It’s easy to assume that with all the technology in newer cars, they must be super hard to steal — unfortunately this is not the case. In fact, one could argue that for sophisticated thieves it’s easier than ever before. Modern conveniences like proximity keys that allow for push-button start and passive keyless entry have created security vulnerabilities that allow cars to be stolen quickly and often quietly. In this article we will discuss the three main methods of “car hacking” that are most commonly used on vehicles that are only a few years old, but much of this information applies to nearly all vehicles with proximity key technology which dates back to the early-2000’s. This high-tech theft is a big business and very few cars are safe. Cars are often shipped overseas, VIN swapped and used/sold, stripped for parts, or used to commit other crimes.
CAN-Bus Attack
One of the latest trends in the theft of late model vehicles is the CAN-bus attack. CAN-bus car hacking is a type of vehicle theft that exploits the car’s internal Controller Area Network — the digital “nervous system” that lets different components of the car communicate with each other — by injecting commands that replicate those from a legitimate module. Thieves must first gain a point of entry by tampering and connecting their hacking device to a system in the CAN-bus (typically the headlights) and then send spoofed messages on the bus that can unlock doors, disable alarms or start the car. This type of theft is often identified by damage to a headlight or the wheel well area when thieves break parts to access the system. Cars with adaptive or “smart” headlights are typically targeted for this type of theft due to easy access to the CAN-bus, however the majority of newer vehicles can fall victim to this attack. Common models that are stolen using this method include the: Toyota Rav4, Honda CR-V, and Lexus RX SUVs (among many others of course).
Key Programming & OBD-II Port Exploits
Another type of “car hacking” is various exploits using the OBD-II port underneath your dash. “Brute force” OBD attacks are similar to CAN-Bus attacks where the thief uses special equipment built for theft plugged into your OBD port to force the car to start. Thieves will also often use key programmers that are either stolen from legitimate locksmiths or purchased from unscrupulous sellers to program a new key to your car. Unlike with CAN-Bus and relay attacks, the thieves will have to enter your vehicle by force unless you neglected to lock your doors, but once inside, they can get many models of cars started in as little as 30 seconds. The time it takes varies significantly by make, model and the skill level/equipment of the thief, but with an experienced thief most cars without additional security can be taken very quickly.
Signal Boosting Relay Attacks
Relay attacks are the third very common method of stealing modern vehicles. Relay attack car theft is when thieves copy the wireless signal from a push-to-start key fob. One thief stands near the house or building where the key is located, or follows the unaware owner in a public lot, and uses a repeater device to capture and amplify the fob’s signal, while a second thief stands by the vehicle with another device that receives the boosted signal. The car interprets this as the key being present, allowing the thieves to unlock the doors, start the engine, and drive away.
Be sure to read our full guide on Layered Defense for Auto Theft Prevention. But here are some ways to combat these types of theft:
Choose a Car That Uses an Standard Key
While it is more common than not for late model cars to be equipped with proximity keys that allow for push-to-start operation, choosing a car that still uses an ignition that must be turned with a regular chipped security key is much less desirable for thieves as it adds an extra step required to take the car and cannot be cloned using a relay attack.
Aftermarket Alarm with Immobilizer
Adding an aftermarket alarm system to your vehicle is a great way to increase your car’s security. Quality systems from brands like Compustar and Viper do much more than annoy your neighbors, they come with a wide variety of features that make theft harder and alert you of a theft attempt as soon as it happens. Some features include:
- Starter Immobilizers that prevent car from being started if alarm is armed- even with the key.
- 2-way notifications that alert you via your key fob or phone when your alarm is going off.
- Shock sensors that set off alarm when vehicle is hit
- Audio glass break sensors that listen for your glass being broken
- Tilt Sensors that can detect if your vehicle is being towed or jacked up to steal wheels.
- Built in GPS
- Blinking light for deterrence
(Read more about aftermarket alarm systems here)
Immobilizing Devices
Aftermarket immobilizers are an important part of your anti-theft plan. They create another challenge for a thief to face when attempting to steal your car and hopefully cause them to give up. Here are some of your options:
- IGLA Anti-Theft System– The IGLA Anti-Theft System is a high-tech, discreet vehicle immobilizer designed to prevent car theft by blocking the engine from starting unless a secret PIN code sequence is entered using existing vehicle controls, such as steering wheel buttons or window switches, or by utilizing their Bluetooth key fob or your phone. The IGLA system is deeply integrated with the vehicle’s electronic network and is resistant to relay attacks, key cloning, and CAN Bus hacking. It is difficult for thieves to detect or bypass. (Read more about IGLA here.)
