Before You Start
Three non-negotiable checks before any used-car purchase in India: (1) Read the VIN yourself at all three stamping locations — engine block, chassis rail and dashboard VIN plate. Do not accept the seller's claim or a photo. (2) Match the VIN against the RC front and back, the insurance policy, the PUC certificate and the VAHAN portal record. All five must show the same 17-character VIN. (3) Inspect the stamping itself — a cloned VIN usually has visible tamper signs: welded seams around the plate, font mismatches, uneven punch depth, wrong year-code character. If any one of the three stamps disagrees with the others or with the RC, walk away.
1. The Three VIN Stamping Locations on Every Indian Car
Rule 122 of the Central Motor Vehicles Rules 1989 requires the VIN (Vehicle Identification Number) to be stamped at a minimum of three locations on every motor vehicle sold in India. The exact positions vary slightly by manufacturer but the three canonical stamping sites are:
Location 1 — Engine block. A 17-character VIN (or manufacturer-specific engine number) is die-stamped into the engine block itself, typically on a machined flat surface near the cylinder head or block-to-transmission bellhousing. On most petrol Marutis the stamp is near the top of the block; on most Hyundai and Kia engines it is near the bellhousing; on Mahindra diesels it is on the lower left of the block. Every service manual shows the location.
Location 2 — Chassis rail or floor pan. The chassis VIN is die-stamped into a structural member — on body-on-frame SUVs (Scorpio, Fortuner, Thar) on the frame rail; on unibody cars (Swift, Baleno, City, i20, Creta) on a structural floor section visible when the front seat is slid forward or when a small flap is lifted. Factory-fresh cars have a cleanly stamped area with no welded seams, uniform punch depth and a consistent typeface.
Location 3 — Dashboard VIN plate. A metal or plastic plate bearing the VIN, visible from outside through the windscreen at the driver-side corner of the dashboard. This is the plate law enforcement reads at traffic stops. The plate is usually riveted or heat-welded to the dashboard structure.
Some cars add a fourth location — a sticker on the driver-side door jamb or B-pillar carrying the VIN, tyre pressures, manufacture date and paint code. This sticker is an easy cross-reference but can be replaced cheaply, so it is not by itself definitive.
Manufacturer documentation: Every authorised Indian manufacturer publishes the exact VIN stamping locations for each model in the owner's manual and on the workshop service software. If the seller cannot point to all three locations on request, you have one data point already.
2. The 17-Character VIN Format — What Each Digit Means
The Indian VIN follows the international ISO 3779 standard — 17 characters, alphanumeric, excluding the letters I, O and Q (which are excluded to avoid confusion with digits 1 and 0).
The 17 characters split as: positions 1-3 are the World Manufacturer Identifier (WMI) — for India these usually start with 'MA', 'MB' or 'MC'; positions 4-8 are the Vehicle Descriptor Section (model, body type, engine, transmission); position 9 is a check digit used by some manufacturers; position 10 is the model year code; position 11 is the plant code; positions 12-17 are the serial number.
The model-year code at position 10 is the single fastest sanity check. The codes follow a 30-year cycle: 'M' is 2021, 'N' is 2022, 'P' is 2023, 'R' is 2024, 'S' is 2025, 'T' is 2026. Note that letters I, O, Q, U, Z are skipped (and 0 is not used). If a seller claims a 2024 car, position 10 of the VIN must be 'R'. If it is anything else, either the VIN is forged or the year claim is wrong.
| Model year | VIN position 10 character |
|---|---|
| 2018 | J |
| 2019 | K |
| 2020 | L |
| 2021 | M |
| 2022 | N |
| 2023 | P |
| 2024 | R |
| 2025 | S |
| 2026 | T |
A 17-character VIN with any of the excluded letters (I, O, Q) is invalid and a sign of an unskilled clone. Use this one-second check every time.
