Key facts
- Source: FTC consumer alert, "Scammers are spoofing car dealership websites: What you need to know," BCP Staff, published September 1, 2026 (consumer.ftc.gov). Trade and news pickups followed September 2-3, 2026.
- Mechanism (FTC's own words): scammers "clone a real auto dealer's website — often using AI to do so — copying the brand logos, vehicle listings, and photos down to the last detail." Note the FTC says "often," not always.
- Bait: rare or hard-to-find vehicles; fabricated testimonials and reviews (trade coverage adds fake Trustpilot ratings); listings and photos often scraped from legitimate platforms.
- Pricing lure: roughly 10-30% below market to manufacture urgency — this figure is analyst commentary from Point Predictive via trade coverage, not an FTC statement.
- Payment demand: wire transfer only (FTC's specific warning); some trade pickups also cite cryptocurrency.
- Endgame: high-pressure "other buyers are interested" tactics, then contact is cut and the fake site vanishes within days.
- No dollar figure: the FTC alert publishes no victim count or loss total. Do not trust any article that attributes one to this alert.
- Report at: ReportFraud.ftc.gov.
How can I tell if a car dealership website is fake or cloned before I pay?
Run the FTC's four seller-level checks before any money moves. Search the dealer's name with words like "scam," "review," or "complaint." Cross-check the address and phone number on the site against the manufacturer's official dealer locator. Ask to see the car — and the dealership — in person. And refuse to pay by wire transfer only. If any of those meets resistance, stop.
A cloned site is built to survive a glance. It carries real logos, real-looking inventory, and testimonials, because those elements were copied or scraped. What it usually cannot survive is a phone call to the number listed on the manufacturer's own site, or a request to walk the lot. Fraud experts quoted by Auto Remarketing say they have tracked these "phantom dealership" scams for more than a year, pre-dating the FTC alert; Point Predictive's Frank McKenna describes fraudsters exploiting details from well-known dealership service providers to appear authentic. The impersonation is the whole product.
What are the warning signs of a spoofed or AI-generated dealer website?
The strongest tells cluster around payment, pressure, and access: a wire-transfer-only or crypto deposit, an "act now, other buyers are circling" push, and resistance to an in-person visit or independent inspection. The vehicle is often a hard-to-find model priced conspicuously below market, with listing photos that may appear elsewhere online.
Treat a too-good price as a flag, not a find. Point Predictive's estimate of 10-30% below market, reported by trade coverage, describes exactly the bait these operations use. Reverse-image-search the listing photos: if the same images turn up under a different seller or stock library, the "car" may have been assembled from someone else's inventory. This is a close cousin of curbstoning, where an unlicensed seller poses as a private party or dealer — if you are weighing a suspicious individual seller rather than a spoofed franchise site, see our guide on how to spot a curbstoned used car.
Is it safe to wire a deposit or pay upfront for a car I haven't seen in person?
No. The FTC's guidance is explicit: "Walk away if the dealer insists on an upfront payment by wire transfer only." Wire transfers are effectively irreversible, which is why cloned-site scammers demand them and then disappear. Never send an upfront payment for a vehicle that neither you nor an independent inspector has physically seen.
If you are buying at a distance and cannot visit yourself, the FTC's own workaround applies: "Tell the dealer you want to hire a mobile inspection service to check out the car." A mobile pre-purchase inspector travels to the vehicle, confirms it physically exists, and checks that the VIN plate matches the listing. A legitimate seller accommodates this. A seller who refuses is telling you something.
How do I verify a dealership is real before paying?
Verify identity against the source of truth, not against the site trying to sell you. Look up the dealership on the vehicle manufacturer's official dealer locator and confirm the name, street address, and phone number match exactly. Call the number the manufacturer lists — not the number on the suspect site — and ask whether they have the listed vehicle and your order. Then run the FTC's name-plus-"scam/complaint/review" search.
