Car Key Relay Attacks

Car key relay attacks let thieves unlock and steal your car without ever touching your keys. They use two devices to amplify and relay the signal from your key fob inside your house to your car in the driveway. The car thinks the key is right next to it, unlocks, and starts. The whole thing takes less than a minute.

This isn’t theoretical. It’s happening regularly in neighborhoods across the country. Modern cars with keyless entry systems are vulnerable. The technology is cheap and available online. Your car could be stolen while you’re sleeping and your keys are sitting on your kitchen counter.

Understanding how these attacks work helps you protect against them. The solution is straightforward, but you need to actually implement it.

How Relay Attacks Actually Work

Your key fob constantly broadcasts a low-power radio signal. This is how keyless entry works. Walk up to your car with the key in your pocket, and the car detects the signal, unlocks the doors, and lets you start the engine.

The signal range is intentionally short. Maybe 3 to 10 feet depending on the system. This is supposed to be a security feature. Your car only unlocks when the key is very close.

Relay attacks exploit this system. Here’s the process:

One thief stands near your house with a relay device. This device is basically an amplifier and transmitter. It picks up the weak signal from your key fob inside your house and boosts it.

A second thief stands by your car with another device. This one receives the boosted signal from the first device and rebroadcasts it right next to your car door.

Your car receives what looks like a legitimate signal from your key fob. It thinks your key is next to the door. The doors unlock. The thief gets in, the car starts, and they drive away.

Your key never left your house. You didn’t lose it or have it stolen. The signal was just extended wirelessly from inside your home to your car outside.

How Fast This Happens

The entire attack takes 30 seconds to 2 minutes. Most people wouldn’t even notice suspicious activity if they happened to look outside.

The thieves don’t need to break windows, hotwire anything, or make noise. One person stands casually near your house. Another walks up to your car, opens the door, gets in, and drives away. Looks almost like a normal person getting into their own car.

Some security camera footage shows thieves working in pairs, one near the house’s front door or garage, the other by the target vehicle. They’re often gone before anyone realizes what happened.

By the time you notice your car is missing hours later, there’s no evidence beyond maybe some video footage of two people standing around. No broken glass, no forced entry, nothing obviously criminal-looking.

Which Cars Are Vulnerable

Any car with keyless entry is potentially vulnerable. This includes push-button start systems and systems where you don’t need to take the key out of your pocket.

Luxury brands were targeted first because they were early adopters of keyless systems. BMW, Mercedes, Audi, Tesla, Range Rover, Lexus. But the technology spread to mainstream vehicles.

Now you see keyless entry on Honda, Toyota, Ford, Chevy, Nissan, and basically every manufacturer. Mid-range cars and even economy models have this feature. If your car has push-button start, you’re probably vulnerable.

Some manufacturers have implemented security updates to make relay attacks harder. Rolling codes, encrypted signals, time-based authentication. But determined thieves adapt. The cat-and-mouse game continues.

Older cars with traditional keys aren’t vulnerable to relay attacks specifically, though they face other theft methods. It’s the “convenience” of keyless entry that creates this particular vulnerability.

Why This Became So Common

The equipment is cheap and easy to get. Relay devices cost $100 to $300 online. They’re sold as “car testers” or “signal range extenders” with legitimate-sounding descriptions.

No special technical skills required. If you can use a walkie-talkie, you can use a relay device. The technology does the work. The thief just needs to stand in the right places.

The success rate is high. If the car has keyless entry and the keys are close enough to an exterior wall, the attack works. Thieves don’t need to pick locks, bypass alarms, or defeat sophisticated security.

Police response is often too slow. By the time you discover your car missing and report it, the thieves are long gone. Many stolen cars are driven to chop shops or shipped overseas within hours.

Insurance companies pay out. The theft appears legitimate since the car was unlocked with what the system thinks is the correct key. There’s no evidence of forced entry to contest.

Real World Examples

Security researchers have demonstrated relay attacks on dozens of car models. YouTube has videos showing how it works. This isn’t secret or theoretical.

Police departments in multiple countries have issued warnings about relay attacks. They’ve recovered relay devices from arrested thieves. The technique is documented and known.

Insurance claims for keyless entry vehicle thefts have increased significantly in recent years. Some insurers in high-theft areas now ask if you use signal blocking for your keys. A few have increased premiums for keyless entry vehicles.