- Ravelco– The Ravelco is another quality immobilizer option that is deeply integrated into your cars wiring. It works by using a unique plug, typically located under your dash or steering wheel, that is discretely wired deep into your vehicle’s wiring harness, that typically disrupts multiple systems when the plug is removed, leaving your vehicle unable to start. It is important to remember that the Ravelco will not work if you fail to remove the plug and take it with you when you leave your vehicle. (Read more about Ravelco here.)
- Certain types of aftermarket alarm systems– As stated before, many alarm systems can act as an immobilizer. While they tend to not be as easy to defeat as the above two options, they are most often sufficient at slowing down a thief enough for them to give up, and they are simpler to use, since you just have to press the lock/unlock button on your remote. (Read more on alarm systems here.)
- Kill switches– Kill switches offer a budget-friendly way to hinder vehicle theft, though they aren’t as reliable as more advanced immobilizers. They work by adding a hidden toggle, button, or magnetic switch into the starting circuit so the engine won’t crank when the switch is off. Their main weakness is that they don’t rely on a unique key or remote, meaning a thief who discovers the switch can easily bypass it. If you choose to install one, it’s worth taking extra time to hide it well and consider adding a fake, non-functional switch under the dash to throw thieves off. Most mechanics or confident DIYers can handle the installation. (Read more about kill switches here.)
- JDI Ghost Power RFID Kill Switch– The JDI Ghost Power RFID kill switch is a discreet and effective theft prevention device. This system uses a hidden RFID reader that only allows the vehicle to start when a programmed RFID tag is present—effectively acting as an invisible kill switch. Without the tag, power to the ignition system is cut, preventing the car from starting even with its key. (See more about Ghost Power Here)
- JDI Ghost Lock Tracking System/Remote Disable– The Ghost Lock allows you to track and remotely disable nearly any vehicle with an electronic fuel pump, allowing you to stop a thief in their tracks. (See more about Ghost Lock Here)
- Remote Battery Disconnect Switches– Remote battery disconnect switches are an inexpensive, easy-to-install option. They let you cut power to your vehicle with a remote-controlled switch on the negative battery cable. Their drawbacks are significant: shutting off the battery also disables any alarm system, and a thief who opens the hood can bypass the device. Still, for budget protection, they can be useful since many thieves won’t bother troubleshooting a car that suddenly has no power. A disconnected battery can also prevent relay attacks from working since thieves will not be able to unlock the car, and likely think they’re not getting your signal. (Read more on remote battery disconnect here.)
- Cyclops TAM-The Cyclops TAM replaces a relay in your vehicle and can be switched on or off using the included remote. When turned off it will prohibit your car from starting unless the relay is replaced, or you turn it back on with your remote. Since it will be in your fuse panel, it is not the hardest to bypass for a thief that actually wants to play mechanic, but it is still a good option that adds significant protection, is fairly cost effective, and can easily be installed yourself. (See more here)
Faraday Pouch/Box
For anyone with a vehicle equipped with push-to-start, it’s really a no brainer to at least have one of these signal blocking boxes to store your keys in at night. Faraday pouches and boxes are a cheap way to prevent thieves from using a relay attack to clone your key’s signal. You can use the Faraday pouch in your pocket to prevent relay attacks while out and about, the downside is you will have to take it out to unlock and start your car, so many people just use it at home, which is much better than nothing. Just remember, this only prevents relay attacks and will do nothing against other methods of car-hacking, so make sure you have other defenses. (See more about faraday pouches here.)
OBDII Port Lock
A lock on the OBD port is a great way to stop or delay thieves who must access this port to steal your vehicle. These locks block the port and require a key to remove, often if a thief actually does try to forcefully remove it, they will damage the port which means they still won’t be able to use it. While having to replace your OBD port may suck, it’s better than replacing your car, and these devices are cheap enough that it only makes sense to add to your “anti-theft toolbox”. (See more about OBD locks here.)
