Can I Legally Look Up a License Plate Number?

You can legally look up a license plate for basic vehicle information like make, model, and year, but federal law blocks private citizens from tracing a plate back to the owner’s name, address, or phone number in most situations. The Driver’s Privacy Protection Act (DPPA), codified at 18 U.S.C. § 2721, bars state DMVs from releasing personal information tied to a motor vehicle record unless the request fits one of a specific list of approved purposes or the owner has given express consent.¹ Curiosity, a dispute with a neighbor, or a background check on someone you just met are not on that list.

What the Plate Actually Reveals

A plate can lead to two very different kinds of information, and the law treats them very differently.

Basic vehicle data — make, model, year, VIN, recall notices, sometimes title history — is not “personal information” under the DPPA. It describes the car, not the person. Services and databases can share this data legally.

Personal information is the link between the plate and the human. The DPPA defines it as data that identifies an individual: name, address (the five-digit zip code alone doesn’t count), telephone number, Social Security number, driver identification number, photograph, and medical or disability information. Information about traffic violations, accident history, and license status is specifically excluded from that definition.²

Photographs, Social Security numbers, and medical or disability information sit in a more protected tier called “highly restricted personal information,” which generally requires the individual’s express consent to release.²

States can add their own restrictions on top of the federal floor, and many do. Even a request that qualifies under the DPPA may still be denied by your state DMV.

Who Is Allowed to Trace a Plate to Its Owner

The DPPA lists over a dozen approved uses. The ones a private searcher is most likely to run into:

Government agencies, including law enforcement and courts, carrying out official functions, along with private parties acting on their behalf.¹
Insurance companies, insurance support organizations, and self-insured entities working on claims investigations, anti-fraud efforts, rating, and underwriting.¹
Licensed private investigative agencies and licensed security services, for any purpose the DPPA otherwise permits. The word “licensed” is doing real work; an unlicensed person calling themselves a PI does not qualify.¹
Businesses verifying the accuracy of personal information a customer already submitted, and if the submitted information turns out to be wrong, obtaining the correct data — but only for preventing fraud, pursuing legal remedies, or recovering a debt.¹
Researchers producing statistical reports, provided the personal information is not published, redisclosed, or used to contact anyone.¹

The DPPA also mandates release for matters tied to vehicle safety, theft prevention, emissions compliance, product recalls, and manufacturer performance monitoring. For these purposes the statute says the information “shall be disclosed.”¹

Notice what’s missing: personal curiosity, a bad date, a road-rage incident, wanting to know who owns the car parked outside your house. None of those fit.

What You Can Actually Do as a Private Citizen

Report It to the Police

If you witnessed a hit-and-run, reckless driving, stalking, or any other suspicious activity, give the plate number and vehicle description to local law enforcement. Officers can run the plate through motor vehicle databases and follow up. This is the most effective route because it puts the information in the hands of people who can act on it. Include the time, the location, and a description of what happened.

Run a VIN-Based Vehicle History Check

If you have the vehicle’s VIN (visible through the windshield on most cars, and stamped on a small plate at the base of the driver’s side), you can pull a vehicle history report. The National Insurance Crime Bureau runs a free VINCheck tool that cross-references theft claims and salvage records from participating insurers.³ Paid commercial services add accident records, title brands, and odometer readings. None of these reports name the owner. They cover the car’s past, not the person’s.

Hire a Licensed Private Investigator

A licensed PI can access motor vehicle records for a purpose the DPPA permits, such as locating a party to a civil lawsuit or a debtor. The PI needs a legally qualifying reason of their own; they can’t simply run a plate because you paid them to. If a PI offers to pull owner records with no questions asked, treat that as a warning sign.

Online License Plate Lookup Services

Plenty of websites advertise “free license plate lookups,” and this is where searchers most often go wrong. What the legitimate ones deliver is publicly available vehicle data: make, model, year, recall notices, sometimes title history. That information is not protected by the DPPA and is legal to share. A service telling you a plate belongs to a 2019 blue Honda Civic is not necessarily doing anything wrong.

A service claiming to hand out the registered owner’s name, address, or phone number to any member of the public who asks is a different story. That is either a DPPA violation or a bluff to collect your credit card information. Either way, it is not a route worth taking.

Penalties for Going Around the Rules

Misusing motor vehicle records carries consequences on two fronts.

It is a federal crime to knowingly obtain or disclose personal information from a motor vehicle record for any purpose the DPPA does not authorize. It is a separate offense to make a false representation to get the information — for example, claiming to be an insurer or a PI when you are not.⁴ A conviction carries a criminal fine.⁵

The person whose information was misused can sue in federal court. The court must award at least $2,500 in liquidated damages per violation, even if the plaintiff cannot show any actual financial harm. Punitive damages are available when the violator acted with willful or reckless disregard, along with reasonable attorney fees and litigation costs.⁶ In large-scale violations, those $2,500 floors stack per person affected, which is why class actions against data brokers and lookup services under the DPPA are common.

When You Genuinely Need to Know Who Owns the Car

Most situations where a private person wants to trace a plate have the same practical answer: call the police. If you were in a hit-and-run, witnessed a crime, or believe a vehicle is being used to stalk or harass you, law enforcement has both the legal authority and the database access to follow up.

If your situation is civil rather than criminal — a parking-lot dent where the other driver drove off, damage to your property from a neighbor’s vehicle — your insurance company or attorney can pursue the information through channels the DPPA authorizes. An insurer can run the plate for a claims investigation. An attorney in active litigation can pull records through court processes. Paying an online service that promises the owner’s identity, or misrepresenting yourself to a DMV clerk, is not just ineffective. It exposes you to federal liability with a $2,500-per-violation floor.⁶

1
Office of the Law Revision Counsel. 18 USC 2721 – Prohibition on Release and Use of Certain Personal Information From State Motor Vehicle Records
2
Office of the Law Revision Counsel. 18 USC 2725 – Definitions
3
National Insurance Crime Bureau. VINCheck Lookup
4
Office of the Law Revision Counsel. 18 USC 2722 – Additional Unlawful Acts
5
Office of the Law Revision Counsel. 18 USC 2723 – Penalties
6
Office of the Law Revision Counsel. 18 USC 2724 – Civil Action