Someone with your license plate number can look up your vehicle’s make, model, year, and sometimes its title or accident history, but federal law keeps your name, home address, phone number, and other personal details out of their reach unless they fit a narrow list of authorized users. The bigger risks from a plate number floating around are not database lookups. They are plate cloning, fraudulent toll and camera charges, and being tracked through automated license plate reader networks. So the honest answer to what can someone do with your license plate number is: less than you might fear on the identity side, and more than you might expect on the fraud and surveillance side.
What a Stranger Can Actually Look Up
Every registered vehicle sits in a state DMV database that ties the plate to two separate categories of information. Vehicle data covers the make, model, year, color, body type, and Vehicle Identification Number. Owner data covers the registered owner’s name, mailing address, and date of birth.
Those two categories are treated very differently. A random person running your plate through a public lookup tool will usually see only the vehicle side: make, model, year, sometimes title history. The owner information is locked behind the federal Driver’s Privacy Protection Act, which defines “personal information” to include name, address, phone number, photograph, Social Security number, and medical or disability information.1Office of the Law Revision Counsel. 18 U.S. Code 2725 – Definitions
One boundary worth knowing: the DPPA does not protect records of traffic accidents, driving violations, or license status. Those may be easier to obtain depending on your state’s own rules.
Who Can Legally Get Your Personal Details
The DPPA lists specific categories of people and entities that can request the personal information behind a plate. A curious neighbor, an angry ex, or a stranger from a road-rage incident is not on it. The permitted users include:
- Government agencies and law enforcement carrying out official functions, including courts.
- Insurance companies investigating claims, running antifraud checks, or underwriting policies.
- Anyone involved in a civil, criminal, or administrative proceeding, including service of process and pre-litigation investigation.
- Licensed private investigators and security services operating under state licenses.
- Businesses verifying personal information you already gave them, but only to prevent fraud or recover a debt.
Each of these requires a specific, documented purpose.2Office of the Law Revision Counsel. 18 USC 2721 – Prohibition on Release and Use of Certain Personal Information From State Motor Vehicle Records The DPPA was also amended to require a driver’s affirmative “opt-in” consent for disclosures that fall outside these statutory exceptions, effective since June 2000.
Practical consequence: if you are in a fender bender, hit-and-run, or personal injury case, the other side’s insurer or attorney can lawfully obtain your registration information. Privacy protections do not shield you inside a legitimate claim or lawsuit.
Plate Cloning and Toll Fraud
This is where a plate number becomes genuinely dangerous. Plate cloning happens when someone copies your number onto a duplicate plate and mounts it on a different vehicle, typically to dodge tolls, commit crimes under your identity, or disguise a stolen car. The cloned vehicle runs up toll charges, red-light and speed camera tickets, and sometimes criminal records that all get tied back to your registration.
Most victims find out through the mail. A toll bill for a road they have never driven. A red-light ticket from a city they have never visited. Occasionally, police knocking about a crime caught on a traffic camera. The FBI advises anyone who suspects their plate has been cloned to contact local police right away.3Federal Bureau of Investigation. Advice and Solutions for Car Cloning Beyond the report, take these steps:
- Contest every fraudulent citation. Contact the issuing agency with your police report number. Most jurisdictions will dismiss tickets when you can show your vehicle was not there.
- Notify your DMV. Some states will issue new plates to cloning victims. Ask about expedited replacement.
- Document where your car actually was. Gather toll records, GPS data, work attendance logs, or anything else that places your vehicle elsewhere when the fraudulent charges occurred.
- Watch for escalation. If the cloned plate is used during a crime, having a police report already on file is what clears you quickly.
Federal law treats tampering with vehicle identification as a crime carrying up to five years in prison.4Office of the Law Revision Counsel. 18 U.S. Code 511 – Altering or Removing Motor Vehicle Identification Numbers When the person using your cloned plate also uses your identity to commit fraud, aggravated identity theft adds a mandatory two-year consecutive prison sentence on top of the underlying charges.5Office of the Law Revision Counsel. 18 U.S. Code 1028A – Aggravated Identity Theft
One related scam to know about: fake unpaid-toll text messages. No court or toll authority sends a text demanding payment or asking you to scan a QR code. If you get one, do not tap the link. Log into your toll account directly or call the agency’s verified number to check for real charges.
Automated Plate Readers and Location Tracking
Police can run any plate at any time and pull the full DMV record, plus check it against databases of stolen vehicles, wanted persons, and outstanding warrants. Automated License Plate Recognition systems have scaled that up dramatically. Cameras mounted on patrol cars and fixed locations capture, analyze, and store plate information as vehicles pass, comparing each plate against law enforcement lists in real time.6U.S. Department of Homeland Security. Automatic License Plate Readers A match to a stolen vehicle, missing person, or active Amber or Silver Alert notifies the officer immediately.7U.S. Department of Homeland Security. Automated License Plate Readers Market Survey Report
The privacy concern is not the alerts. It is the passive collection. These systems record every plate they scan, not just matches, which builds a detailed log of where vehicles go and when. At least 16 states have laws regulating how long ALPR data can be retained, with limits ranging from 3 minutes in New Hampshire to 150 days in Arkansas. Some states require warrants before officers can access stored ALPR data. Others classify the records as confidential and exempt from public records requests. In states without ALPR-specific legislation, retention policies are set by individual agencies, and your location data could sit in a database indefinitely.
What to Do If Your Plate Information Is Misused
If you believe someone has improperly accessed your DMV records or is using your plate for harassment, fraud, or stalking, work through these steps in order:
- File a police report. This creates the official record you will need if the misuse involves stalking or identity theft.
- Contact your state DMV. Report the suspected breach so the agency can look at how your information was accessed and whether an employee or contractor was involved.
- File an FTC identity theft report. If plate or registration information has been used as part of a broader identity theft, IdentityTheft.gov walks you through a recovery plan.8Federal Trade Commission. Assistant – IdentityTheft.gov
- Talk to a privacy attorney. The DPPA gives you a private right of action in federal court against anyone who improperly obtained or used your personal information from motor vehicle records.
What You Can Recover Under the DPPA
The DPPA is set up to make misuse expensive for the person who does it. Anyone who knowingly obtains, discloses, or uses personal information from a motor vehicle record for an unauthorized purpose can be sued in federal court. Available remedies include:
- Liquidated damages of at least $2,500. That is a floor, not a ceiling. Actual damages can exceed it, but a court will award no less than $2,500 per violation even without proof of specific financial harm.
- Punitive damages, when the violator acted with willful or reckless disregard for the law.
- Attorney fees and litigation costs, which the losing party can be ordered to cover.
These remedies come from the DPPA’s civil action provision, which lets private individuals bring suit directly.9Office of the Law Revision Counsel. 18 U.S. Code 2724 – Civil Action Enforcement does not depend on a prosecutor picking up the case. If someone pulled your records illegally, you can go after them yourself. State laws add another layer on top, and most states treat stalking or harassment enabled by improperly obtained personal information as a separate offense.