The Battle Between Car Theft Technology And Anti-Theft Innovation

In a relay attack, two small electronic devices can make a car believe its key is sitting beside it, even when the owner is inside their house. One device picks up the signal from the key fob while the other passes it on to the vehicle, allowing thieves to unlock the doors and start the engine. It’s one of several techniques that have turned vehicle theft into a problem involving wireless signals, software and specialised electronic equipment.

Keyless entry, remote locking, connected electronics and vehicle trackers have all changed the way cars are secured. Unfortunately, the technology behind these features has also given criminals new opportunities to exploit weaknesses in vehicle security. Manufacturers have responded with upgraded authentication systems, software patches and alternative tracking methods, creating an ongoing contest between car theft techniques and the technology designed to stop them.

Jammers, Relay Boxes And Keys That Measure Distance

One way into a modern car involves a small signal jammer that blocks the communication between a key fob and the vehicle. The driver presses the lock button and walks away, believing the car is secure, while the interrupted signal means the doors remain unlocked. West Midlands Police warns drivers about this technique and recommends checking that their vehicle has actually locked before leaving it, including looking for signs such as automatically folding wing mirrors.

Relay attacks work by extending the key’s signal rather than blocking it. According to Which?, thieves use two relay boxes, with one positioned near the vehicle and the other close to where the key is kept. The equipment passes the signal between them, making the car believe its key is nearby. In a demonstration published in 2018, Which? showed a vehicle being stolen in just 18 seconds.

Jaguar Land Rover pioneered the development of ultra-wideband technology in 2018 to help counter this type of attack. Rather than simply detecting the presence of a key, the system can accurately measure its distance from the vehicle, making it much harder to fool with a relayed signal.

The manufacturer has also introduced security updates to the Body Control Module in eligible older vehicles, preventing thieves from driving away without a key. Jaguar Land Rover reported in November 2023 that more than 65,000 vehicles built from 2018 onwards had received security updates, with thefts of Range Rover and Range Rover Sport models built between 2018 and 2022 falling by more than 40%.

A Headlight, A Fake Speaker And A Door That Opens

Some theft techniques bypass the keyless entry system altogether by targeting the electronics inside the vehicle. An investigation by automotive cybersecurity specialist Ken Tindell and vehicle forensics expert Ian Tabor examined how thieves managed to steal a Toyota RAV4 using a technique known as Controller Area Network (CAN) injection.

The Controller Area Network is the communication system that allows a vehicle’s electronic control units to exchange information. In the RAV4 case, thieves accessed the wiring near a headlight to reach this network, then used an electronic device to send messages that appeared to come from the vehicle’s smart key receiver. The car effectively received instructions to unlock its doors and deactivate its immobiliser.

The device used in the attack was disguised as a JBL Bluetooth speaker, making it less conspicuous if someone noticed it being carried. Tindell also found that the electronic components inside cost around $10, highlighting how relatively inexpensive hardware can be used to exploit weaknesses in much more expensive vehicles. Although the investigation focused on a Toyota RAV4, Tindell warned that CAN injection is not limited to one manufacturer, with similar theft devices designed for vehicles from several brands.

Software Updates Become The New Padlock

Hyundai and Kia faced widespread thefts in the US after social media videos showed how certain older models without electronic immobilisers could be stolen by bypassing the ignition system. The thefts became associated with the so-called “Kia Challenge”, which spread across TikTok and other platforms, leading to a surge in theft claims and vehicle damage.

Both manufacturers responded with free anti-theft software updates for eligible vehicles. The update modifies the vehicle’s alarm and ignition security systems, activating an additional ignition-kill feature when the driver locks the car using the key fob. The system then requires the correct key to be present in the ignition before the engine can start.

According to the Highway Loss Data Institute, vehicles that received the update had theft-related insurance claim frequencies 53% lower than those without it. Whole-vehicle theft claims fell by an even larger 64%. However, subsequent research from the institute found that vandalism claim frequency increased among upgraded vehicles, which researchers suggested could be linked to failed theft attempts.

Blocking The Tracker, Then Tracking Around The Blocker

Vehicle tracking systems have become another important part of theft prevention and recovery, particularly when a stolen car needs to be located after it has left its parking space. However, criminals have also found ways to interfere with these systems by using signal jammers that disrupt satellite positioning and mobile network connections.

UK vehicle recovery company Tracker has developed a system combining satellite tracking, mobile network signals and Very High Frequency radio technology. The additional radio signal can help locate vehicles when satellite and mobile signals are being blocked, giving recovery teams another way to follow a stolen car.

A case reported by Tracker in May 2026 demonstrated how this works in practice. A stolen Toyota RAV4 was recovered within three hours despite the thieves using four active GPS jammers. The vehicle had travelled more than 110 miles from its original location before police intercepted it and arrested the suspects.

Tracker also credited its Mesh Network with helping locate the vehicle. When a stolen vehicle fitted with a Tracker unit passes another vehicle fitted with the same system, it can relay the stolen vehicle’s location back to the company’s monitoring network. This allowed location updates to continue during the journey, even while the thieves were using GPS jammers. The recovery is a company-reported case study rather than independent evidence of how every tracking system performs, but it demonstrates how recovery technology is adapting to signal interference.

Why Car Security Now Arrives As A Software Update

Vehicle security is increasingly tied to the software and electronic systems that control a car, rather than just its physical locks and keys. A weakness in a keyless entry system can lead to the development of distance-measuring technology, while an exposed communication network can force manufacturers to rethink how their electronic control units verify instructions. Even tracking systems need alternative ways to communicate when criminals start targeting their signals.

This also puts more responsibility on manufacturers to keep older vehicles secure after they have left the showroom. Jaguar Land Rover’s security updates and the Hyundai and Kia software upgrades show how changes to a vehicle’s software can address vulnerabilities years after its original design. For drivers, keeping up with available security updates and checking that their vehicle has properly locked are becoming part of everyday car ownership.

The technology used to steal vehicles will continue to change as manufacturers introduce new security measures. A more secure key can push criminals towards the car’s internal electronics, while stronger electronic protection makes tracking and recovery technology increasingly important. For the automotive industry, keeping a car secure is no longer just a matter of fitting a better lock at the factory. It’s an ongoing responsibility that follows the vehicle throughout its life.