Having learned VIN code of your car, fraudsters can issue a duplicate PTS, forge documents for a car, or even steal it using fake keys - such cases are recorded in Russia every year. For example, in 2023, in the Moscow region alone, 124 criminal cases were opened regarding fraud with cars, where criminals used stolen VIN data to re-register vehicles. Even if you just published a photo with the body number on social networks or reported it to the spare parts seller, this can result in problems: from intrusive spam to the complete loss of the car.

The problem is made worse by the fact that VIN (Vehicle Identification Number) contains the entire history of the car: data on accidents, mileage, traffic police restrictions and even personal information of the owner through insurance company databases. Attackers use this information for blackmail, MTPL fraud, or selling “cloned” cars. We'll tell you who exactly can request a VIN legally, and who you absolutely cannot share it with - and how to check whether your car's data has already been compromised.

Who has the right to request your car's VIN by law?

In Russia legal VIN code request can only be done by a limited number of individuals and organizations - and they are required to justify the purpose of the request and present supporting documents. According to Federal Law No. 259-FZ “On digital financial assets” (regarding the protection of personal data) and Order of the Ministry of Internal Affairs No. 605, these include:

  • 📋 Traffic police officers — when registering an accident, registering/deregistering, checking for theft. They check the VIN against the search database and registration history.
  • 🔧 Official dealers and service centers — for warranty repairs or vehicle recalls. They are required to request the owner's passport and the purchase and sale agreement.
  • 🛡️ Insurance companies — when applying for an MTPL/CASCO policy or calculating payment after an accident. But only if you yourself are a client of this company.
  • 🔍 Notaries and bailiffs - within the framework of enforcement proceedings or inheritance cases. A court order is required.

Important: even these organizations do not have the right to distribute VIN to third parties without your written consent. If you get a call from “a bank” or “insurance” asking you to give your VIN for a “data check” - these are 100% scammers. Legal structures already have access to the traffic police database and will not request information from the owner.

💡

If you receive a call asking for your VIN “to confirm your identity,” interrupt the conversation and check the phone number through services like WhoCalled or GetContact. Fraudsters often disguise themselves as employees of banks or car dealerships.

7 real threats if you gave your VIN to a stranger

Disclosing the VIN code to strangers is fraught with consequences - from minor spam to criminal cases. Let's look at specific fraud schemes that will be used in 2026:

Threat How it works Consequences for the owner
🚗 Car cloning Fraudsters make duplicate license plates and fake documents based on the VIN. The car is sold several times or used for crimes. You may be charged with complicity if the clone gets into an accident or theft. You will have to prove your innocence through court.
💸 Insurance fraud Criminals take out a CASCO policy on your VIN, then stage a theft or accident and receive a payment. The insurance company may file a recourse claim for the amount of the payment (up to 3 million rubles).
📄 Fake PTS Using the VIN, a duplicate title is made, and then the car is re-registered to a fictitious person or sold in another region. You lose ownership. You can only return a car through the court if it has not gone abroad.
🔑 Making a duplicate key Using the VIN, you can order a blank key from locksmiths (for example, through Aliexpress), and then reprogram it using diagnostic equipment. Car theft without burglary. The insurance company may refuse to pay if it proves that the key was copied legally.
📊 Spam and intrusive advertising The VIN is sold to collectors, auto dismantlers and parts dealers. They will call you with offers to “buy a used car” or “sell a car at a high price.” Constant calls, SMS mailings, risk of ending up in scam databases.

It is especially dangerous to disclose the VIN when selling a car on sites like Avito or Drom. Fraudsters can use it to “check history” (in reality, to copy data) and then cancel the transaction. In 2023 only Avito More than 5 thousand cases of car fraud were recorded, where attackers used VIN to prepare scams.

📊Have you ever shared your VIN with strangers?
Yes, when selling a car
Yes, to check the history
No, never
I don't remember

When is it safe to show the VIN (3 exceptions)

There are situations when disclosing the VIN code is justified and does not carry risks. Main rule: transfer data only through personal contact and after checking the documentation. Here are the safe cases:

  • 🔄 Selling a car - but only after signing the preliminary purchase and sale agreement (PSA) and checking the buyer’s passport. VIN is needed for verification with the title.
  • 🔧 Repair by a trusted service — if you personally know the masters or the service has an official status (for example, Bosch Car Service). Request an acceptance certificate indicating the purposes for using the VIN.
  • 🛂 Customs clearance — when importing/exporting cars abroad. The VIN is indicated in the declaration, but is transmitted only to customs authorities.

Even in these cases, precautions should be taken:

Cover up the first 3 characters of the VIN in the photo (they contain information about the manufacturer, but are not unique)

Report VIN only after checking the recipient's passport

Use temporary messengers (for example, Telegram with self-destruct timer)

Request a written justification for the purpose of the request-->

If you need to check a car's history (for example, before purchasing), use services like Autocode or VIN.History, where the VIN is entered directly into the system - without transfer to third parties.

How to check if your VIN is compromised

If you have already shared your VIN with others or suspect a data breach, follow these 5 diagnostic steps:

  1. Check request history by VIN through the service traffic police. If there are unauthorized checks, this is a sign of fraud.
  2. Order an extract from the register of pledges on the website FNP. Fraudsters can take out a loan secured by your car.
  3. Make sure the car is not wanted through the database traffic police. Cloned cars often end up on stolen lists.
  4. Check active MTPL policies on the website RSA. If you find an unfamiliar policy, contact your insurance company immediately.
  5. Track changes in PTS through Public services. Any re-registrations must be displayed in your personal account.

