Skip to main content
car-securitykeylessrelay-attack

How to Protect Your Car from Keyless Theft and Relay Attacks

A car key fob inside a Faraday signal-blocking pouch on a hall table at night

Relay attacks are now the dominant form of car theft in the UK, accounting for more than half of all stolen vehicles according to Association of British Insurers data - and a standard factory immobiliser offers no defence. The most effective single countermeasure is a ghost immobiliser, which requires a secret PIN before the engine will start, rendering a relayed key signal useless. Layering that with a Faraday pouch, an OBD lock, and a visible physical deterrent gives the strongest overall protection.


How Keyless Car Theft Works

Modern cars with keyless entry broadcast a low-power radio signal from the key fob. When the fob is within range - usually a metre or two - the car unlocks automatically. Criminals have developed several ways to exploit this.

The relay attack - signal amplification

The most widespread method involves two criminals and two inexpensive electronic devices. One stands next to your parked car carrying a relay transmitter. The other walks up to your front door carrying a signal amplifier. The amplifier captures the faint signal your key fob emits from inside your home - through the door, walls, or hall table - and forwards it to the transmitter beside the car. The car receives what it believes is a genuine, close-range key signal, unlocks, and allows a keyless start. The equipment needed costs as little as £80 online. The theft typically takes under 60 seconds and leaves no trace of forced entry.

Thieves tend to operate in residential streets at night or in the early hours, targeting cars on driveways and in semi-private car parks. According to Office for National Statistics data for England and Wales, around 38% of vehicle thefts occur in these semi-private locations.

OBD and CAN bus injection

A smaller but growing category of thefts bypasses the wireless signal altogether. In an OBD attack, criminals gain brief physical access to the interior - sometimes by slipping a tool through a door seal - to reach the diagnostic port beneath the steering column. A device plugged into that port can be used to programme a blank key fob, giving permanent access. Thieves carrying out a CAN bus injection access the vehicle’s wiring through a more exposed entry point - frequently the headlight housing - and connect directly to the car’s internal network to send unlock and start commands. Both methods require momentary physical proximity rather than a relayed wireless signal.


How to Protect Your Car: A Layered Defence

No single measure is foolproof. Criminals adapt, and a determined, well-resourced gang will probe any single layer of security. The aim is to make your vehicle a harder target than the one parked next door.

Prevention checklist

MeasureApproximate costWhat it stopsEffectiveness
Faraday pouch (quality, tested)£10-£30Relay signal captureHigh - if used consistently
Metal tin / steel cashboxUnder £20Relay signal captureHigh overnight storage
Ghost immobiliser (e.g. Autowatch Ghost)£400-£600 fittedRelay attack start; OBD key programmingVery high
OBD port lock / cover£20-£60OBD key programmingModerate (physical barrier only)
Steering wheel lock£25-£80Opportunistic theft; deterrentModerate - visible deterrent
Wheel clamp£30-£100Vehicle movementModerate - visible deterrent
Driveway alarm / CCTV£50-£300Early warning; evidenceModerate
Keyless-off (manufacturer setting)FreeRelay attackHigh where available
Park front-against-wallFreeCAN bus / headlight attackLow-moderate

Faraday pouches: use them correctly

A Faraday pouch lined with metallic mesh blocks the radio frequency your key fob emits. This prevents a nearby amplifier from capturing the signal. To be effective:

  • Use it every time, not just occasionally.
  • Test it monthly - key inside the pouch, walk to the car and try the door handle. The car should not respond.
  • Replace it every 6 to 12 months. Daily folding and wear degrades the lining.
  • As an alternative for overnight storage, a sealed metal tin or small steel cashbox achieves the same shielding effect at lower cost.

Even placing keys on a kitchen table rather than a hall table - further from the front door - meaningfully reduces how easily a signal can be captured from outside.

Ghost immobiliser: the most robust electronic defence

A ghost immobiliser connects directly to the vehicle’s CAN bus. It requires the driver to press a sequence of existing cabin buttons - on the steering wheel, dashboard, or centre console - before the engine will start. It emits no radio frequency signal that thieves can detect. If a criminal unlocks the car via a relay attack and gets behind the wheel, they cannot start the engine without the PIN sequence.

The device is typically installed covertly, with no visible wiring or tell-tale switches. Many insurers recognise Thatcham-approved ghost immobilisers (category S7) and offer a premium reduction. The Autowatch Ghost 2 is the most widely installed unit in the UK; other brands include Pandora and Scorpion.

Fitting cost is typically included in the quoted price by a specialist installer. Our auto locksmith team in London can advise on aftermarket security options and arrange professional installation.

Turning off keyless entry

Some manufacturers allow the passive keyless function - where the car senses the fob and unlocks without a button press - to be disabled via the infotainment menu or by holding a button sequence on the fob. Check your vehicle handbook. If the feature can be switched off, the car requires you to press the fob button to unlock, which means no passive signal is emitted and a relay attack has nothing to capture.

OBD port protection

Fitting a physical OBD lock or cover makes it harder for criminals to access the diagnostic port quickly. On its own this is a moderate measure - a determined thief with time and tools can still remove it. The more robust approach is to pair an OBD cover with a ghost immobiliser: even if a new key is programmed through the port, the immobiliser still prevents the engine from starting without the PIN.

Physical deterrents

Steering wheel locks, wheel clamps, and driveway posts have lost none of their value. Most relay-attack thieves operate quickly and target easy vehicles. A visible steering lock signals that the car will require additional time and noise to move - enough to deter a significant share of opportunistic criminals. Parking with the front of the car close to a wall or garage door also limits access to the headlight area used in CAN bus injection attacks.


If Your Car Is Stolen: What to Do

If you discover your vehicle has been taken, call 999 immediately if the theft is in progress, or 101 to report it after the fact. Note the time you last saw it, the parking location, and whether any unusual activity was noticed nearby. Inform your insurer promptly. If you have a GPS tracker fitted, provide the tracking company’s details to police so they can coordinate a real-time recovery - tracked vehicles have significantly higher recovery rates.

City Locksmith London cannot recover a stolen vehicle, but we can help after the fact: contact us for a spare key cut and programmed, a replacement key fob, or advice on upgrading your vehicle’s security before you use the car again. Car key programming from £85 ex VAT; locked out of your car from £109 ex VAT. See the full locksmith price list for all automotive services.


How We Can Help

City Locksmith London is a 24/7 auto locksmith service covering all London postcodes, with a 25-minute average response time and over 15 years of experience. Our technicians are DBS-checked, fully insured, and carry no call-out fee. We can supply and programme spare keys for a wide range of makes and models, and advise on aftermarket security upgrades suited to your vehicle.

If you have been locked out, lost your keys, or need security advice after a suspected relay-attack attempt, get in touch for a free quote.

For context on how residential burglaries work alongside vehicle crime - criminals sometimes target both the car and the house in a single visit - see our related article on how burglars break into houses in London.

For cost guidance on replacement and spare key services, read our guide to how much it costs to replace a car key.


Frequently Asked Questions

See the FAQ section above for concise answers to the most common questions about relay attacks, Faraday pouches, ghost immobilisers, OBD theft, CAN bus attacks, keyless-off settings, and insurance cover.

Frequently Asked Questions

What is a relay attack on a car? +

A relay attack is a method of stealing a keyless-entry vehicle without the owner's key. Two criminals work in tandem - one stands near the car with a relay transmitter, the other stands close to the owner's home with an amplifier that captures the key fob's signal through walls. The amplified signal tricks the car into thinking the genuine key is present, unlocking the doors and allowing a keyless start. The whole process typically takes under 60 seconds and leaves no visible sign of forced entry.

Do Faraday pouches actually stop relay attacks? +

A quality Faraday pouch will block your key fob's radio signal and prevent a relay attack - but only if the pouch is used every time and is in good condition. Many cheap pouches leak signal through poor seams. To verify yours works, place your key inside, walk to your car and try to unlock it - the door should not respond. Replace the pouch every 6 to 12 months as daily use degrades the metallic lining. A sealed metal tin or steel cashbox offers a low-cost alternative for overnight storage.

What is a ghost immobiliser and does it stop relay theft? +

A ghost immobiliser is an aftermarket device, fitted covertly to the vehicle's CAN bus, that requires the driver to enter a unique PIN code using existing cabin buttons before the engine will start. It emits no radio frequency signal, so thieves cannot detect or intercept it. Even if a criminal unlocks the car via a relay attack, they cannot start the engine without the PIN. Ghost immobilisers are widely regarded as one of the most effective single countermeasures available against relay theft.

What is OBD port theft and how do I prevent it? +

OBD (On-Board Diagnostics) port theft involves criminals physically accessing the diagnostic socket - typically located beneath the steering column - to programme a blank key fob that permanently unlocks and starts the vehicle. Prevention options include a dedicated OBD lock (a physical cap that covers the port), fitting a ghost immobiliser (which renders a newly programmed key useless without the PIN), and parking so the driver's door is not easily accessible for covert entry.

Can I turn off keyless entry to prevent relay attacks? +

Some manufacturers allow you to disable the passive keyless-entry (walk-up unlock) function while retaining the remote key-press lock and unlock. Check your vehicle handbook or contact the manufacturer's customer service line. If the option is available, enabling this mode means the car will not respond to a relayed signal - because no signal should be present until you press the button yourself.

Does car insurance cover keyless theft relay attacks in the UK? +

Most comprehensive motor insurance policies in the UK cover theft via relay attack, as it constitutes theft of a vehicle without the owner's consent. However, insurers may reduce or reject a claim if there is evidence of negligence - such as leaving keys in the car or in plain sight near the front door. Fitting a Thatcham-approved security device (for example a category S7 ghost immobiliser) often qualifies for a premium discount and demonstrates reasonable precaution to insurers.

What is a CAN bus injection attack on a car? +

A CAN (Controller Area Network) bus injection attack, sometimes called a headlight hack, involves thieves physically accessing the vehicle's internal wiring harness - often through the headlight cavity - and connecting a device that sends commands directly to the car's electronic control units to unlock the doors and disable the immobiliser. It bypasses the need for a key signal entirely. Preventive measures include parking so the front of the vehicle is close to a wall or barrier, fitting a ghost immobiliser (which adds a PIN requirement on top of the CAN bus), and using a steering wheel lock as a visible deterrent.

Need locksmith help? Call 020 4524 6667

Our professional locksmiths are available 24/7 across London. No call-out fee, free quotations.

Call 020 4524 6667
Call Now: 020 4524 6667