Car-Buying Scams: 5 Variants and the In-Person-Inspection Rule

A buyer suggests a specific escrow service to hold the payment. The service is fake — controlled by the buyer or accomplices. The seller releases the vehicle and title; the escrow funds turn out to never have existed. Real escrow is initiated by the buyer or seller via Escrow.com (the most well-known legitimate service), not pushed by one party with a service the other has never heard of.

A representative case: a private seller lists a 2019 Subaru Outback on AutoTrader for $18,500. A buyer responds saying he's relocating from Ohio to California, can't inspect in person, but is willing to pay full asking price plus $500 for shipping. He suggests using "ShieldEscrowServices.com" to hold the funds until the seller confirms the buyer received the vehicle. The seller has never heard of the service but the website looks professional, with a New York address, BBB accreditation, and a payment-tracking dashboard. The "buyer" sends what appears to be a screenshot of a $19,000 deposit, the dashboard updates to show "FUNDS HELD," and the seller is told to release the title and vehicle to a shipping company that will pick up. The seller hands over the title, signs the shipping paperwork, and watches the car drive away on a truck. A week later the escrow service's website is gone, the buyer's phone number is disconnected, and the seller has no recourse — the vehicle is gone, the title has been transferred, and no payment ever arrived.

The protective architecture has two layers. First, real escrow is initiated by the seller or by mutual agreement, not pushed by the buyer. Real Escrow.com transactions verify both parties' bank accounts, hold funds in a regulated trust account, and disburse only when both parties confirm completion — there is no "screenshot of deposit" because the buyer's funds are visibly transferred via verified bank-to-bank ACH or wire. Second, real legitimate car sales of $15,000+ vehicles to out-of-state buyers are extremely uncommon — most legitimate buyers travel to inspect a vehicle in person before paying. The "I can't travel" framing is the diagnostic across this and Variant #5.

What stops it is the in-person + bank-mediated rule. Refuse any escrow service the buyer suggests; propose Escrow.com or in-person bank-mediated transaction instead. Real legitimate buyers either travel to inspect or accept that the sale won't happen. If you have already released a vehicle to a fake-escrow buyer, file at reportfraud.ftc.gov, ic3.gov for FBI involvement, your state DMV (file a stolen-vehicle report if the title transfer hasn't yet been recorded), and your local police department. Recovery is rare; the protective conversation is the up-front prevention.

A thief takes the VIN from a legally-registered vehicle and applies it (along with counterfeit title and registration) to a stolen or salvage-titled vehicle. Carfax/AutoCheck reports come back clean because they reflect the real registered vehicle. The buyer purchases the cloned vehicle and discovers — sometimes years later when impounded — that the VIN is fake and the actual vehicle is stolen. Recovery is extremely difficult; the vehicle is typically seized.

A representative case: a buyer purchases a 2020 Toyota 4Runner from a private seller on Craigslist for $32,000. The Carfax report comes back clean (no accidents, single owner, recent service records). The title is signed, the buyer files for new registration in their state, and drives the vehicle home. Eighteen months later, the buyer is pulled over for a routine traffic stop. The officer runs the VIN against NCIC (the FBI's National Crime Information Center) and discovers the actual vehicle with that VIN was sold three years earlier to a different owner in Texas. The 4Runner the buyer purchased turns out to have been stolen from California and re-VIN'd. The vehicle is impounded and returned to the original Texas owner; the California police open a stolen-vehicle case. The buyer loses the vehicle, the $32,000, and faces months of legal entanglement to clear their name.

The structural defense is two-step. First, get a pre-purchase inspection from an independent mechanic who can verify the VIN appears in all the expected locations — engine block, dashboard, doors, frame stamps, federal safety stickers — and that all VIN locations match each other. Cloned vehicles often have inconsistent VINs across these locations because the cloner doesn't have access to all the original vehicle's stamps. Second, cross-check the VIN through the National Motor Vehicle Title Information System (NMVTIS) at vehiclehistory.gov. NMVTIS is the federal title-history database that aggregates state DMV records; commercial services like Carfax do not always have access to NMVTIS data, so cross-state title washing can pass Carfax but fail NMVTIS.

What stops it is the multi-source VIN verification rule. Pre-purchase inspection by an independent mechanic + Carfax/AutoCheck + NMVTIS at vehiclehistory.gov is the three-source diagnostic that catches VIN clones. If you suspect VIN cloning, contact your local police department or state DMV before buying — they can run the VIN against NCIC and confirm. If you have already purchased and discovered the cloning, report to FTC + IC3 + local police + state AG; some state lemon-law statutes provide additional consumer-protection routes against the seller (though the seller is usually long gone).

An unlicensed dealer poses as a private seller, selling multiple cars (often with hidden problems) to bypass state dealer licensing. The 'private sale' framing exempts the curbstoner from warranty disclosures, lemon-law protections, and safety-inspection requirements. Red flags: same phone number on multiple listings, refuses official paperwork until 'after the sale,' demands cash, meets in random parking lots rather than a residence.

