What a VIN tells you — and what it doesn't

A VIN is a 17-character identifier stamped on every car built for the modern market. It is genuinely informative — and the things most people hope to learn from it are not in it at all.

The useful split: the VIN encodes what the vehicle is. It does not encode what has happened to it. Those come from different places, and conflating them is how people end up buying a written-off car with a clean-looking decode.

Reading the 17 characters

Every VIN follows the same layout:

Characters 1–3 — World Manufacturer Identifier. Who built it and where. The first character is the country or region of manufacture, the next two identify the manufacturer and vehicle type.

Characters 4–8 — Vehicle Descriptor Section. The specification: model, body style, engine, restraint system, and similar. Exact meaning is manufacturer- defined, which is why a decoder that knows the manufacturer's scheme returns far more than one that doesn't.

Character 9 — check digit. A value calculated from the other sixteen characters. In North America it is mandatory, and it is what makes a VIN self-validating: change one character and the arithmetic stops working. This is how obviously invented VINs get caught.

Character 10 — model year.

Character 11 — assembly plant.

Characters 12–17 — serial number. The individual car coming off that line.

One detail that saves confusion: the letters I, O and Q never appear in a VIN, anywhere. They were excluded to prevent misreading them as 1 and 0. If you think you see one, look again — it is a one or a zero.

Decode it for free

You do not need to pay for a basic decode. NHTSA runs a free public decoder:

• NHTSA VIN decoder
• vPIC decoder — the same data, plus a free API if you're building something

It covers model years 1981 onward, which is when the 17-character standard came in. Vehicles older than that used shorter, manufacturer-specific formats and won't decode.

Expect make, model, year, body style, engine, plant of manufacture, and safety equipment. Anyone charging you for that alone is charging for a free government lookup.

While you have the VIN, run it through NHTSA's recall lookup as well. Open safety recalls are free to check and free to fix at a franchised dealer, and unrepaired recalls are common on used cars precisely because the second owner never knew.

What the VIN does not contain

This is the part worth internalising. None of the following is encoded in those 17 characters:

• Ownership. Who owns it now, who owned it before, how many owners.
• Mileage. Not in the VIN. Odometer readings live in title and inspection records.
• Accident or damage history. Not in the VIN.
• Title brands — salvage, flood, rebuilt, lemon. Not in the VIN.
• Liens or outstanding finance. Not in the VIN.
• Service history. Not in the VIN.
• Where the car currently is.

All of that lives in records keyed by the VIN — state title databases, insurance total-loss reporting, auction records, workshop records — and it has to be looked up separately. The VIN is the index, not the content.

This distinction is also where the market gets murky. A service can honestly say "decode any VIN instantly" while returning nothing but the free NHTSA data. What costs money, and what is actually worth paying for, is the history attached to that VIN.

Where to find the VIN, and why you check all of them

Three places, and you look at every one:

• the driver's side of the dashboard, visible through the windscreen
• a sticker or plate in the driver's door jamb
• the registration document, insurance paperwork, and title

They must match. A dashboard plate that doesn't match the door jamb, or paperwork that doesn't match the car, is where the conversation ends. So are plates with scratches, fresh rivets, mismatched fonts, adhesive residue, or a door sticker that looks newer than the door.

VIN cloning — putting a legitimate VIN from a similar car onto a stolen one — is the specific fraud these checks exist to catch. The clean history you paid for belongs to the other car, the real one, still being driven by its owner somewhere else. Everything decodes perfectly. That's the point of it.

A practical order for a used car

1. Get the VIN before you travel and decode it free. Confirm the make, model, year, engine, and trim match the advertisement. Mismatches here end it early and cheaply.
2. Check open recalls on the NHTSA site.
3. Run a history check for title brands, total-loss records, and reported mileage. This is the paid step, and the one that earns its cost.
4. Verify the plates in person against each other and against the paperwork.
5. Get an independent inspection by a mechanic you chose. No record check substitutes for it — a car can have a clean history and still be badly maintained, and cash repairs leave no trace anywhere.

Steps 1 to 4 tell you whether the car's identity and record are honest. Only step 5 tells you whether the car is any good.

The limits of a clean report

A clean history is the absence of reported incidents, not the absence of incidents. Damage repaired privately, without an insurance claim, generates no record anywhere. Cars are also moved between jurisdictions specifically to shed title brands, and records can lag by weeks.

So read a clean report as one good signal among several, not as clearance. The strongest position is boring and repeatable: free decode, free recall check, paid history, physical plate verification, independent inspection. Any of those alone is a gap; together they close most of what can be closed before money moves.