VIN cloning: how stolen cars wear another car's identity
VIN cloning is car identity theft: criminals copy the VIN of a clean, legally registered vehicle and stamp it onto a stolen one of the same make and model. The paperwork checks out — because it belongs to another physical car. When the fraud surfaces, police seize the vehicle and the buyer keeps the loss. The defense is cross-checking the physical car against its VIN's recorded history until the details agree.
Cross-check a VIN's history
Paste the 17-digit VIN — compare the recorded specs, colors, photos, locations and mileage timeline against the physical car in front of you.
Data on 125+ million vehicles, updated daily from salvage auctions, dealer listings, state title records and federal crash data.
How the scam works
A thief finds a clean donor vehicle — same make, model and year — copies its VIN, forges plates and paperwork, and sells the stolen car hundreds of miles from the donor. Registration may even succeed, because the VIN itself is valid. The scheme only breaks when the two cars' histories collide: two 'identical' vehicles cannot be in two places at once.
The history cross-check that exposes clones
Open the VIN's recorded history and compare it to the physical car: do the photos show the same exterior and interior colors, trim and equipment? Is the recorded mileage timeline consistent with the odometer? Was the car recently listed or registered in a distant state while being sold in yours? Any mismatch between the record and the metal means you are probably looking at a clone.
Physical checks on the car
Compare the windshield VIN plate with the door-jamb sticker and, ideally, the frame stamping — mismatched, re-riveted or tampered plates are definitive. Check that the exterior color, engine and equipment match the VIN's factory decode. A price meaningfully below market with pressure to close fast completes the classic pattern.
If you suspect a clone
Do not pay a deposit. Run an NICB VINCheck for theft records, compare the VIN's VehiLeaks history and photos against the car, and ask the police or DMV to verify the hidden VIN stampings — they do this routinely. If you already bought a cloned car, report it immediately: the vehicle will be returned to its owner or insurer, and your recourse is against the seller.
Frequently asked questions
What is VIN cloning?
Copying the VIN of a legally registered vehicle onto a stolen one of the same make and model, with forged plates and paperwork. The documents validate because they describe the donor car; the buyer of the clone loses the vehicle when police trace it.
How do I check if a VIN is cloned?
Cross-check the physical car against the VIN's recorded history: photos, colors, trim, recorded locations and the mileage timeline. Mismatched door-jamb and windshield VIN plates, history photos of a differently-equipped car, or a mileage record inconsistent with the odometer are the giveaways. Add a free NICB VINCheck for theft records.
Can a cloned VIN pass a history check?
The report itself will look normal — it describes the donor vehicle. The fraud shows up in the mismatch between that history and the car in front of you: wrong color in photos, wrong equipment, mileage that does not line up, registration activity in a distant state. The cross-check, not the report alone, catches clones.
What happens if I unknowingly buy a cloned car?
The car is seized and returned to the rightful owner or insurer — you keep the loss and pursue the seller, which is why clone deals are usually cash, remote and rushed. Verifying the history and hidden VIN stampings before paying is dramatically cheaper.
Why do criminals clone VINs instead of forging new ones?
A random VIN fails checksum validation and database lookups; a cloned VIN belongs to a real, clean, registered car, so paperwork and basic checks succeed. That is exactly why physical-to-history cross-checking is the effective defense.
Our own data: 1 in 33 repeat-auction cars in the U.S. comes back with an odometer at least 10,000 miles lower.
See the full odometer-rollback study, state by state →