3. Red Flag 1 — Welded Seam or Repair Around the Chassis VIN
The original chassis-rail VIN is die-stamped into the raw metal before painting. A cloned VIN requires cutting out the original stamp and either welding in a new piece of metal or grinding and re-stamping on the same surface. Both techniques leave physical evidence.
What to look for. Run a finger along the area around the stamped VIN. A welded seam feels like a ridge or a thinned valley — the metal thickness around the stamp is different from the surrounding chassis. In daylight with a torch held at a shallow angle, the paint reveals an outline where the weld was ground smooth. The paint itself is often slightly newer (less weathered) around the stamped area than it is a foot away.
A ground-and-restamped area shows a different pattern. The original stamp leaves a slight crater pattern in the metal; grinding it off removes this crater but leaves a slightly lower plane of metal around the new stamp. The depth of the new punch is also often shallower than the original because the grinder removed material and the new punch had less metal to displace.
The correct response. If the area around the chassis VIN shows any sign of repair, grinding, welding, painting mismatch or different metal thickness, stop the inspection. Do not proceed to any other check and do not pay any money. Inform the seller that you will need an RTO-supervised verification — a request the fraudster will not honour.
For the full pre-purchase inspection workflow that surfaces this and other structural signs, see our no-mechanic used-car inspection guide.
4. Red Flag 2 — Font, Punch Depth and Character Spacing
Factory VIN stamping uses a programmable punch press that strikes each character at the same force, from the same angle, with the same depth. The result is a stamp where every character has identical depth, identical font, identical vertical alignment and consistent horizontal spacing.
Forged VIN stamping — even at a professional-looking shop — almost always uses a manual hammer-and-punch set. The result is subtle variations: one character slightly deeper than the rest; a slight vertical wobble between adjacent characters; occasional double-strike marks where the punch bounced; inconsistent horizontal gaps. Under a magnifying glass or a phone-camera zoom, these are obvious.
Compare fonts across the three stamping locations. The engine-block VIN font, the chassis-rail VIN font, and the dashboard-plate font should all be consistent within manufacturer (they are typically struck with the same press lineage at the factory). A Maruti chassis stamped with a sans-serif font and a dashboard plate with a clearly different typeface is a forgery signal.
Professional forgery exists: High-end forgers use CNC-controlled punch presses that can produce nearly factory-quality stamps. Against this level of forgery, font and depth checks are not enough — you must rely on the multi-location cross-check and the VAHAN cross-check. If all three locations match each other and match VAHAN, and the paper trail is clean, even a CNC-quality forgery runs out of places to hide.
5. Red Flag 3 — Dashboard VIN Plate Tampering
The dashboard VIN plate is the visible-through-windscreen plate that law enforcement reads at a vehicle check. It is also the most commonly forged location because it is the easiest to remove and replace.
Tamper signs on the dashboard plate. New rivet heads (original rivets dull and bead around the edge after years of heat; replacement rivets look fresh and shiny). Adhesive residue around the plate edge from previous plate being removed. The plate sitting slightly proud of the surface because the new rivets are a different length. Paint or heat-damage outlines where the original plate was bonded differently.
Also check the plate material. Factory dashboard VIN plates are typically a thin aluminium alloy with a specific surface finish — matte or brushed depending on the brand. A replacement plate is often a slightly different alloy with a visibly different surface gloss.
Compare against the RC. The RC document (issued by the RTO) carries the chassis number and engine number printed on it. Every character on the RC must match every character on all three VIN stamping locations on the car. One character mismatch is a deal-killer. This cross-check takes two minutes and catches almost every amateur clone.
6. VAHAN Portal Cross-Check — The Final Proof
The VAHAN Parivahan portal holds the authoritative government record for every registered vehicle in India. The chassis number and engine number on VAHAN should match the stamping on the car and the text on the RC.