A representative case: a buyer responds to a Facebook Marketplace listing for a 2017 Ford Explorer at $12,500 (market rate $14,500). The seller, "John," wants to meet at a Walmart parking lot to "save time." The Explorer looks clean, John says it was his daughter's car, and accepts the buyer's $12,500 cash. Two weeks later the Explorer fails the buyer's state inspection — the frame is rusted from prior flood damage that John's quick paint job concealed. The buyer searches "John's" phone number on Facebook Marketplace and finds twelve other listings under the same number, all for different vehicles in the past month. John is a curbstoner — buying flood-damaged Texas vehicles at auction, hiding the damage, and reselling them in Pennsylvania as "private sales." If John were a licensed dealer, state lemon laws and disclosure requirements would have given the buyer recourse; as a "private seller," the buyer's only recourse is a civil suit against an individual whose real name they don't know.

The protective architecture exists at the state DMV level. Most states have curbstoning laws prohibiting unlicensed individuals from selling more than 3-5 vehicles per year as private sales. State DMVs investigate curbstoning complaints and can issue cease-and-desist orders, fines, and refer to law enforcement. The practical detection method for buyers: search the seller's phone number on Facebook Marketplace, Craigslist, and AutoTrader. Curbstoners list multiple unrelated vehicles using the same contact info; the volume is the diagnostic.

What stops it is the residence + same-number search rule. Meet at the seller's residence (verify the address matches government-issued ID and the title), and search the seller's phone number across vehicle marketplaces. Multiple listings under the same number is the diagnostic for curbstoning. If you have already bought from a curbstoner, file a complaint with your state DMV (most states actively investigate), the BBB Scam Tracker, and your state attorney general's consumer-protection unit. Lemon-law protections do not apply to private sales, but state-DMV enforcement against the seller can sometimes recover funds.

A "buyer" pushes the seller to pay $20-$40 for a vehicle history report from a sketchy service the seller has never heard of (not Carfax or AutoCheck). The site captures the seller's credit-card details. The seller has no recourse and the card is used for fraudulent charges later. Real Carfax/AutoCheck reports cost $25-$45 and are paid by the buyer, never the seller.

A representative case from recent Fox News reporting: a seller listing a 2018 Honda Accord on Craigslist for $14,200 receives a message from "Jessica" who is "very interested but needs a clean history report from VinHistoryCheck.com." Jessica says her cousin was scammed last year and she'll only buy if the seller provides a report from this specific service. The seller, eager to make the sale, visits the site, pays $34.99 with their credit card, downloads a generic-looking report, and emails it to Jessica. Jessica disappears. Three weeks later the seller's credit card shows $480 in fraudulent charges from gas stations and online merchants in three different states. VinHistoryCheck.com has no real history-report functionality — it's a credit-card-harvest site that generates a fake report and pockets the fee while keeping the card on file for later fraud.

The protective rule has two parts. First, real Carfax / AutoCheck reports are typically paid by the buyer, not the seller — the buyer is the party benefiting from due-diligence on the vehicle's history. A buyer asking the seller to pay for a report is reversing the normal economics, which is the diagnostic. Second, any vehicle-history-report service that isn't Carfax, AutoCheck, or NMVTIS at vehiclehistory.gov should be treated as suspicious. Carfax and AutoCheck are the two dominant commercial services; NMVTIS is the federal database. Anything else is either a niche service or a scam, and a "buyer" who insists on a niche service is running this script.

What stops it is refusing to pay for buyer-side due diligence. Tell the buyer Carfax or AutoCheck is fine, and that the buyer pays for their own report. If they push a specific other service, walk away from the transaction. If you have already paid a fake history-report service, dispute the charge with your card issuer under the Fair Credit Billing Act (60-day window), report at reportfraud.ftc.gov, and consider blocking the card and getting a new one.

A buyer claiming to be unable to inspect in person (deployed military, oil-rig worker, out-of-state mover) offers to pay above asking price by wire or cashier's check, asks the seller to handle shipping. The wire never arrives, the check bounces, or the buyer asks the seller to wire the 'shipping company' funds first (the shipping company is the scammer's accomplice). The "I can't inspect in person" framing is the diagnostic for fraud across this and the fake-escrow variant.

A representative case: a private seller lists a 2016 Honda Civic for $9,800 on Craigslist. A buyer responds saying he's a Navy Petty Officer Second Class deployed overseas, would like to buy the car as a surprise gift for his wife who lives near the seller. He'll pay $10,500 (full asking + $700 for shipping arrangements through "his preferred shipping company"). He sends a cashier's check for $14,000, asks the seller to deposit it, keep the $10,500 for the car, and wire $3,500 to the shipping company to dispatch a truck. The seller deposits the check, sees funds available within 2 days, wires $3,500 to the shipping company. Two weeks later the cashier's check is flagged as counterfeit; the bank reverses the $14,000 deposit. The seller has lost $14,000 plus the $3,500 wired. The "Navy Petty Officer" turns out to never have existed; the shipping company is the same scammer.

The variant is structurally identical to the marketplace overpayment scam covered in our check-fraud guide; the car-specific framing adds a plausible reason for the buyer's inability to inspect. The protective rules are the same: real buyers do not pay above asking, do not pay sellers extra for shipping, and do not buy cars sight-unseen from out of state. Real military service members do exist, but they do not buy used cars sight-unseen; they have the same access to vehicles at U.S. bases and the same need to inspect.

What stops it is the no-sight-unseen + no-overpayment rule. Refuse any sale where the buyer cannot inspect in person. If a buyer offers above asking price, that is the diagnostic for a fake-check or wire-fraud variant. If you have already deposited and wired, contact your bank within 24 hours for wire-recall, file at reportfraud.ftc.gov, ic3.gov, and your state attorney general. Recovery depends on payment-method speed and bank cooperation.