiency verification.” State law enforcement cannot enforce federal cabotage rules. FMCSA has statutory authority to levy $10,000 civil fines for cabotage violations, but has a longstanding pattern of failing to follow through. The result is a system where the rules exist on paper and evaporate on the highway.
And here is where the mail-order Mexican CDL becomes more than a fraud problem. Under reciprocal recognition, a Mexican LFC, even a fraudulent one, is treated as a valid credential if it appears legitimate. A driver who purchased a digital LFC for $2,500 from a contact in Mexico City can present it to a U.S. motor carrier as proof of qualification. Unless that carrier takes the extraordinary step of verifying the license in Mexico’s SCT database and cross-referencing the CURP, an 18-character personal identification code unique to each Mexican citizen, there is no practical way to distinguish the fraud from the real thing.
Texas tried to close this gap. In 2023, the state legislature unanimously passed SB 672, requiring foreign CDL holders operating outside border counties to possess valid U.S. work authorization documents. The law classified both Mexican and Canadian CDLs as government records, giving prosecutors grounds to charge possession of a fraudulent LFC as tampering with a government record. Enforcement of the new law reduced crashes in Texas. But it also pushed the operators out of state, to Colorado, to Pennsylvania, to California, to Washington, where they found more permissive environments and, in some cases, the opportunity to trade their fraudulent Mexican LFC for a genuine American CDL.
AB 60, Driver’s Licenses for All, and the Gateway to a CLP
California’s Assembly Bill 60, signed into law in 2013 and effective January 2015, allows undocumented immigrants to obtain a California driver’s license without proof of legal presence in the United States. The applicant needs proof of identity, which can include a Mexican passport, a Mexican Federal Electoral Card, or a foreign consular ID, and proof of California residency, which can be established with documents as informal as a cell phone bill, a letter from a nonprofit, or an attestation from a faith-based organization.
More than one million AB 60 licenses have been issued since the program’s inception. The licenses bear the notation “Federal Limits Apply” and cannot be used for federal identification purposes. And critically, AB 60 does not authorize the issuance of a commercial driver’s license. A CDL in California still requires a valid Social Security number.
That is the letter of the law. But the letter and the reality occupy different zip codes.
What AB 60 does provide is a state-issued identity document. It creates a documented residency. It establishes a person in a system. While the license itself cannot be upgraded to a CDL, it provides the bureaucratic foundation on which other credentials can be stacked. An individual with an AB 60 license has passed both the knowledge and driving tests. They have established residency. They have a government-issued photo ID with an address. For someone seeking to navigate the patchwork of state CDL programs, particularly the non-domiciled CDL pathway, that foundation is the first brick in the wall.
The same principle applies in Minnesota, where Governor Tim Walz signed the Driver’s Licenses for All bill in March 2023, effective October 1 of that year. The law removed the requirement to prove legal presence in the United States for a standard Class D license. An estimated 81,000 undocumented immigrants in Minnesota became eligible. The law includes strict privacy protections prohibiting the Minnesota Department of Public Safety from sharing applicant information with federal immigration authorities.
Washington state has followed a similar trajectory. Before the 2025 federal crackdown, Washington was issuing non-domiciled CDLs with what federal auditors later characterized as grossly insufficient verification. In one case identified by the FMCSA, Washington authorized a non-domiciled CDL to a Ukrainian citizen without verifying the individual’s lawful presence in the United States. An internal review discovered that 685 non-domiciled drivers were incorrectly given regular CDLs or learner’s permits rather than limited-term credentials.
The pattern across these states is not identical, but the architecture is the same: create an accessible entry point for a state-issued identity document, build privacy walls that prevent federal immigration authorities from accessing the resulting data, and then fail to adequately police the pathways between that entry-level document and the commercial credentials that allow someone to operate 80,000 pounds of steel at 65 miles per hour.
‘No Name Given’ and the Identity Verification Insanity
In September 2025, Oklahoma Governor Kevin Stitt posted a photograph on X showing a New York state CDL seized during Operation Guardian, a joint operation between the Oklahoma Highway Patrol and ICE along Interstate 40. The CDL listed the driver’s first name as “No Name Given.” The operation resulted in the apprehension of 125 undocumented immigrants from nine countries operating commercial vehicles.