If you detect suspicious activity, immediately:

⚠️ Attention: File a police report by official portal of the Ministry of Internal Affairs with a requirement to check the car for involvement in fraudulent schemes. Indicate the date and circumstances of the VIN disclosure. Attach screenshots of correspondence (if any).

What to do if the VIN has already fallen into the hands of scammers

If you realize that your car’s VIN has been compromised, follow the algorithm:

  1. Block access to data:
    • Call your insurance company and ask to temporarily suspend access to your VIN policy.
    • Withdraw all active advertisements for car sales (if there were any).
  2. Submit an application to the traffic police about possible fraud. In your application please indicate: 
    Please check the car [make, model, VIN] for involvement in fraudulent schemes.

    Data may have been compromised on [date, circumstances].
    

    Please introduce a temporary restriction on registration actions.
  3. Install additional protection:
    • Buy engine blocker (for example, StarLine M31 or Pandora DXL 3500).
    • Activate the service "Anti-theft" from your telecom operator (for example, MTS or Beeline).
  • Monitor your databases once a month through services Autocode or VIN.History.

    • If the car has already been stolen or re-registered, contact the police to report fraud (Article 159.3 of the Criminal Code of the Russian Federation). Attach evidence: screenshots of correspondence, receipts for purchasing the blocker, extracts from registers. In 70% of cases, the car can be returned if the owner reacts promptly.

    Example of a police report about VIN compromise

    To the Head of the Department of Internal Affairs of Russia for [your area]

    from [full name], residing at: [address]

    STATEMENT

    [Date] I disclosed the VIN code of the car [make, model, license plate number] to the person who introduced himself as [full name/position].

    Currently, I suspect that the data could be used for fraudulent purposes, as [describe the signs: spam, traffic police checks, etc.].

    I ask you to check the car for involvement in criminal schemes and introduce a temporary restriction on registration actions.

    [Date] [Signature]

    How to protect VIN from leakage: 5 practical tips

    To minimize risks, follow simple rules:

    • 📸 Do not take photographs of documents with VIN (PTS, STS) and do not post photos on the Internet. If you need to confirm ownership, cover up the VIN in a graphic editor.
    • 🔐 Use alternate identifiers. For example, when selling, first provide only the license plate number - checking it is enough for primary interest.
    • 🛡️ Install VPN and antivirus to the phone. Fraudsters can intercept VIN through malicious links in instant messengers.
    • 📋 Keep a log of VIN requests. Record who and when you provided the data - this will help track the source of the leak.
    • 🚨 Connect SMS notifications from the traffic police and insurance about any actions with the car (via Public services).

    If you need to check a car's history by VIN, use one-time services:

    Service Cost What does it check?
    Autocode From 349 ₽ Accident, mileage, deposit, traffic police restrictions
    VIN.History From 299 ₽ Ownership history, customs history, repairs
    CarVertical From 499 ₽ Data from 20+ countries, including theft and odometer fraud

    Never enter your VIN on questionable sites, especially if they offer a “free check.” Such services often collect data to sell to scammers.

    Myths about VIN: what you shouldn’t be afraid of

    There are many rumors around the VIN code that have no basis. Let's figure out what you shouldn't be afraid of:

    • 🔍 "You can find out my home address by VIN" - no, there is no address in the VIN itself. But scammers can get it through the traffic police database if they have access to internal systems (which is unlikely for ordinary scammers).
    • 🚗 “If I tell you the VIN, the car will be stolen immediately.” — theft based on one VIN is unlikely. Fraudsters need additional data (for example, access to keys or documents).
    • 💳 "VIN is needed to pay fines" — no, fines are tied to the license plate number and owner data. VIN is not used for this.

    However, this does not mean that the VIN can be disclosed without fear. Even if there is no direct threat, the data can be used to prepare more complex scams (for example, social engineering).

    💡

    The main rule: VIN is like the password to your car. You don’t tell your bank card password to the first person you meet, do you? The same goes for VIN.

    FAQ: Frequently asked questions about VIN security

    ❓ Is it possible to report VIN when purchasing spare parts?

    No, to select spare parts you just need to indicate the make, model and year of manufacture. If the seller insists on the VIN, this is a reason to be wary - perhaps he wants to copy the data for fraud. Exception: official dealers, but they must request a VIN only during a personal visit.

    ❓ What to do if the VIN has already been published on the Internet?

    Immediately delete the publication and request the removal of data from the site administration (for example, through the feedback form on Avito or Drom). Then check the car against the traffic police and RSA databases for suspicious activity. If you find unauthorized actions, file a police report.

    ❓ Can an insurance company refuse to pay if the VIN has been compromised?

    Yes, if it is proven that the theft or damage to the car occurred due to your negligence (for example, you gave the VIN to scammers who then copied the keys). Insurance companies often use this argument to reduce payouts. To avoid problems, install additional security measures (interlock, alarm) and keep evidence of their purchase.

    ❓ How do scammers use VIN for blackmail?

    Attackers can use the VIN to find information about accidents, fines or restrictions on a car, and then blackmail the owner, threatening to disclose the data to the employer or relatives. This happens especially often if the car has been in a serious accident or has unpaid fines. To avoid this, regularly check your car history and pay fines on time.

    ❓ Is it possible to cover up the VIN on a car so that it won’t be seen?

    No, this is a violation Traffic regulations (clause 2.3.1) and will entail a fine of 500 ₽. The VIN must be legible for inspection by traffic police officers. Instead, use physical means of protection: park in protected areas, install an alarm with engine immobilization.

    If you have any doubts about the security of your VIN, please contact Rosavtodor or contact a car lawyer. Remember: it’s better to be safe than to lose your car because of one careless phrase.