How to check if a used car is stolen, has a lien or a cloned VIN (Canada)

None of these is a guarantee on its own. A theft can be reported late, and a cloned VIN belongs to a real, clean car, so it passes the stolen check. That is why the checks work as a set, along with matching the VIN on the car itself.

Why it matters now

CARFAX Canada’s 2025 Year in Rear View, covering checks run between September 2024 and October 2025, found money owing in 40% of its lien checks and more than 372,000 vehicles in Canada with potentially cloned VINs. Équité Association, the insurers’ investigation body, reports that auto theft costs Canadian insurers over $1 billion a year and that stolen vehicles are increasingly re-VINed for sale. The Toyota RAV4 topped its most-stolen list, stolen over 2,000 times in 2024.

Some of those cars end up on Facebook Marketplace and Kijiji, sold to people who did not know to check. If you buy a stolen car, police can seize it and you are usually out the money. If you buy a car with a lien, the lender can repossess it from you.

Where the VIN is and how to read it

The VIN is 17 characters, letters and numbers, and never uses I, O or Q (they look like 1 and 0). Find it in at least three places:

• On the dashboard, driver’s side, visible through the windshield.
• On the compliance label on the driver’s door jamb.
• On the ownership (registration) and the insurance slip.

It is also stamped on the body or frame in places that vary by model. A few positions are worth knowing:

• First character: where the car was built (1, 4 or 5 for the US, 2 for Canada, 3 for Mexico, J for Japan, K for Korea, W for Germany).
• Tenth character: the model year.
• Last six: the car’s serial number.

Decode it with NHTSA’s free vPIC decoder before you go. If the ad says 2019 Honda CR-V and the VIN decodes to a 2016 Civic, you are done.

Running the checks, step by step

1. Ask for the VIN in your first message. A real seller sends it. A seller who won’t, or sends a photo of a VIN that is blurred, is answering a different question.
2. Decode it with vPIC and compare the year, make, model and engine with the ad.
3. Search it. Paste the VIN into Google, and the title into the other site. Stolen cars and scam listings often reuse photos and text from a real ad.
4. Run CPIC’s stolen check. Free, VIN only. A positive result means you contact local police to confirm; do not warn the seller.
5. If the car came from the US, run NICB’s VINCheck as well. It covers theft and salvage records from participating US insurers.
6. Order a history report. Read the registration history (which provinces and states, how many owners, how recently) and the odometer readings, which should only ever go up.
7. Run the lien search for the province the car is registered in. Liens follow the car, not the owner.
8. Check recalls in Transport Canada’s database.
9. At the viewing, match everything. The VIN on the dash, door jamb and ownership, and the name on the ownership with the seller’s photo ID.
10. On the day you pay, check liens again if more than a few days have passed.

Liens: why they matter

A lien is a registered claim on the car, usually from the bank or finance company that lent the owner money to buy it. If it is not paid off, the lender can take the car back, even from you.

If a lien shows up, the deal isn’t necessarily dead. The seller pays the lender out, and the lender confirms in writing that the lien is discharged. The safest way is to do the deal at the seller’s bank: your money goes to the lender first, the rest to the seller, and you leave with the discharge letter. A bill of sale that says “free of all liens” helps, but it doesn’t remove a lien.

Cloned and re-VINed cars

A cloned VIN is a real VIN copied from a legitimate car onto a stolen one of the same model and colour. The stolen check comes back clean, because the VIN it shows belongs to a car that was never stolen. Équité Association describes the other version, a fictitious VIN that was never manufactured.

Signs to look for:

• The VIN plate. Scratches, glue, non-factory rivets, or a plate that sits unevenly on the dash.
• Labels that don’t agree. A door jamb label missing, newer than the car, or with a different VIN.
• The registration. Ownership issued days ago, or recently moved from another province. A history report showing the car registered somewhere else at the same time.
• Keys. Only one key, a key that looks new or aftermarket, or a key fob that doesn’t match the model.
• The price and the pace. Well under the market, cash preferred, and pressure to finish today.
• The meeting place. A parking lot rather than the address on the ownership.

If several of these line up, walk away and report the listing. Équité takes anonymous tips through Crime Stoppers at 1-800-222-8477.

Is it safe to give out a VIN?

For a seller, generally yes. The VIN is visible through the windshield of every parked car, and buyers need it for a history report. The real risk is a scam aimed at sellers: a “buyer” asks for the VIN, then insists you buy a history report from a site they name. The site is theirs, the report is fake and the buyer disappears. Real buyers run their own report.

For a buyer, a seller who won’t share the VIN before a viewing is the problem. It costs them nothing to send.

If a check comes back stolen or with a lien

• Stolen: stop. Don’t confront the seller or tell them why you are backing out. Contact your local police with the VIN, the listing link and the seller’s messages.
• Lien: ask the seller to pay it out before the transfer, and only proceed with the discharge in writing.
• Already bought? Contact police for a stolen car, keep every message, the listing and your payment record, and report the fraud to the Canadian Anti-Fraud Centre.

Fake “pay to hold” car listings

Some car listings are not stolen cars but no car at all. The photos are copied from a real ad, the price is low, and the “seller” asks for a deposit by e-transfer to hold it, often because they are away and a friend or a shipping company will deliver it. Kijiji lists exactly these tactics: sellers who “advertise vehicles they do not own”, ask for deposits before inspections and use fake escrow or shipping companies. Never send money for a car you haven’t seen. More in the deposit scam.

Google Lens on the listing photo often finds the original ad, sometimes in another city with a different price.

With Sift

The checks on this page happen outside the listing. Sift, a free browser extension for Facebook Marketplace and Kijiji, helps with the part before them: deciding which cars are worth asking for a VIN.

• “Check this” flags on listings that ask for a deposit or e-transfer first, or that move you off the platform (WhatsApp, Telegram, “text me at”, a phone number or email in the ad), and on sellers who say they are away or out of the country.
• Check elsewhere: Google Lens on the listing photo and the same search on the other site, one click each, to find copied photos and the same car listed twice.
• Reposted badge when the same car is relisted to look fresh, with the date and price Sift first saw it.
• Dealer tag and branded-title filter (salvage, rebuilt, flood, as-is, for parts), set up in one click with Start a hunt › Car.

Sift does not decode or check VINs, pull Carfax reports, search liens, check stolen-vehicle databases, verify odometers or prove whether a seller is a curbsider. It reads what the seller wrote and puts the right links in front of you. It runs in Chrome, Edge and Brave on a computer.