Selling Your Car Online? This “Interested Buyer” May Actually Be Trying to Steal Your Card Number

September 29, 2026

Selling a car online can turn into a strange little dance. A buyer sends a message, asks a few questions, and then says the vehicle looks promising. Before coming to see it, though, they want one more thing: a vehicle history report from a website they recommend.

That request sounds reasonable because legitimate buyers often want vehicle-history information. The problem starts when the buyer insists on a particular unfamiliar website and expects the seller to enter payment information there. The Federal Trade Commission has warned about this exact type of scam, where the supposed buyer uses the conversation to steer a seller toward a website that may collect credit card information.

The Buyer Sounds Normal Until the Link Arrives

The scam works partly because the opening conversation can look completely ordinary. The person may ask about mileage, maintenance, ownership history, or whether the car has been in an accident. None of those questions should automatically raise suspicion.

Then comes the request for a report. The buyer may claim that previous sellers gave them inaccurate information, so they now require a report before meeting. They might provide a link and suggest that the seller purchase the report because the seller already has the VIN.

That is the pivot.

The FTC has described cases where sellers paid for reports through sites recommended by supposed buyers, then never heard from the buyer again. The agency specifically warned that these sites could collect personal information, including credit card account numbers.

The scam does not depend on the seller being careless. It depends on the request fitting naturally into the car-selling process.

A Vehicle Report Is Legitimate. That Does Not Make Every Website Legitimate.

Vehicle-history reports serve a real purpose. The FTC recommends checking vehicle history before buying a used vehicle, and reports can contain information such as title history, salvage branding, odometer data, and certain theft or insurance information.

That creates the perfect cover for this scam. A seller hears “vehicle history report” and thinks the request must be legitimate because buyers actually use these reports.

But the report and the website are two different questions.

The U.S. Department of Justice’s NMVTIS program maintains a list of approved data providers. Its current consumer list identifies providers authorized to sell NMVTIS vehicle-history reports. A seller does not need to trust a random link simply because someone in a text message calls it a “VIN report.”

There is another wrinkle worth remembering. A vehicle-history report does not replace an independent inspection. NMVTIS provides specific vehicle information, but it does not tell a buyer everything about a vehicle’s current mechanical condition.

So if someone wants a report, the seller can provide the VIN and let the buyer handle the report themselves. There is little reason to hand payment information to a stranger’s preferred website just to keep a potential sale moving.

The Website Can Be the Real Target

A suspicious buyer may not care much about the car. The conversation simply creates a reason to get the seller onto a particular website. Once there, the site may request the VIN, name, email address, phone number, and credit card information. The immediate charge might look small enough to feel harmless.

That small payment can become the part that sticks in the seller’s mind. A 2019 FTC warning described sellers being directed to unfamiliar vehicle-report websites and paying for reports that never led to an actual buyer. The agency warned that the sites could also serve as a way to gather information for marketing or lead generation.

The lesson is not that every unknown vehicle-history company is fraudulent. It is that a buyer’s insistence on one specific unfamiliar site deserves scrutiny, especially when the seller must pay first.

There Are Other Red Flags Besides the Report

The vehicle-history request becomes more concerning when it arrives alongside other unusual behavior. A supposed buyer who refuses to discuss the car but repeatedly pushes one website deserves a closer look. So does someone who creates urgency, refuses normal communication, or asks for information unrelated to the sale. The FTC advises consumers to resist pressure and avoid giving financial information in response to unexpected requests.

Sellers should also watch for other classic online-sale schemes. The FTC warns that fake buyers can send bogus payment notifications, request refunds, or use fake checks that appear to clear before the bank later discovers the problem.

That means a clean vehicle-history request does not automatically make the rest of the buyer’s behavior safe. The entire transaction deserves attention, from the first message through payment and title transfer.

What to Do Instead of Clicking the Buyer’s Link

If a buyer asks for a vehicle-history report, start with the VIN. A seller can provide the VIN and tell the buyer to obtain whatever report they want from a provider they trust.

If the seller wants a report for the listing, the seller can independently choose a provider rather than following a stranger’s link. The DOJ’s NMVTIS site maintains a current list of approved providers, which gives consumers a place to start.

The same principle applies to links in texts and emails. Do not assume a professional-looking website is legitimate just because it has a familiar-looking logo, polished design, or a car-related domain name. The FTC has specifically warned that scammers can use convincing-looking vehicle-report sites to make the request seem routine.

If the buyer becomes pushy after the seller declines the requested website, ending the conversation may be the simplest move. A legitimate buyer can find another way to evaluate the vehicle.

A Strange Buyer Can Cost More Than a Missed Sale

The safest online car sale does not require a seller to surrender control of the transaction. A buyer can inspect the vehicle, verify the VIN, obtain a history report, arrange a mechanical inspection, and agree on a payment method without dictating that the seller enter card information into an unfamiliar website. Those steps belong to the normal process of buying a used vehicle.

Selling a car online already requires enough paperwork, negotiation, and patience. There is no reason to add a mysterious VIN website to the list. When a buyer wants the car, the VIN can be shared. When a buyer wants a report, the buyer can obtain one. And when someone insists that the seller must pay through a link they supplied, that conversation deserves a very hard look.

Would you trust a buyer who insisted that you purchase a vehicle-history report from a website they provided?