Neighborhoods see patterns. Multiple cars stolen over a few weeks, all with keyless entry, all taken overnight from driveways. Same method every time.

Ring doorbell and security camera footage often shows the same pattern. Two people working together, one near the house, one by the car. Quick, efficient, gone in under a minute.

How Faraday Bags Prevent Relay Attacks

A Faraday bag blocks the radio frequency signal your key fob broadcasts. When your keys are inside a properly sealed Faraday pouch, the signal can’t escape. There’s nothing for relay devices to amplify.

The electromagnetic shielding in the bag intercepts the radio waves and prevents them from reaching the outside. Your key fob keeps trying to broadcast, but the signal stops at the bag’s conductive material.

This means relay devices get nothing. They can stand right next to your house with maximum amplification, and they’ll pick up zero signal. Your keys are effectively invisible to their equipment.

The bag needs to be sealed properly. An open Faraday pouch doesn’t work. But when sealed correctly according to the manufacturer’s instructions, it provides complete signal blocking.

Signal-blocking pouches for car keys stop relay attacks by preventing thieves from detecting or amplifying your key fob’s transmission.

This is a simple, reliable solution. Drop your keys in the pouch when you get home. Seal it. Your car stays locked and protected until you take the keys out the next time you need them.

For more on how this electromagnetic shielding works, see what Faraday bags do.

Other Prevention Methods

Faraday bags are the most reliable solution, but there are alternatives worth knowing about.

Metal Boxes or Tins

If a metal container seals completely with no gaps, it can block signals like a Faraday cage. Some people use metal cookie tins or similar containers.

This works in theory. In practice, most metal boxes have small gaps at the lid that let signals through. You’d need to test it to be sure it actually blocks your key fob’s signal.

Metal boxes are also inconvenient. Bulky, not portable, and you need to remember to put your keys in it every time. Compliance becomes an issue.

Refrigerators or Microwaves

Some people put keys in refrigerators or unplugged microwaves, which can act as Faraday cages.

This is impractical for daily use. You’re not going to open your fridge every time you need your keys. And not all refrigerators or microwaves provide adequate shielding. The door seals aren’t designed for this purpose.

It’s better than nothing as a temporary solution, but not sustainable long-term.

Key Fobs with Motion Sensors

Some newer key fobs go to sleep when they haven’t moved for a while. This stops the signal broadcast after the key sits still for several minutes.

This helps, but it’s not foolproof. The key still broadcasts for those first few minutes after you set it down. If thieves act fast, they can still relay the signal.

Also, not all key fobs have this feature. You’re dependent on your car manufacturer implementing it.

Steering Wheel Locks

Physical steering wheel locks prevent driving the car even if someone gets in and starts it. This is a different approach than preventing signal relay.

These are visible deterrents. Thieves often move on to easier targets when they see a steering wheel lock. But they don’t prevent the relay attack itself, just the theft after the car is unlocked.

Combined with signal blocking, steering wheel locks provide layered security. But alone, they don’t address the relay vulnerability.

Parking in a Garage

If your car is in a closed garage and your keys are far from the garage walls, relay attacks become harder. The signal has to travel further, and walls provide some attenuation.

This isn’t reliable protection. Signals can still penetrate walls, especially exterior walls of houses. The relay devices are powerful enough to overcome reasonable distances.

Garages help reduce opportunity, but they’re not prevention. And many people don’t have garages or park on the street.

What Doesn’t Work

Some supposed solutions don’t actually prevent relay attacks.

Wrapping keys in aluminum foil might block signals if done perfectly with multiple layers and no gaps. But it’s impractical, looks ridiculous, tears easily, and needs constant replacement. Nobody consistently does this.

Keeping keys far from doors helps a little by making the signal weaker. But relay devices are designed to amplify weak signals. This might stop the least sophisticated attacks but won’t deter determined thieves.

Disabling keyless entry on cars that allow it works but defeats the purpose of having the feature. If you’re going to disable it, you might as well use signal blocking when you don’t need keyless entry active.

Aftermarket alarms alert you after someone’s already in your car. They don’t prevent the relay attack from working. The car still unlocks and starts.