The image detonated on social media. But the reality behind it is both more nuanced and more damning than the viral moment suggested.
In many cultures, Afghanistan, Indonesia, parts of South Asia, and the Middle East, individuals use a single name. There is no surname, no given name, and no family name division. When these individuals present identity documents at an American DMV, the documents may list only one name, with the first-name field left blank or populated with “No Name Given.” California DMV policy requires clerks to transcribe names exactly as they appear on the presented identity documents. If the birth certificate or passport says “No Name Given” in the first-name field, that is what goes on the license.
The policy is defensible in isolation. The problem is what it reveals about the broader system. If a state is issuing CDLs, credentials that under the Real ID Act are supposed to represent some of the most secure identity documents in the nation, credentials that in their REAL ID-compliant form bear a star indicating the holder has been vetted to enter a nuclear facility, to individuals whose identity documents cannot populate a first-name field, the question is not whether mononyms are culturally legitimate. The question is whether the identity verification process actually verifies anything.
Federal auditors apparently concluded it was not. The FMCSA audit that prompted Secretary Duffy’s September 2025 emergency action found that California, Colorado, Pennsylvania, South Dakota, Texas, and Washington all exhibited “systemic non-compliance” in their CDL issuance patterns. California alone had 62,000 unexpired non-domiciled CLPs and CDLs in its system. More than 25 percent of those reviewed were improperly issued. Some licenses are extended four years beyond the expiration of the holder’s legal authorization to be in the United States. In one case, California issued a CDL with school bus and passenger bus endorsements to a Brazilian national whose legal presence had already expired.
Pennsylvania, the state that issued the non-domiciled CDL shown in the image at the top of this article, was identified as one of the six states with licensing patterns inconsistent with federal regulations. Over 12,000 active non-domiciled CDLs exist in the Pennsylvania system. FMCSA issued eight mandatory corrective actions to the state, including an immediate pause on all non-domiciled CDL issuance and a full internal audit of every transaction.
Duffy’s Emergency and the Court’s Pause
On September 26, 2025, Secretary Duffy announced an emergency interim final rule that immediately restricted non-domiciled CDL eligibility to holders of H-2A agricultural worker visas, H-2B temporary worker visas, or E-2 treaty investor visas. Employment Authorization Documents alone, the work permits that had previously been sufficient, would no longer qualify. The rule required states to use the USCIS SAVE database to verify every applicant’s immigration status, mandated in-person renewals, and required states to maintain documentation for at least two years.
The rule affected approximately 200,000 active non-domiciled CDL holders and 20,000 CLP holders. FMCSA estimated that only about 6,000 drivers annually would qualify under the new restrictions, a roughly 97 percent reduction in the eligible applicant pool.
“What our team has discovered should disturb and anger every American,” Duffy said. Licenses to operate a massive, 80,000-pound truck are being issued to dangerous foreign drivers, often times illegally. This is a direct threat to the safety of every family on the road, and I won’t stand for it.”
California was given 30 days to comply or face withholding of $160 million in federal highway funds in the first year, with the amount doubling in year two. Washington suspended all non-domiciled CDL processing. Colorado, South Dakota, Oregon, Wisconsin, New Mexico, Georgia, and others followed with pauses of their own.
Then the courts intervened. On November 13, 2025, the U.S. Court of Appeals for the D.C. Circuit issued a stay pending review, preventing the interim final rule from taking effect until further notice. States were technically free to resume issuing non-domiciled CDLs under the pre-existing regulatory framework. But many did not. California, Washington, Texas, Colorado, South Dakota, Minnesota, Pennsylvania, and New York remain subject to corrective action plans that require them to demonstrate compliance with pre-existing federal rules before resuming issuance.
The legal limbo is precisely the kind of environment in which fraud thrives. The rules are unclear. The enforcement is inconsistent. The political pressure cuts in multiple directions. And every day, freight still needs to move.