How to cross-check. Open mParivahan on your phone. Enter the registration number (the plate number). The record that comes back shows make, model, fuel type, registration date, RC status, fitness validity, insurance validity and — importantly — the last five to six characters of the chassis and engine numbers (fully visible on a logged-in view at parivahan.gov.in). Compare these last characters against what is stamped on the car.
The clone-breaker check. A cloned car typically uses a plate number belonging to a genuinely registered vehicle of the same make and model. The VAHAN record for that plate will therefore return a plausible make/model/year. But the chassis and engine numbers on the record belong to the original car, not the clone. If you read the chassis VIN off the cloned car and compare it to the VAHAN record, they will differ. This is the single most reliable clone detection check available to a private buyer.
Detailed walkthrough of the full VAHAN cross-check including fitness and insurance records is in our complete VAHAN portal guide.
If the VAHAN record and the stamped VIN disagree, do not walk away quietly — the car is likely stolen. Informing the local police station with the RC number and stamped VIN can help recover a stolen vehicle for the rightful owner, and is the responsible action. Consult a qualified advocate if you have any doubt about how to report safely.
7. Verifying VIN Against the RC Photo
In a legitimate sale the seller produces the RC front and back. The chassis and engine numbers are printed on the back of the RC (and on the modern smart-card RC, on both sides).
What to do. Hold the RC next to the chassis-rail VIN stamp and photograph both in the same frame. Zoom in on your phone to compare each character. Do the same for the engine-block VIN and the dashboard VIN plate. All three photos plus the RC must show the same 17-character VIN.
Common RC forgery signs. Pixelation or font inconsistency around the chassis and engine number fields — evidence the fields were edited. Different ink colour or font weight on the chassis number versus the rest of the RC text. Missing RTO embossed seal on the back. Mismatched RC number format — different states follow different sequences and an unusual format for the claimed state is a signal.
Fitness and insurance records. Pull the insurance policy (the seller should have it) and check the chassis and engine numbers on the policy. Insurers record these at issue and will not change them casually. Similarly, the PUC certificate carries the chassis number on most state formats. All of these should agree.
8. What to Do if You Suspect a Clone
At the inspection, if you spot clone signs, do not confront the seller. Fraudsters operating in cloned vehicles can be part of larger networks and confrontation on the spot is unsafe. Politely say you need to think about the price and leave — do not mention the VIN discrepancies.
Preserve evidence. Take photos of the VIN stampings, the RC front and back, the insurance policy, and the registration plate. Save screenshots of the WhatsApp chat history with the seller. Note the exact location of the inspection.
Report to the police station in whose jurisdiction the inspection happened, with a written complaint requesting an FIR under IPC Section 420 (cheating), IPC Section 471 (using forged document as genuine), IPC Section 467 (forgery of valuable security — the RC), and Motor Vehicles Act Section 182A (taking a forged chassis number or fake plate onto the road — fine up to 10,000 rupees and/or imprisonment up to 6 months). The police have the authority to physically recover the vehicle and run it through a stolen-vehicle database; a match triggers criminal proceedings and restores the vehicle to its rightful owner.
You can also file online via cybercrime.gov.in for the cheating component (where the fraud included online elements like a fake listing).
This is a high-stakes area — do not attempt DIY legal representation if the seller disputes or threatens reprisal. Consult a qualified advocate. Many states also have dedicated vehicle theft cells at the Commissioner of Police office that move faster than local stations on suspected clones.
9. A Cost-Sanity Check on Clone Risk
Cloning is economically rational only above a certain vehicle value and in certain supply conditions. In practice, clones are found disproportionately among:
High-value SUVs and luxury cars — Toyota Fortuner, Mahindra XUV700, Hyundai Tucson, higher-trim Creta, and most luxury imports. The dollar-cost of the stolen donor car makes a clone profitable.
High-volume hatchbacks and sedans from theft hotspots — Maruti Swift, Baleno, Wagon-R and Hyundai i10/i20 in Delhi NCR, Punjab and Haryana. The donor supply and the market for second-hand units makes volume cloning viable.
Out-of-state sales where local RTO cross-check is weak — transporting a clone from Delhi to Bihar, Jharkhand or a smaller state where VAHAN-level verification is less universally enforced.
Cloning is vanishingly rare in low-value hatchbacks sold within the same RTO and via a dealer network that physically runs the VIN past the VAHAN portal at delivery. A 3 Lakh rupee Santro inspected through a proper workflow has close to zero clone risk. A 25 Lakh rupee Fortuner at a roadside sale in a tier-2 city has meaningfully higher risk.
Risk proportional to price: Scale your inspection depth to the price. For a 2-4 Lakh rupee hatchback, the three-VIN-location check and VAHAN cross-check (45 minutes total) is enough. For a 15-30 Lakh rupee SUV, add an RTO-witnessed VIN verification at the destination RTO before payment — it costs 500-1000 rupees in inspection fees and closes the clone window.
Want a clone-safe used car?
VahanBazaar cross-checks chassis and engine numbers against the VAHAN Parivahan database at the time of listing — and flags any mismatch before the listing goes public.
Common Mistakes Indian Drivers Make
Avoid these mistakes: Mistakes that let clone fraud succeed on Indian buyers:
- Reading the VIN only at the dashboard plate and not at the engine block and chassis rail — Reading the VIN only at the dashboard plate and not at the engine block and chassis rail
- Skipping the VAHAN cross-check because the RC document 'looked fine' — Skipping the VAHAN cross-check because the RC document 'looked fine'
- Accepting a VIN that contains the letters I, O or Q (the ISO 3779 standard excludes these) — Accepting a VIN that contains the letters I, O or Q (the ISO 3779 standard excludes these)
- Ignoring visible welded seams or repainted patches near the chassis stamping area — Ignoring visible welded seams or repainted patches near the chassis stamping area
- Not checking that the model-year character at VIN position 10 matches the claimed year — Not checking that the model-year character at VIN position 10 matches the claimed year
- Confronting a suspected clone seller on the spot instead of leaving and reporting later — Confronting a suspected clone seller on the spot instead of leaving and reporting later
- Paying in cash without an RTO-witnessed ownership transfer on a higher-value out-of-state vehicle — Paying in cash without an RTO-witnessed ownership transfer on a higher-value out-of-state vehicle
- Trusting a dealer's verbal assurance that 'all papers are OK' instead of pulling the VAHAN record yourself — Trusting a dealer's verbal assurance that 'all papers are OK' instead of pulling the VAHAN record yourself
Real Indian Example — A 'Mahindra Scorpio' with Two Identities
A Ranchi buyer responded to a 9.5 Lakh rupee listing for a 2020 Mahindra Scorpio S11, advertised by a seller who claimed to be moving to a smaller city and selling quickly. Market rate was 12-14 Lakh, so the price was 25-30 percent below market — an alert buyer's first trigger.
At the inspection the buyer ran the VIN at all three locations. The chassis-rail VIN showed a subtle weld seam around the stamped plate when he shone his phone torch at a shallow angle. The engine-block VIN matched the dashboard plate, but neither matched the RC document the seller produced.
| Location | VIN read | RC said | VAHAN said |
|---|---|---|---|
| Dashboard plate | MA1TA2YA6L2M1**47 | MA1TA2YA6L2M1**47 | MA1TA2YA6L2M1**47 |
| Engine block | MA1TA2YA6L2M1**47 | — | — |
| Chassis rail | MA1TA2YA6K2M0**19 | MA1TA2YA6L2M1**47 | MA1TA2YA6L2M1**47 |
The chassis VIN — the hardest to re-stamp because of its structural location — showed the donor car's original number (a 2019 Scorpio, per the 'K' year code) while the rest of the car had been stamped to match a 2020 Scorpio's stolen identity. The buyer excused himself from the inspection, preserved photos of the welded seam and the two-different VINs, and reported to the local police station. The FIR was registered under IPC 420, 471, 467 and MV Act 182A; the vehicle was subsequently identified as a stolen 2019 Scorpio from Delhi and returned to the rightful owner. The buyer lost no money but invested 6 hours in the reporting process — an excellent trade.
Final Thoughts
Cloned-car fraud fails in India when the buyer does the one check that the fraudster cannot fully control — the physical VIN read at all three stamping locations cross-referenced against the RC and the VAHAN record. Every other step in a used-car purchase builds on this foundation. The inspection takes 45 minutes, requires only a torch and a phone, and protects you from the single catastrophic-downside fraud in the Indian used-car market. If something disagrees — a welded seam, a font mismatch, a VIN that does not match VAHAN — leave quietly, preserve the photos and the WhatsApp trail, and report under IPC 420, 471 and MV Act 182A. This is not a battle to fight alone; consult a qualified advocate before any confrontation. Most importantly, do not buy the car.Frequently Asked Questions
Rule 122 of the Central Motor Vehicles Rules 1989 requires at least three stamping locations — typically the engine block, a chassis structural member (rail or floor pan), and the dashboard VIN plate visible through the windscreen. Some manufacturers add a fourth location on a door-jamb sticker for service reference. All mandatory stampings must match each other and match the RC document and the VAHAN portal record.
The VIN follows ISO 3779. Positions 1-3 identify the manufacturer, 4-8 describe the vehicle (model, engine, body type), position 9 is sometimes a check digit, position 10 is the model-year code, position 11 is the assembly plant, and 12-17 is the serial number. Letters I, O and Q are not used. A VIN containing any of these letters is invalid.
Position 10 (the tenth character from the left) of the 17-character VIN is the year code. For recent Indian cars: J=2018, K=2019, L=2020, M=2021, N=2022, P=2023, R=2024, S=2025, T=2026. If the seller claims a 2024 car and position 10 is not 'R', either the year is mis-stated or the VIN has been forged.
A cloned vehicle with forged VIN or fake plates typically attracts IPC Section 420 (cheating), IPC Section 467 (forgery of valuable security, here the RC), IPC Section 471 (using forged document as genuine), and Motor Vehicles Act Section 182A (using a forged chassis number or fake registration — fine up to 10,000 rupees and/or imprisonment up to 6 months). Consult a qualified advocate for the specific FIR drafting in your state.
Recovery is difficult because the vehicle is typically seized and returned to its rightful owner on identification. The buyer's remedy is civil — a suit against the seller for the purchase price under IPC 420 restitution and the Consumer Protection Act 2019. Recovery rates depend on whether the seller is identifiable and solvent. Consult a qualified advocate for the specific recovery strategy. Prevention via VIN cross-check is far cheaper than post-facto legal action.
No. A legitimate replacement can happen after an accident-rebuild where the dashboard frame was damaged and replaced, and the manufacturer issued a new plate with the same original VIN and a service record. But in practice the combination of 'replacement plate' plus 'no documented accident history' plus 'private-sale context' plus 'no matching service record at the authorised dealer' is a very strong clone signal. When in doubt, insist on a VAHAN cross-check and an authorised dealer verification of the RC.
Go to the police station in whose jurisdiction the inspection happened and file a written complaint requesting an FIR under IPC 420, IPC 467, IPC 471 and MV Act 182A. Attach photos of VIN stampings, the RC, and the WhatsApp trail with the seller. You can also call the state vehicle-theft cell at the Commissioner's office. For any online element of the fraud, also file at cybercrime.gov.in. Do not confront the seller on the spot; fraudsters in vehicle cloning networks can be organised and confrontation is unsafe. Consult a qualified advocate before any direct action.
Find Your Next Car on VahanBazaar
Browse verified listings, or list your car to reach India's used-car audience on VahanBazaar.