VIN Lookup: What You Can Find by VIN, and What the Law Keeps Private

By Rafael de Medeiros Nobre· Head of Product Engineering at Caraxle·
· 4 min read

A VIN lookup can tell you what the car is, which safety recalls are still unrepaired on that exact vehicle, whether insurers reported it stolen or totaled, and, in a paid report, its title brands and odometer readings. It cannot tell you who owns it: federal privacy law bars state motor vehicle agencies from releasing the owner's name and address except for a short list of permitted uses. Color and options are not in the VIN either.

Traffic on a multi-lane highway at sunset, seen from an overpass

"VIN lookup" sounds like one search. It is really five, each run by a different organization against the same seventeen characters, with different prices and different rules about what they will hand you. Knowing which is which saves money, and it also explains why the one thing many people want, the owner's name, is the one thing no legitimate lookup gives a private buyer.

Which lookups can you run on a VIN?

What you want to knowWhere the answer livesCost
What the car is: model, trim, engine, safety equipmentFederal VIN decoder [1]Free
Safety recalls still unrepaired on this exact carManufacturer or NHTSA recall search [2]Free
Reported stolen or totaled by an insurerInsurance industry theft lookupFree
Title, brands, odometer, total loss and salvage historyFederal title record via an approved provider [6]Paid
Who owns it, and where they liveState motor vehicle records, closed by federal law [3]Not available

The first three take a few minutes and cost nothing, and our free VIN check guide walks through each one. The rest of this page covers what each lookup really returns, starting with the one people underestimate.

How much does a free decode tell you?

More than a model name. In a Caraxle test, we decoded the example VIN NHTSA uses in its own API documentation, a partial VIN for a 2011 BMW X3. The decoder returned 154 fields, 31 of them filled [1]. Leave out the bookkeeping fields, like error codes and internal IDs, and 24 describe the car:

What the free decode returned for the example VIN

  • Make, model, model year and trim (xDrive35i)
  • Body class and number of doors
  • Engine: six cylinders, three liters, 300 horsepower, gasoline
  • Drive type (all wheel drive) and gross vehicle weight class
  • Front and side airbag locations, belt pretensioners, other restraints
  • Tire pressure monitoring type

That is enough to catch most listing errors, such as the wrong trim, the wrong engine or a "4x4" that is not one. You can run the same decode on our VIN decoder, and our vehicle specifications page explains each field.

What the decode cannot give you is anything the VIN does not encode. For a passenger car, the regulation lists make, line, series, body type, engine type and restraint devices [5]. Paint color and factory options are not on that list, so no decoder can tell you whether the car left the factory in the color it is wearing now.

Can you look up recalls on your exact VIN?

Yes, and this is the most useful free lookup there is. Federal rules require every manufacturer selling 25,000 or more light vehicles a year to run a public recall search by VIN [2], and the rules are specific:

  • free, with no registration and no sales messages on the search or results page;
  • unrepaired safety recalls shown first, with the NHTSA campaign number, the defect and the remedy;
  • updated at least every seven days, with the date of the last update on the page;
  • covering at least fifteen years of recall campaigns.

The same data goes to NHTSA for display on its own sites [2], so you can search there instead of the manufacturer's page. A make and model search tells you which recalls exist for the model; the VIN search tells you whether this car still needs the repair. Our recalls page covers how to read the result.

Can you find the owner of a car by VIN?

Not as a private buyer, and that is by design. The Driver's Privacy Protection Act bars state motor vehicle departments from knowingly disclosing personal information from vehicle records [3], and personal information means the things you would want: the name, address and telephone number, along with photographs and identification numbers [4].

The law lists fourteen permitted uses [3]. They include government agencies and law enforcement, vehicle safety and recall notices, court proceedings, insurers handling claims, licensed private investigators working within those uses, and anyone with the owner's written consent. Curiosity about who had the car before you is not on the list.

If you need to know about previous ownership for a legitimate reason, the route is the seller's paperwork and, where your state allows it, a formal records request that states your purpose.

What will no VIN lookup tell you?