How the Doors Connect
What makes this crisis so intractable is that each of these problems, the mail-order Mexican CDL, the state license-for-all programs, the non-domiciled CDL pipeline, the “No Name Given” identity gap, and the unenforced cabotage rules, does not exist in isolation. They form an ecosystem.
Consider the path. A Central American national enters the United States without documentation. He establishes residency in California and obtains an AB 60 driver’s license using a consular ID and a cell phone bill. He now has a state-issued photo ID. He obtains a work permit through an asylum claim or other immigration proceeding. He now qualifies for a non-domiciled commercial learner’s permit. He passes the CDL knowledge test, takes a skills test at a third-party testing facility, and obtains a non-domiciled CDL.
Or consider the alternative path. The same individual never enters the formal system. He purchases a Mexican LFC for $2,500 from a contact reached through a WhatsApp group. Because the United States recognizes Mexican CDLs under the USMCA reciprocity agreement, a motor carrier hires him to drive. He operates not within the border commercial zone, but across the interior, because no one enforces cabotage rules. If stopped by state law enforcement, he presents the digital LFC. The officer, without access to Mexico’s SCT verification system or training on how to spot the telltale signs of fraud, the garage-door photo, the mismatched CURP characters, the fabricated verification website, has no mechanism to distinguish the document from a legitimate one.
Or consider the legislative path. In October 2025, Representative Beth Van Duyne of Texas introduced the Protecting America’s Roads Act, which would codify Duffy’s emergency restrictions, end reciprocal recognition of Mexican and Canadian CDLs unless authorized by statute, limit non-citizen CDL terms to the shorter of the I-94 expiration or one year, and authorize 287(g) agencies to report unlawful CDL operators. The Texas Department of Public Safety has separately petitioned FMCSA to amend 49 CFR § 383.23 to remove reciprocal recognition entirely, requiring all foreign CDL holders operating domestically to obtain a non-domiciled CDL with proper work authorization.
These are the right ideas. But they arrive years late and against a backdrop of court stays, state resistance, and the relentless economic pressure of a freight market distorted by the very practices the reforms target. Carriers built on non-domiciled CDL labor, operators who survived the Great Freight Recession by hiring drivers willing to run 1,000 miles in a day, sleep in the truck, accept below-market rates, and ignore hours-of-service rules, are not going to restructure their businesses because of a stayed interim final rule.
Whats Next
The honest answer is that no one knows. The D.C. Circuit stay means the emergency rule is frozen. The corrective action plans for the six identified states create a patchwork of suspended issuance. The Protecting America’s Roads Act has been introduced but not passed. The State Department paused H-2B visa processing for commercial truck drivers in August 2025, further constraining the legal labor pipeline while doing nothing to address the illegal labor market.
Meanwhile, the Mexican mail-order CDL business continues to operate. The digital LFC can be purchased worldwide. The informal networks that connect buyers in American cities to sellers in Mexican government offices, former government offices, or people who have purchased digital infrastructure from government offices are not affected by American regulatory action. They are affected by Mexican law enforcement action, which has been minimal.
What would actually fix this is not complicated in concept, though it is enormously difficult in execution. End reciprocal recognition of foreign CDLs for all domestic operations, full stop. Require every driver operating a commercial vehicle on American roads to hold an American CDL issued through a verified, standardized process that includes SAVE verification, English-language proficiency testing at the point of CDL examination, and biometric identity confirmation. Fund FMCSA enforcement of cabotage rules so that the $10,000 fine authority it already possesses becomes a deterrent rather than a dead letter. Mandate that state DMVs cannot issue any CDL, domiciled or non-domiciled, to an applicant whose identity document cannot populate a legal first and last name through primary source verification. And build a unified federal database of all non-domiciled CDLs with real-time status tracking.
None of this requires new technology. It requires political will, state compliance, international coordination, and the kind of sustained regulatory attention that the trucking industry has been denied for decades, while the aviation industry receives as a matter of course. The FAA does not allow foreign nationals to purchase pilot certificates by mail. It should not be this easy to purchase the credentials to operate a vehicle that weighs more than a loaded school bus.
