The short version
Six jobs, six tools, and the pattern is the same at every step: the tool answers one question and stays silent on the rest. NHTSA confirms identity, NICB flags theft and reported total losses, an NMVTIS provider shows the title trail, the comps set the price, reverse image search and a listing check screen the ad, and an OBD-II app catches cleared codes. Run them in that order, cheap to expensive, and let any hard failure end it early. Then go stand next to the car — the inspection is the only job that ever had a car in front of it.
Search for apps to check a used car and you get lists of ten apps ranked by star rating, most of them the same VIN lookup wearing a different icon. The honest answer is shaped differently: there is no single app. There are about six jobs between seeing an ad and handing over money, and for each job one or two tools do it well — most of them free, and none of them on an app-store chart.
Here's the tour, by job, in the order you'll actually need them. Each entry says what the tool catches and, just as importantly, what it can't — the expensive mistake is running a check and believing it answered a question it never asked.
Job one: decode the VIN and pull recalls — NHTSA
Everything starts with the 17-character VIN, so getting it is job zero: ask the seller to text it, or read it off the dash plate through the windshield in a photo. A private seller who won't give the VIN has ended the conversation for you.
With the VIN in hand, NHTSA's free VIN decoder turns it into what the car was built as — model year, make, model, body style, engine, and assembly plant. Hold that against the ad. A listing that says "V6" for a VIN that decodes to a four-cylinder, or a trim level the VIN can't support, is either a careless seller or an ad written for a different car than the one you'd be visiting. NHTSA's recalls lookup, also free and also by VIN, shows open safety recalls that were never repaired on most makes. Both take under a minute and need no account; here's exactly what a free VIN check does and doesn't tell you.
What the decode can't do: it knows nothing about this particular car's life. No accidents, no title brands, no mileage, no owners. It confirms identity, not history — that's the next three jobs.
Job two: theft and total-loss flags — NICB VINCheck
The National Insurance Crime Bureau runs VINCheck, a free lookup that answers two narrow questions: has this VIN been reported stolen and not recovered, and has it been reported as a salvage or total-loss vehicle by a participating insurer. It caps how many lookups you can run in a day, so spend them on cars you're serious about.
The limit to understand is the word "participating." VINCheck sees reports from NICB member insurers. A car totaled by a non-member, a self-insured fleet, or one that was never insured for collision won't show up. A clean VINCheck is the absence of a flag, not proof of a clean history. Treat a hit as decisive and a miss as inconclusive.
Job three: title history — NMVTIS providers, then Carfax or AutoCheck
NMVTIS is the federal title database that state DMVs, insurers, and salvage yards report into, and it's the one check that follows a car across state lines — which is exactly how title washing works: a brand applied in one state that a later state's title quietly dropped. You can't query NMVTIS directly; you buy a report from an approved provider, for a few dollars at the time of writing. Getting one takes about five minutes.
Carfax and AutoCheck are commercial reports built on their own data networks: service visits from participating shops, accident reports from police and insurers, registration events, plus title data. They cost more, and they catch what NMVTIS never sees — a fender-bender repaired without a total loss, a long oil-change trail, a rental or fleet registration. None of the three is complete; each knows only what was reported to it, and a cash repair at an independent shop is invisible to all of them. The sensible order is cheap first: NMVTIS on any car you plan to visit, a commercial report on the one you've decided to buy.
An NMVTIS report is short. It contains:
- The state that issued the current title and the states that issued earlier ones
- Title brands — salvage, rebuilt, flood, junk — from every reporting state, not just the current one
- The odometer reading recorded at each title event, which is where a rolled-back car contradicts itself
- Total-loss reports from insurers that report to the system
- Records from salvage auctions and junk yards that handled the car
Job four: price — KBB, Edmunds, and the listings themselves
Kelley Blue Book and Edmunds both produce a value range from year, make, model, trim, mileage, self-reported condition, and ZIP code. They're useful as a sanity band and dangerous as a price: the condition input is whatever you click, the ranges lag a fast-moving local market, and a seller quoting "KBB says" has picked the column that favors them. Use them to notice when an ask is wildly out of line, not to set your number.
The better price tool is the market itself — the cars actually for sale near you right now. It's ten minutes of work:
- Search the same year, make, model, and trim within a reasonable driving radius on Autotrader, Cars.com, CarGurus, and Facebook Marketplace
- Sort by mileage and write down the asking prices of the five to ten cars closest to yours in miles
- Separate dealer asks from private-party asks — they're two different markets, and a private car should sit below the dealer band
- Note days on market where the site shows it; a car that's sat for months is priced above what buyers will pay
- Read the comp band against the ad: an ask far under every comparable car is not a bargain, it's the opening line of a scam or a car with a story the seller hasn't told yet
Job five: photos and the ad — Google Lens, TinEye, and listing checks
Stolen photos are the fake listing's raw material, and reverse image search finds them free. Google Lens takes an upload or an image address from the camera icon in the search bar, or a long-press on the image in Chrome on Android; TinEye keeps a separate index and is worth the extra minute. Check two or three photos, not just the first. A match on an older listing in another city at a higher price is the con laid bare; the full five-minute photo routine is here. No match proves less — freshly taken photos of a real car can still dress a scam.
Then there's the ad as a whole, which the marketplace's own tools already tell you something about: how old the seller's profile is, what else they're selling, whether the same phone number appears under several "private" cars. Listing checks bundle the rest — a free browser check like SiftCar's takes the ad's URL and runs the photo search, the comp comparison, and the scam-pattern read in one pass. Use any of these as a first filter and nothing more: a listing check sees the ad, not the car, and a real car honestly photographed still has to pass the checks above and below.
Job six: at the car — an OBD-II app, and what no app replaces
The one app that earns a spot in your pocket at the car is a scanner app paired with a cheap Bluetooth OBD-II adapter, which plugs in under the dash of nearly any car sold in the US since the mid-1990s. It reads stored and pending trouble codes, and — more useful than the codes — the emissions readiness monitors. Monitors showing "not ready" on a car that's supposedly driven every day mean the codes were cleared or the battery was disconnected recently — the standard way to hide a check-engine light for exactly as long as a test drive lasts. The adapter is cheap and the app is often free.
Everything else at the car is done by hands, eyes, and a shop — no phone involved:
- Match the VIN on the dash plate, the door-jamb sticker, and the title to each other and to every report you pulled — one mismatch ends the deal
- Check the seller's ID against the name on the title; a seller whose name isn't on the title is a curbstoner or worse
- Walk the body with a flashlight and a small magnet for filler, and read panel gaps and paint texture for a respray
- Pull the tire date codes, look under the oil cap and at the coolant, and get on the ground for leaks
- Insist on a cold start — a seller who warmed the car up before you arrived had a reason
- Pay an independent shop for a pre-purchase inspection on the car you intend to buy; it's the single check that sees what no database can