Condition. Repair and maintenance histories are explicitly outside the federal title record [6], and no decode or recall search covers them. Some private reports add service entries from partner shops, which helps, but the absence of an entry proves nothing. Our guide to reading a vehicle history report explains what each line can and cannot prove, and the VIN check guide covers making sure the VIN belongs to the car before you look anything up.

The short version

Decode it, run the recall search on the full VIN, and use the free theft lookup: three free answers about what the car is and whether it is safe. Pay for the title record on the car you are serious about. And treat any promise of the owner's name with suspicion, because federal law keeps it out of reach for almost everyone.

Frequently asked questions

Can I find the owner of a car by VIN?
Not as a private buyer, in most cases. Federal law stops state motor vehicle agencies from releasing the owner's name, address or phone number except for listed uses such as law enforcement, insurers, legal proceedings and licensed investigators, or with the owner's written consent.
Is a VIN lookup free?
Three of the five lookups are: the federal decoder, the recall search on the manufacturer's or NHTSA's site, and the insurance industry's theft and total loss check. The title record with brands and odometer readings comes from approved providers and costs money.
Can a VIN lookup tell me what color the car was?
No. Color is not one of the characteristics the VIN has to encode. The decode tells you the make, model, body, engine and safety equipment; for the original color you need the manufacturer's records or the paperwork that came with the car.
How do I check recalls on my exact car?
Use the recall search on the manufacturer's website or NHTSA's, and enter the full VIN. Large manufacturers must keep that search free, updated at least weekly, and covering at least fifteen years of campaigns, with unrepaired safety recalls listed first.
What is the difference between a VIN lookup and a VIN decoder?
A decoder reads what the seventeen characters themselves describe: make, model, year, body and engine. A lookup uses the VIN as a key to search records about the car, such as recalls, theft reports and the title history.

References

  1. [1]NHTSA vPIC · 2026-10-16Decoding NHTSA's own documentation example VIN, 5UXWX7C5*BA with model year 2011, returns 154 fields, 31 of them populated, including trim, engine, drive type, weight class, airbag locations and tire pressure monitoringhttps://vpic.nhtsa.dot.gov/api/vehicles/DecodeVinValues/5UXWX7C5*BA?format=json&modelyear=2011
  2. [2]49 CFR 573.15 (NHTSA) · 2026-10Manufacturers of 25,000 or more light vehicles a year must offer a free online recall search by VIN with no registration or marketing, list unrepaired safety recalls first, update it at least every 7 days, cover at least 15 years of campaigns, give the NHTSA campaign number, defect and remedy, and send the data to NHTSA for its own siteshttps://www.ecfr.gov/current/title-49/subtitle-B/chapter-V/part-573/section-573.15
  3. [3]18 U.S.C. 2721, Driver's Privacy Protection Act · 2024-01State motor vehicle departments may not knowingly disclose personal information from motor vehicle records except for the permissible uses listed in the law, fourteen in all, including government agencies, vehicle safety and recalls, legal proceedings, insurers, licensed private investigators and requesters with the individual's written consent; an authorized recipient may resell or redisclose the information only for a permitted usehttps://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap123-sec2721.htm
  4. [4]18 U.S.C. 2725, Driver's Privacy Protection Act · 2024-01Personal information means information that identifies an individual, including name, address, telephone number, photograph, social security number and driver identification numberhttps://www.govinfo.gov/content/pkg/USCODE-2023-title18/html/USCODE-2023-title18-partI-chap123-sec2725.htm
  5. [5]49 CFR 565.15 (NHTSA) · 2026-10For a passenger car, the VIN's descriptor section encodes make, line, series, body type, engine type and restraint devices; color is not among the required characteristicshttps://www.ecfr.gov/current/title-49/subtitle-B/chapter-V/part-565/subpart-B/section-565.15
  6. [6]NMVTIS, Bureau of Justice Assistance · 2026-10An NMVTIS report covers title, brand history, odometer reading, total loss and salvage history; repair histories and maintenance data are not intended to be in ithttps://vehiclehistory.bja.ojp.gov/nmvtis_understandingvhr

Keep reading

See all→