Where to Find the VIN on a Car (and Why All of Them Have to Match)

You're standing next to a used car with a seller who keeps saying "the VIN's on the title, just use that." Don't. The number on the paperwork is only useful if it matches the numbers bolted, riveted and stamped onto the car itself, and there are more of those than most people realize. Knowing where to find the VIN on a car, and which spots are hard to fake, is the cheapest anti-scam step you'll ever take. It costs nothing and takes about five minutes with a phone flashlight.

Spot one: the dashboard plate under the windshield

This is the one everybody knows, and there's a reason it's always in the same place. Federal rules in 49 CFR Part 565 say that on passenger cars, SUVs, low-speed vehicles and trucks up to 4,536 kg (about 10,000 lb) GVWR, the VIN has to sit inside the passenger compartment and be readable through the glass, in daylight, by someone standing outside next to the left windshield pillar. Each character has to be at least 4 mm tall. So walk to the driver's side, look down through the lower corner of the windshield, and you should see a small metal plate with 17 characters.

I read the actual regulation text while putting this together, and one detail is worth remembering: the same rule says the VIN has to be on a part that isn't designed to be removed except for repair, or on a plate permanently attached to such a part. A dash plate that's loose, sitting at an angle, held by mismatched rivets, or surrounded by scratches is a reason to slow down. The letters I, O and Q are also never used in a VIN, so if you think you see one, you're either misreading a 1, 0 or 9, or looking at something that isn't a real VIN.

Spot two: the door jamb certification label

Open the driver's door. On the B-pillar (the door-latch post), the hinge pillar, or the edge of the door itself, there should be a sticker or plate called the certification label. 49 CFR Part 567 requires it to be riveted or permanently affixed so it can't be peeled off without destroying or defacing it, and it has to show the manufacturer, the month and year the car was built, the gross vehicle weight rating, and the VIN.

Here's the catch with this one. Doors get replaced after accidents, and a replacement door from a salvage yard may carry a label from a totally different car, or none at all. That's not automatically fraud, but it is a signal that the car had door or side damage worth asking about. A missing jamb label on a car that's supposedly "never been hit" deserves a follow-up question, and a history report showing side damage would explain it. A label that's been cut out with a razor is a different story.

Spot three and beyond: under the hood, the frame, and the parts

Edmunds' VIN guide points out that the VIN is often stamped on the driver's side of the firewall, and on many Asian and German cars near a strut tower. Kelley Blue Book's VIN explainer adds the front of the frame on the driver's side for some trucks and SUVs, a sticker in the trunk or liftgate jamb on some brands, and the engine block on older models.

Then there's the part most shoppers have never heard of. The federal theft-prevention standard, 49 CFR Part 541, requires covered vehicle lines to carry the VIN on up to 18 major parts if they're present: engine, transmission, both front fenders, hood, every door, both bumpers, the rear quarter panels, the pickup box on light trucks, and the decklid, tailgate or hatch. Not every car is covered, and some lines get exemptions for factory anti-theft systems, so a missing parts label alone doesn't prove anything. But when several body panels carry one VIN and the dash plate carries another, you're looking at either a heavily rebuilt car or a stolen one wearing someone else's identity.

Why matching matters more than finding

VIN cloning works because buyers check one number. A thief copies a legit VIN from a similar car, prints a fake dash plate, and the paperwork and the online report both look clean because they belong to the real car somewhere else. We've written about how this plays out on Marketplace VIN cloning scams and how to spot a cloned VIN, and the fix is always the same: compare the dash plate, the door label, at least one hidden location, the title, and the registration. All five should match character for character.

Messing with those numbers isn't a gray area, either. Under 18 U.S.C. § 511, knowingly removing, obliterating, tampering with or altering a motor vehicle identification number is a federal crime that carries up to five years in prison. If a seller shrugs off a ground-down stamp or a replaced dash plate, walk away. You don't want to be the person holding the car when a state inspector notices.

A quick checklist before you hand over money

• Read the dash plate through the windshield and photograph it.
• Open the driver's door and photograph the certification label, including the build month and year.
• Pop the hood and look for a firewall or strut tower stamp, or a parts label on the hood or fenders.
• Compare all of them to the title and registration, and check that the build date makes sense for the model year.
• Type the VIN into NHTSA's free vPIC decoder and confirm the make, model, engine and body style match the car in front of you. Our guide to decoding a VIN and the one on the VIN check digit explain what each position means.
• Run the free NICB VINCheck, which looks for insurer-reported theft, salvage and flood records from participating insurers, limited to five searches per IP address a day.
• Check for open recalls on NHTSA's recall lookup.

Where a paid report fits in

None of those free tools tells you about past accidents, odometer readings over time, ownership changes or service visits. That's what a CARFAX or AutoCheck history report is for. AutoCheck's VIN basics page and CARFAX Canada's VIN explainer both make the same point: the VIN is the key that unlocks the history. As of early October 2026, CARFAX's own retail price for a single report is still usually quoted somewhere between $39.99 and $44.99 depending on where you look, so confirm at checkout. As a licensed reseller (not affiliated with CARFAX, AutoCheck or Experian), we sell the same reports for around $5.50 as a guest or about $4.50 for members.

Honestly, the order matters. Do the physical VIN match first, because a perfect report on a cloned VIN is a perfect report on the wrong car. If you're meeting a private seller, our posts on running a VIN check before the test drive and checking a Marketplace car before you meet walk through the timing.

Sources

• eCFR: 49 CFR Part 565, VIN requirements
• eCFR: 49 CFR Part 567, certification labels
• eCFR: 49 CFR Part 541, theft-prevention parts marking
• Cornell LII: 18 U.S.C. § 511, altering or removing VINs
• NICB VINCheck
• NHTSA vPIC VIN decoder
• Edmunds: where to find and decode your VIN
• Kelley Blue Book: VIN decoder guide
• AutoCheck: VIN basics