Case File

The Car Stolen Without Its Key Ever Leaving the House

Not every case in this series involves a phone, a password or an account. Some involve nothing more sophisticated than physics and a car sitting exactly where its owner left it.

What Happened

A car sits parked in a driveway. Its key fob sits inside the house, on a table by the front door, nowhere near the vehicle. Within about a minute, using a pair of inexpensive signal-relay devices, thieves capture the fob's signal from outside the house and relay it to a second device held next to the car. Tricked into believing its key is right beside it, the vehicle unlocks and starts.

The Damage Caused

This is not a rare or theoretical scenario. Relay theft accounts for a significant share of vehicle theft in markets where keyless entry is common, disproportionately affecting higher-value vehicles precisely because they are more likely to have the keyless systems this attack targets. The owner typically has no warning at all: no alarm, no broken glass, no sign of forced entry, simply an empty driveway.

What Caused the Breach

Keyless entry systems were built for convenience. The car checks for the key's proximity and unlocks automatically, with no button press required. That convenience rests on an assumption the system has no way to verify, that if the key's signal is present, the key's owner authorised its use. Relay devices exploit exactly that gap, extending the key's signal across a distance the manufacturer never anticipated a legitimate use case travelling.

What Could Have Been Done to Avoid the Issue

A Faraday pouch, a signal-blocking case that stores the key fob when it is not in use, is the direct and inexpensive countermeasure, since it stops the relay attack at its first step by preventing the fob's signal from being captured at all. Many vehicles also allow keyless entry to be disabled overnight through the settings menu, worth doing given that most relay thefts happen while a car sits parked at home.

A steering lock or other visible physical deterrent adds a second layer for anyone who wants one, though the pouch alone addresses the specific mechanism this attack depends on. None of this stops theft by other means. It closes the one gap that makes an unattended, undamaged car this easy to take.

Every security measure involves a trade-off between protection and convenience. Where that balance should sit depends on the resources a realistic attacker would bring to bear against you specifically. For most people, a handful of consistent habits closes the majority of that gap. For those whose assets or profile make a determined, well-funded attacker plausible, a more considered approach becomes worth the investment.

At Executive Privacy Advisors, we build that approach around your specific threat profile rather than a generic checklist. We extend the same thinking to your whole household, not just one set of accounts.

Worried about digital security at home?

Request Audit

Published by Executive Privacy Advisors.

This article is for general informational purposes only and does not constitute security, legal or risk advice. Services described are subject to assessment, licensing and availability in your area. Your circumstances may differ and you should seek a professional assessment before making decisions.

← Back to all Case Files