Yes, a car can be stolen without its physical keys. Modern thieves use sophisticated electronic methods that exploit the wireless technology in your vehicle. The most common techniques are relay attacks, which amplify the signal from a key fob inside your home to unlock and start the car, and CAN injection attacks, where thieves physically access the car's network to send a command to start the engine.
The primary vulnerability lies in keyless entry and start systems. Thieves use a relay device to capture the faint signal emitted by your key fob, even through walls. One thief stands near your house with a transmitter, while an accomplice near the car uses a receiver. The receiver tricks the car into thinking the key is present, allowing them to unlock and drive away in under a minute.
| Common Theft Method | How It Works | Most Vulnerable Vehicles | Estimated Thefts (US Annual Estimate) |
|---|
| Relay Attack | Amplifies key fob signal to trick the car. | Models with keyless entry/push-button start (e.g., many Hyundai, Kia, Ford, Toyota models) | 40,000+ |
| CAN Injection | Accesses the car's internal network to send a start command. | Modern vehicles with CAN bus architecture (widespread across brands) | Data not fully tracked |
| OBD-II Port Hack | Uses the diagnostic port to program a new key. | Older models with less secure OBD-II systems (pre-2020 models often targeted) | 20,000+ |
| Code Grabbing | Intercepts and replicates the radio signal from your key fob when you lock the car. | Any vehicle with a standard remote key fob | Common, but less effective than relay attacks |
To protect your vehicle, use a Faraday pouch or box to block your key fob's signals when not in use. A simple, highly effective deterrent is a visible steering wheel lock. It signals to thieves that the effort required will be higher, making them likely to move to an easier target. Always park in well-lit areas and consider installing a GPS tracker for recovery.
