James Hamilton at the Public Safety and National Security Committee

I would have to speculate on where they get them from. I would imagine that they're probably from unscrupulous exporters that the CBSA is not unaware of. You may have heard last year that they fined one particular exporter almost $40 million for having exported 2,400 vehicles without ever declaring them properly through the system.

There's a person who might, for a few dollars, share a VIN.