Shouldn't there be enough information about the shippers to make arrests for the cars that are caught?

If not, begin a proper investigation and start collecting that information. I'm generally against KYC regulations, but a limited and targeted investigation seems appropriate here.