IGLA Keyless Block
The IGLA Keyless Block is an anti-theft device for vehicles equipped with proximity keys that allow the doors to be unlocked automatically when the key is close enough. It works by disabling this feature when the IGLA device’s Bluetooth key fob, or your phone is too far away, which keeps a thief’s cloned key from unlocking the car. (Read more about IGLA Keyless Block Here)
“The Club” and Similar Devices
Steering wheel locks (“The Club”) are inexpensive and widely used theft-deterrent devices. While they aren’t perfect—determined thieves can cut the lock or even the steering wheel to remove it—the bright, visible barrier is enough to make many criminals move on to an easier target. Given their low cost and the added layer of visual deterrence they provide, they’re a smart addition to your overall security plan, even if you already use more advanced systems like IGLA, Ravelco, or aftermarket alarms. (Read more about clubs here.)
Brake/Clutch Pedal Locks
Brake and clutch pedal locks come in various designs, but they all function by blocking the pedal from being pressed, which can keep the vehicle from being shifted or started depending on the model. They create an extra obstacle for thieves, though they’re less visible than steering wheel locks and can be a bit inconvenient for everyday use since they usually require installation from outside the car (Read more about pedal locks here.)
Gear Shifter Lock
A gear shifter lock offers a strong visual deterrent much like a steering wheel lock, and it can significantly slow down a thief. By preventing the shifter from moving, it keeps the vehicle stuck in park when installed correctly. Most thieves won’t want to spend the extra time cutting it off, and even if they try, the added effort increases their risk of being noticed. (See more about gear shifter locks here.)
CAN Bus Blocker
Metal shields are available for some models to make it more difficult to access the CAN Bus system from the exterior of the vehicle (See more here)
Removing a Fuse or Relay
A no-cost way to keep your car from starting is to pull a key fuse or relay and keep it with you. Most thieves won’t bother diagnosing why a vehicle won’t start and will move on. With basic know-how, guidance from your manual or mechanic, you can identify the correct fuse to remove, but be careful not to pull anything tied to your alarm or essential systems. Make sure not to lose the fuse or you could be in for a bad time. While dedicated immobilizers are far more convenient, this trick can serve as an extra layer of protection or a budget-friendly alternative when leaving your car unattended for long periods.
Tracking Devices
Tracking devices won’t prevent a theft from occurring, but they can aid in a rapid recovery in a situation that recovery might not otherwise happen. If you have a newer vehicle that is vulnerable to “car hacking” types of theft, it is important to remember you’re not dealing with dumb criminals here. These tend to be more experienced, well-organized thieves, so it is important not to rely on factory-installed tracking services such as OnStar, HondaLink, etc. as thieves already know exactly how to disable tracking from these systems. Your best bet is to utilize well-hidden wireless GPS devices (preferably not AirTags) and to increase your chances of recovery use multiple devices. There are many options for tracking devices available (Read more about them here)
Security Measures When Parked at Home
- Park in a garage (if you have one)– Keeping your car inside the garage whenever you’re at home is a great way to reduce the risk of theft for any vehicle. It not only adds an additional, potentially loud step to access your car (and likely another felony), it also keeps your car “out of sight—out of mind” for thieves scoping your neighborhood. While it will protect you from most thieves, it is not completely unheard of for thieves to break in to a garage, especially for high value cars (it happens more often with cars like Chargers/Challengers). So it is a good idea to alarm your garage, of course keep it locked, and (as always) make sure you have other anti-theft measures.
- Use home security cameras and lighting– Put extra pressure on thieves by having your driveway well lit with motion sensing floodlights and cameras pointed at your car and elsewhere on your property. Many thieves will not be deterred by this, but it is still a worthwhile step that makes your house just a little bit less desirable of a target, and the cameras will provide good evidence if anything happens. (Read more about lights and cameras here)
- Block in higher-risk cars with lower risk cars– If you know you have a car that’s at high risk for theft, parking a car that’s less commonly stolen behind it in your driveway can make stealing your car more difficult and deter many thieves.
- Install a driveway motion sensor– Driveway sensors can be used to give you an early warning that someone is in your driveway at night, allowing you to act much quicker in a theft situation. (Read more about driveway motion detectors here)
- Consider installing a gate– While it may be expensive, a property that is gated is a harder target for thieves of all types.