Here is the seller-level red-flag and verification matrix, paired with what a vehicle-level VIN check can and cannot add at each step:
| Layer | Red flag on a cloned/fake dealer site | How to verify (FTC, seller-level) | Vehicle-level check (VIN) |
|---|---|---|---|
| Seller identity | Address/phone don't match the real franchise; site is days or weeks old | Cross-check the name, address, phone against the manufacturer's official dealer locator; search "[dealer name] + scam/complaint/review" | A VIN check does not verify the seller — this belongs to the FTC steps |
| Payment | Wire-only or crypto demanded upfront; high-pressure "act now" | Never pay by wire transfer only; refuse crypto-only | N/A — a VIN check cannot block or trace a wire |
| Inspection | Refuses in-person viewing or a mobile inspection | Ask to see the car and dealership in person; offer to hire a mobile inspector; walk away if refused | A physical inspection confirms the car matches the listing and VIN plate |
| The vehicle | Photos likely scraped; price 10-30% below market | Reverse-image-search the photos | Run the exact VIN: confirm real sales-listing, ownership, accident/salvage-auction records, odometer consistency, specs, recall presence |
| Reporting | Site vanishes after payment | Report at ReportFraud.ftc.gov | N/A |
Can running the VIN tell me whether a car listing is legitimate?
A VIN check verifies the vehicle, not the website. It answers a different and useful question: does the exact car in the listing have a real, consistent footprint, or was it invented for a scam page? Run the precise VIN the listing advertises and look for a coherent history — past and current sales listings, prior ownership, accident and salvage-auction records, an odometer with no rollback, and specs that match the photos.
The strongest single differentiator is sales-listing history. A genuine used car has usually been listed somewhere before, with prices, mileage, and days-on-market attached; a "car" conjured for a fraudulent site has none of that trail. A VIN that returns no listing or ownership history, or specs that contradict the photos, is a strong signal the listing is fabricated. You can also sanity-check that suspiciously low price against the VIN's own valuation and prior listings — the same technique covered in our guide to how to tell if a used car is overpriced before buying, used here in reverse to flag a price that is too low to be real.
Be clear about the limit, though. This layer catches a fabricated or mismatched vehicle. It does not catch a real VIN pasted onto a fake storefront — which is why the FTC's seller checks stay first. It is also worth knowing the adjacent fraud where a real car wears a stolen identity; see how to check if a used car has a cloned VIN, a tampered-plate problem distinct from the website impersonation described here.
What a VIN check can and can't tell you here
A VIN check is the second lock on the door, not proof the seller is real. It confirms the car is real and has a history; the FTC's in-person-inspection, no-wire-only, and cross-check-the-franchise steps confirm the seller.
| What a VIN check CAN surface | What it CANNOT do |
|---|---|
| Sales-listing history (prices, mileage, days-on-market) | Detect that a website is cloned or AI-generated |
| Prior ownership history | Confirm the seller actually controls the car |
| Accident and damage records, including airbag-deployment status | Block, reverse, or trace a wire transfer |
| Odometer / rollback check | Verify a dealer's license or legitimacy |
| Junk and salvage-auction records | Show whether a recall was remedied (only presence/count) |
| Theft (NICB) records | Flag NHTSA investigations (PE/EA) |
| Recall presence/count; specs; NHTSA + IIHS ratings; market valuation | Classify the legal title brand (shows junk/salvage-auction records, not the title brand itself) |
Start recall screening with NHTSA's free VIN lookup at nhtsa.gov/recalls, which shows open recalls straight from the manufacturers. A Zilocar VIN check runs alongside it, adding the history layer — accident, salvage-auction, odometer, ownership, and sales-listing records plus valuation — so you can confirm the advertised car has a real footprint before you engage a seller. It screens for recall presence like NHTSA's tool; it does not confirm a recall was fixed, track NHTSA investigations, or show firmware status — check those with the dealer and NHTSA. If the odometer story looks off in the history, our guide on how to check if a used car odometer was rolled back walks through the tells.
What should I do if I already paid a fake dealership?
Act immediately on two fronts. First, contact your bank or wire provider and ask them to recall or reverse the transfer — speed matters, because wires clear fast. Second, report the fraud to the FTC at ReportFraud.ftc.gov with the fake site's URL, the names and numbers used, payment details, and any screenshots.
Reporting does more than document your own loss. The FTC and its partners use these reports to identify and disrupt the operations behind phantom dealership sites, which typically spin up, take payments, and vanish within days. The sooner a fake site is reported, the sooner the next buyer is protected.
