VIN cloning and fraud

By Pixoware. Published 20 October 2026, updated 28 October 2026.

What cloning is

VIN cloning is taking the identity of a legitimate, legally registered vehicle and putting it on a different one — typically a stolen car of the same year, make, model and color. The donor car keeps driving around, lawfully registered, usually to an owner who has no idea. The clone gets the donor's number on its plates and paperwork and is sold as clean.

A close variant uses numbers taken from wrecked or scrapped vehicles. The Department of Justice's NMVTIS pages describe one such case, in which stolen vehicles had their VINs replaced with VINs removed from other vehicles of the same make, and were then sold to buyers who could not detect their true stolen status.

It is a paperwork crime rather than a mechanical one, and that is what makes it effective. The buyer's checks do not fail. They pass, because the number being checked belongs to a real car with a real history. It is just not the car in the driveway. Altering the number is itself a federal offense: knowingly removing, obliterating, tampering with or altering a motor vehicle or part identification number is punishable by up to five years in prison under 18 U.S.C. 511.

Why the check digit is no help here

This is the thing most worth understanding, and it is the opposite of what people assume.

The check digit validates the number. It confirms that seventeen characters are internally consistent with each other, using a published formula. It makes no claim about the vehicle. A cloned VIN was copied from a genuine car, so it validates perfectly — and so does the decode, which returns the donor vehicle's real specifications.

Even a VIN invented from scratch can be made to pass, because the arithmetic is public. Anyone willing to alter a VIN plate can work out a check digit that satisfies it. A passing check digit means you probably did not mistype the number. That is the whole of what it means.

What a clone looks like

Since the records check out, the signals are physical and circumstantial. It helps to know what the rules say should be there.

On the vehicle

• The windshield VIN. On cars, multipurpose vehicles and light trucks the VIN must be inside the passenger compartment, readable through the glass near the left windshield pillar, and marked on a part not meant to be removed except for repair, or on a plate permanently attached to one (49 CFR 565.13). A plate that sits unevenly, shows scratches or tool marks around its fasteners, or looks newer than the dash around it deserves a closer look.
• The door jamb label. The federal certification label next to the driver's seat must carry the VIN and the month and year of manufacture, and must be attached so that it cannot be removed without being destroyed or defaced (49 CFR 567.4). A label that is missing, looks peeled and reapplied, is suspiciously crisp on a worn car, or shows a build date that does not fit the model year is a question to ask.
• Marked parts. For vehicle lines covered by the federal theft prevention standard, major parts — engine, transmission, hood, fenders, doors, bumpers and others — are marked with the VIN (49 CFR 541.5). Markings that disagree with the plates, or that have been ground off, are a serious sign. A replaced panel after a repair is the innocent explanation, which is why one mismatch is a question rather than a verdict.

In the transaction

• The seller's name is not the name on the title, with an explanation involving a relative, a friend or a small dealership that is not present.
• The title is recent, from a state with no connection to the car's stated history. The DOJ's NMVTIS pages describe how a title brand can be “washed” by retitling a vehicle in a state that does not check its history.
• The price is meaningfully below market for the condition, and there is pressure to settle in cash, quickly, somewhere other than the seller's home or a dealership.
• You are discouraged from arranging an independent inspection.

Any one of these on its own may be nothing. Several together are a pattern.

What actually helps detect it

None of these is a free VIN decoder, and none is perfect on its own.

• A physical VIN inspection. This is the check that compares the number with the car, which is the whole question. Some states require one before they will title a vehicle from out of state; California, for example, requires a VIN verification at a DMV office, by the California Highway Patrol for salvaged or branded titles, or by a peace officer in the other state before the car arrives. Ask your motor vehicle agency what it offers. An inspector who knows where a model's numbers and marked parts are will find a mismatch that no database would show.
• A title history report. An NMVTIS report shows the current title state and date, the title brands any state has applied, odometer readings, and total loss and salvage history. On a clone it describes the donor, so it may well come back clean; its value lies in contradictions, such as a recent out-of-state title, an odometer history that does not fit the car, or a brand the seller did not mention. The DOJ itself warns that a search can give a false negative. Consumer reports are sold through approved providers listed at vehiclehistory.bja.ojp.gov.
• The NICB's free VINCheck. VINCheck covers vehicles reported stolen and not recovered, or reported as salvage, by participating member insurers. It does not search law enforcement records, it is limited to five searches per 24 hours from one IP address, and a clone's borrowed number will usually come back clean. It is most useful against a stolen or salvage vehicle sold under its own VIN, and a hit is a reason to stop.

What this site can and cannot do

RunThatVIN checks the check digit and returns what the manufacturer filed with NHTSA for that VIN, plus the recall campaigns listed for that year, make and model. All of that describes the vehicle the number was issued to.

It cannot tell you whether the car you are standing next to is that vehicle. No decoder can, free or paid — the question is about physical identity, and the answer is not in a specification database. Anything claiming otherwise is selling something.

What it is useful for is the step before: establishing what the number should describe, so that a car which does not match its own VIN becomes visible. A decode returning a four-cylinder sedan while you are looking at a V8 coupe is the kind of contradiction worth noticing, and it is free to notice. So is a door jamb label whose build date sits oddly against the model year in the decode; see model year codes.

If you think you have found one

Do not raise it with the seller. If the vehicle is stolen, the person selling it knows, and the useful thing you have at that moment is the option to leave.

Walk away, keep whatever you have — the advert, the VIN, photographs, the address — and report it to local law enforcement. The NICB also takes tips on suspected vehicle fraud through its report fraud page, and you can submit one anonymously. If you have already bought the car, contact law enforcement and your insurer early; the sooner the problem is documented, the better your position is likely to be. We cannot advise on your legal position, and a lawyer can.

Quick answers

What is VIN cloning?

Taking the identity of a legitimate, legally registered vehicle and putting it on a different one, typically a stolen car of the same year, make, model and color. The clone is sold as clean while the donor car keeps driving around, lawfully registered, usually to an owner who has no idea.

Can a VIN decoder tell if a car is cloned?

No. No decoder, free or paid, can tell you whether the car you are standing next to is the vehicle the number was issued to. A cloned VIN was copied from a genuine car, so it validates perfectly and the decode returns the donor vehicle's real specifications.

How can you tell if a car has a cloned VIN?

Look for physical and circumstantial signs, since the records check out. Examples include a windshield VIN plate with scratches or tool marks around its fasteners, a door jamb label that looks peeled and reapplied, marked parts that disagree with the plates, and a seller whose name is not on the title. A physical VIN inspection is the check that compares the number with the car.

What should I do if I think a car's VIN is cloned?

Walk away without raising it with the seller. Keep the advert, the VIN, photographs and the address, and report it to local law enforcement. If you have already bought the car, contact law enforcement and your insurer early.

Sources

• DOJ, NMVTIS for consumers (brand washing; the cloned-vehicle case)
• DOJ, Understanding an NMVTIS Vehicle History Report
• DOJ, NMVTIS approved data providers
• 18 U.S.C. 511, altering or removing motor vehicle identification numbers (Cornell LII)
• 49 CFR 565.13, VIN general requirements (eCFR)
• 49 CFR 567.4, certification label requirements (Cornell LII)
• 49 CFR 541.5, theft prevention parts marking (Cornell LII)
• California DMV, out-of-state title transfer checklist
• NICB, VINCheck
• NICB, Report fraud

What to verify by VIN before you buy →