OBD port locks prevent some types of theft but don’t stop relay attacks. The car still unlocks and starts. The thieves just can’t reprogram keys using the OBD port.

Cost of Prevention vs Cost of Theft

A quality Faraday pouch for car keys costs $15 to $30. One-time purchase, lasts for years.

Replacing a stolen car means insurance deductibles of $500 to $1,000, increased premiums, rental car costs while you wait for replacement, and the hassle of dealing with police reports and insurance claims.

Plus the emotional stress of having your car stolen and the time lost dealing with everything. Your car might be recovered eventually, but possibly damaged or stripped for parts.

Even if insurance covers everything, you’re still dealing with significant inconvenience and cost. A $25 Faraday pouch is trivial compared to this.

The math is obvious. Prevention costs almost nothing. The problem costs thousands in money and stress.

Why People Don’t Protect Themselves

Most people don’t know relay attacks exist. They’ve never heard of it. They don’t realize their keyless entry system creates this vulnerability.

Others know about it but figure “it won’t happen to me.” Until it does. Then they wish they’d spent $25 on a Faraday pouch.

Some people find the extra step of putting keys in a pouch annoying. They don’t want to add friction to their routine. This is a choice, but it’s choosing convenience over security.

A few people don’t believe the threat is real or think their particular car is somehow immune. Security researchers and police departments disagree.

The solution is cheap, simple, and effective. The main barrier is awareness and motivation to actually use it consistently.

Implementation Tips

Buy a Faraday pouch designed for car keys. Test it to make sure it works with your specific key fob. Stand next to your car with the key in the sealed pouch and verify the doors don’t unlock.

Keep the pouch somewhere convenient. Next to where you set your keys down every day. If it’s inconvenient, you won’t use it consistently.

Make it a habit. Keys go in the pouch every time you come home. Take them out when you leave. Consistent use is what provides protection.

If you have multiple cars or keys, get multiple pouches. Label them if needed. Each set of keys needs its own protection.

Test the pouch periodically. Materials can degrade over time. Verify it still blocks signals every few months by trying to unlock your car with the keys sealed inside.

For testing methods and what to look for, see how to test a Faraday bag.

The Insurance Angle

Some insurance companies in high-theft areas are starting to ask about signal blocking protection during policy applications or renewals. They know relay attacks are common and want to assess risk.

A few insurers offer premium discounts for using signal blocking devices. The discount might not be huge, but it can offset the cost of the Faraday pouch.

If you file a claim for a stolen keyless entry vehicle, insurers might ask if you used any theft prevention measures. Having a Faraday pouch shows you took reasonable precautions.

Some insurers in extremely high-theft areas have increased premiums specifically for keyless entry vehicles or even declined to insure certain models known to be frequently targeted.

The insurance industry sees this as a real, quantifiable risk. That should tell you something about how common these thefts are.

Long-Term Outlook

Car manufacturers are working on better security for keyless entry systems. Encrypted signals, ultra-wideband technology, motion sensors, time-based authentication.

These improvements help. But thieves adapt. When one method becomes harder, they find another vulnerability or buy upgraded equipment.

The fundamental problem is that any wireless system can potentially be intercepted or manipulated. Perfect security through wireless technology alone is difficult.

Physical signal blocking through Faraday bags remains reliable because it doesn’t depend on software security or encryption. The signal physically can’t escape the bag. No amount of clever hacking or technology defeats basic physics.

Even as car security improves, signal blocking remains a simple, effective layer of protection. It works now and will continue working regardless of what security innovations manufacturers implement.

Making Your Decision

If you have a car with keyless entry, you’re vulnerable to relay attacks. This isn’t maybe or might be. It’s a documented attack method that works on most keyless entry systems.

The question is whether you’re in an area where these attacks happen and whether the modest cost and minor inconvenience of protection is worth it to you.

In areas with high car theft rates, protection makes obvious sense. In low-crime areas, your risk is lower but not zero. Thieves travel to where the cars are.

The cost is low enough that even occasional risk might justify it. Insurance deductibles and hassle of a stolen car far exceed the cost of a Faraday pouch.

Understanding how long Faraday bags last helps you know that this is a one-time investment for years of protection, not an ongoing cost.

Your car, your keys, your choice. But make it an informed choice based on understanding the threat and the available protection.

Related posts: