| Guide | GDE-096 |
| Topic | Vehicle identification numbers |
| Domain | Identity |
| Last tested | 29 October 2026 |
Short answer: To run a VIN check, copy all 17 characters, compute the check digit in position 9, decode the number with the free NHTSA VIN Decoder and compare it with the vehicle. A clean decode describes a vehicle type, not that car's history.
What is a VIN check?
A VIN check is a test of a vehicle identification number (VIN), the 17-character code assigned to a road vehicle, to confirm that the number is well formed, decode the maker, model year and plant it encodes, and search the free records held against it.
For an investigator, the VIN is the identifier that stays with the vehicle when plates move. US rules put it on a plate readable through the windscreen beside the left pillar and on the certification label at a door pillar or door edge; it also appears on titles, insurance papers and listings.
Under 49 CFR 565, positions 1 to 3 identify the manufacturer, 4 to 8 describe the vehicle, 9 is a check digit, 10 is the model year, 11 the plant and 12 to 17 the serial number. The letters I, O and Q are never used.
| • | Checking that a vehicle in a photo, listing or document matches the VIN it shows |
| • | Spotting a mistyped, altered or invented VIN before it enters a report |
| • | Confirming the maker, model year and build plant independently of a seller |
| • | Finding open safety recalls and insurer theft or salvage reports for a US vehicle |
How do you run a VIN check?
Four US sources, three of them free, and six steps take you from a VIN in an image to a dated, recorded verdict.
Three are run by US government agencies and one by the National Insurance Crime Bureau; none needs an account. Status as of 29 October 2026.
NHTSA VIN Decoder: The NHTSA VIN Decoder, from the US National Highway Traffic Safety Administration, decodes the make, model, model year, body class and plant encoded in a VIN and says whether the check digit calculates. Free, no login, accepts partial VINs. Working (version 4.10, updated 17 October 2026).
NHTSA recall search: The NHTSA recall search lists safety recalls by year, make and model, and checks a full VIN or plate for unrepaired recalls. Free, no login, protected by reCAPTCHA. Working. VIN results leave out repaired recalls and recalls more than 15 years old.
NICB VINCheck: NICB VINCheck, from the US National Insurance Crime Bureau, shows whether participating insurers have reported a vehicle stolen and not recovered, or as salvage or flood-damaged. Free, no login, five searches per IP address in 24 hours; each search requires accepting its terms. It does not query police records.
NMVTIS: The National Motor Vehicle Title Information System (NMVTIS), a US Department of Justice system, holds vehicle title history to stop stolen and unsafe vehicles being resold. Its reports are sold through approved data providers listed on the site.
What we tested: On 29 October 2026 we ran a widely published sample VIN, three altered copies and a VIN label from a public-domain 2008 Wikimedia Commons photo through the NHTSA VIN Decoder and our own code, then searched NHTSA recalls for the decoded vehicle. All inputs were public or generated. The photo label failed its check digit; NICB VINCheck, the VIN-level recall search and NMVTIS were not tested.
The sample VIN 1M8GDM9AXKP042788 decoded clean as a 1989 Motor Coach Industries bus built in Pembina, North Dakota. All three altered copies were flagged. | ||
Both returned X for the sample (weighted sum 351) and 4 for the photo label, which prints 0. | ||
We read all 17 characters, but they fail the check digit; NHTSA still decoded a 2003 Dodge Caravan or Grand Caravan built in Fenton, Missouri. | ||
The 2003 Dodge Caravan returned nine campaigns: three vehicle and six equipment recalls. | ||
1M8, 1D4, WVW and SAJ returned Motor Coach Industries, FCA US, Volkswagen AG and Jaguar Land Rover. | ||
No valid public VIN for a recent vehicle was available. | ||
Each search requires accepting its terms first. | ||
Sold through approved data providers. |
This is a one-day snapshot of five VINs and four manufacturer codes, not a benchmark; decoder data and recall lists change.
The Check-Digit Rule: Compute position 9 before you trust any decode. A VIN that fails it has been misread, altered or was not built to the US standard, even when the decoder returns a plausible vehicle.