Disclosed herein are system, method, and computer program product embodiments for automatically detecting cloned vehicle identifiers. An embodiment operates by determining legitimate trajectory information and illegitimate trajectory information corresponding to vehicular travel in a geographic area, and training a decision model to detect a cloned vehicle identifier based on the legitimate trajectory information and the illegitimate trajectory information. Furthermore, the embodiment identifies vehicles potentially using a cloned vehicle identifier based on the decision model and common driving patterns within the geographic area. In some embodiments, enforcement agents are notified of the vehicles potentially using a cloned vehicle identifier.