You type a VIN off a Marketplace listing into a free decoder and it throws back "invalid VIN." Is the seller lying, did they fat-finger it, or did you? Nine times out of ten the answer is sitting in one character: position 9, the check digit. It's a little piece of arithmetic baked into every 17-character VIN sold in North America since the 1981 model year, and once you know how it works you can catch typos and sloppy fake VINs in about a minute, before you spend a cent on a history report.
What the check digit actually is
Federal rules in 49 CFR Part 565 lay out the VIN format for vehicles sold in the US: 17 characters, no letters I, O, or Q (they look too much like 1 and 0), and a ninth character that's computed from the other sixteen. That ninth character is either a digit from 0 to 9 or the letter X, which stands in for 10. The whole point is error detection. If one character gets copied wrong, the math usually stops adding up, and decoders like NHTSA's free vPIC VIN decoder will flag it.
Here's the catch, though. The check digit proves the string is internally consistent. It does not prove the string belongs to the car in front of you. We'll come back to that, because it's the part people get burned on.
How to calculate it yourself
So, the recipe from Part 565 goes like this. First, turn every letter into a number using a fixed table: A and J are 1, B, K and S are 2, C, L and T are 3, D, M and U are 4, E, N and V are 5, F and W are 6, G, P and X are 7, H and Y are 8, R and Z are 9. Digits stay as they are. Second, multiply each position by its weight. The weights, left to right, are 8, 7, 6, 5, 4, 3, 2, 10, 0, 9, 8, 7, 6, 5, 4, 3, 2. Position 9 gets a weight of zero because it's the answer you're solving for. Third, add up all seventeen products and divide by 11. The remainder is the check digit, and a remainder of 10 is written as X.
I ran the textbook example, 1M8GDM9AXKP042788, through the math while writing this. The weighted products sum to 351, and 351 divided by 11 leaves a remainder of 10, so the check digit should be X. Look at position 9: it's X. Valid. Now change only the last character from 8 to 3. The sum drops to 341, the remainder becomes 0, and the VIN fails because position 9 still says X. That's the kind of slip the check digit was built to catch: one wrong character from a blurry photo or a seller typing from memory.
What a failed check digit usually means
Most of the time it's boring. Someone typed a 5 for an S, a B for an 8, or read the VIN off the windshield through glare. Before you accuse anyone, compare three copies: the dash plate through the windshield, the door-jamb sticker, and the title. Our guide to finding and verifying a VIN covers where each one lives and which ones are hardest to fake.
If all three physical copies match each other and still fail the math, that's a different conversation. A legit modern US-market car shouldn't do that. Honestly, one common scam pattern is a VIN invented outright: a plausible-looking string with the right length and a real manufacturer prefix but garbage in the middle. Those almost always fail position 9 because the scammer never bothered with the arithmetic. Walk away from those, or at minimum don't send a deposit.
One caveat worth saying out loud: the check digit rule is a North American thing. Gray-market imports and some vehicles built for other markets may carry VINs that don't follow it, and pre-1981 cars used manufacturer-specific serial formats with no standard at all. Hagerty's classic car VIN lookup exists precisely because older numbers don't decode with modern tools. If you're shopping a classic, our CARFAX for classic cars piece explains why the reports run thin.
What the check digit will never catch
This is the blunt part. A cloned VIN passes the check digit every single time, because the thief copied a real, valid VIN off a legally registered twin. The math is perfect. The car is stolen. That's why VIN cloning is so effective on Marketplace and Craigslist, and why the check digit is a typo filter, not a theft filter. Read how to spot VIN cloning and the Marketplace VIN cloning scam rundown before you meet anyone with cash in your pocket.
For theft, run the VIN through the NICB VINCheck tool, which is free and checks insurer theft and total-loss records. For title brands, the federal NMVTIS program lists approved data providers. Then pull a full history report and check that the report's year, make, model, engine and color match what's parked in the driveway. A clone often shows up as a history that's too clean, or one registered in a state the seller has never mentioned. We compared what the free NICB tool covers against a paid report in NICB VINCheck vs CARFAX.
A quick order of operations
- Get the VIN from the seller in writing, then confirm it on the dash plate and door jamb yourself.
- Paste it into the vPIC decoder. If it fails, recheck for I/1, O/0, S/5 and B/8 swaps before drawing conclusions.
- If it decodes, make sure the year, make and engine match the listing. A valid VIN that decodes to a different car is a red flag.
- Run NICB VINCheck for theft and total-loss flags.
- Pull CARFAX or AutoCheck and read it against the physical car, not the seller's PDF. Here's how to tell if a CARFAX PDF is real.
On cost: early October 2026, retail CARFAX singles still get quoted somewhere around $39.99 to $44.99 depending on the cart, so confirm at checkout. Through our licensed reseller checkout a guest report runs about $5.50, about $4.50 as a member, and the CARFAX plus AutoCheck bundle is around $6.75. We resell official reports and aren't affiliated with CARFAX, AutoCheck or Experian. Just make sure the VIN passes the check digit first, because paying for a report on a typo'd VIN gets you a report on a car that doesn't exist, or worse, somebody else's car. The full pre-purchase sequence is in our used car VIN check checklist, and how to decode a VIN walks through the other sixteen characters.
Comments (0)
No comments yet. Be the first to share your thoughts!
Log in to leave a comment.