The license in the photograph that prompted this article, a Pennsylvania non-domiciled CDL, Class A, issued to a foreign national, marked “Limited Term”, is not, by itself, evidence of fraud. It may be entirely legitimate. But it is a symbol of a system that has lost the ability to distinguish the legitimate from the fraudulent, the qualified from the dangerous, and the documented from the disappeared. When a government issues a license to operate an 80,000-pound vehicle to a person whose name it cannot verify, whose work authorization it does not track, and whose driving competence it outsources to a third-party tester it does not audit, it has not issued a license. It has issued a prayer.
On American highways, prayers are not an adequate safety plan.
Scopelitis
From a regulatory standpoint, 2025 was not defined by sweeping new trucking rules but instead by how the federal government chose to act: deregulating selectively, enforcing aggressively, and increasingly using safety as justification for broader objectives.
Those three dynamics explain far more about the year than any single rulemaking — and they set the stage for what carriers should expect in 2026.
Deregulation: Real, but Narrow
The Trump Administration made deregulation an operating principle in 2025 by issuing its 10-1 deregulatory executive order just 10 days into the President’s second term. FMCSA and other regulatory agencies quickly followed suit. In the case of FMCSA, rather than pursuing controversial rollbacks, the agency focused on updating federal regulations to meet the reality of trucking in 2025, potentially reducing administrative burden without reopening core safety debates.
Proposals addressed issues such as the definition of a DOT Accident, electronic documentation, outdated certification requirements, and limited reporting obligations. The relief is targeted and modest. Carriers should view deregulation as margin improvement, not a wholesale shift in compliance expectations.
Enforcement: Where the Pressure Shifted
While rulemaking slowed, enforcement accelerated.
FMCSA significantly increased scrutiny of electronic logging devices, removing nearly 30 ELDs from the registry and rolling out stronger vetting aimed at fraud, white-labeling, and tampered systems. State strike forces reinforced that focus, uncovering widespread manipulation of records of duty status, including the use of ghost drivers and altered logs.
Entry-level driver training enforcement followed the same trajectory. Thousands of training providers were removed from the Training Provider Registry, with many more flagged for noncompliance. CDL mills are now a clear enforcement priority.
The takeaway for carriers is simple: fewer new rules did not mean more tolerance. In many areas, enforcement expectations tightened, laying bare the monumental task of policing the trucking industry’s vendors as well as its motor carriers and the contribution of self-certification regimes to ongoing fraud.
Safety as Justification for Other Objectives
Some of the most disruptive developments of 2025 were framed as safety initiatives but were likely driven by broader policy goals. Restrictions on non-domiciled CDLs and renewed emphasis on English Language Proficiency enforcement were advanced under a safety rationale, while also aligning with a broader immigration enforcement strategy. State responses were uneven, litigation followed quickly, and some issues remain unresolved. This heightened scrutiny is already affecting roadside enforcement, investigations, and driver availability.
What to Expect in 2026
The environment in 2026 is likely to be a continuation of 2025, with potentially higher stakes.
Deregulation will continue, but primarily through narrow, low-risk changes. Carriers should not expect broad relief from core safety and compliance obligations. These deregulatory moves could also make way for some additional regulations under the 10-1 EO. After all, FMCSA has some unfinished business to tend to in the form of its Safety Fitness Determination rulemakings and actions on automated driving, ELD specifications/certification, and automatic emergency braking.
Enforcement will remain the primary policy tool highlighted by greater use of data-driven targeting, technology-enabled inspections, and intensified oversight of ELDs and driver training providers. To this end, CSA reform may come to fruition, and efforts to tie CSA data more directly to carrier safety ratings may continue. At the same time, FMCSA faces a structural reality: regulating a growing industry with limited staff and imperfect data. That reality favors automation, prioritization, and scalable enforcement models.
Finally, the debate will continue on the efficacy of broader immigration related proposals in improving motor carrier safety through reduced crashes.
Bottom Line
For carriers, the lesson from 2025 is clear. Regulatory relief and enforcement pressure are not opposites — they are complementary tools. This year, success will depend less on tracking new rules and more on managing enforcement exposure, data quality, and operational discipline.
