In-Car driving instruction is available in the following languages:
Book Now!
Student Login
Contact Us
Menu
In-Car driving instruction is available in the following languages:
Book Now!
Student Login
Contact Us
Menu
Most drivers think about car security the traditional way: lock the doors, hide valuables, and set the alarm. But modern vehicle theft in Canada has changed dramatically, and the biggest threat to your car right now may not involve a crowbar or a broken window at all.
Canada has been experiencing record levels of vehicle theft, with Ontario among the worst-affected provinces. What is driving this surge is not more sophisticated criminals. It is widely available, inexpensive technology that exploits the same features that make modern vehicles convenient, keyless entry, push-to-start ignition, onboard computer ports, and connected telematics. Understanding how these attacks work is the first step to protecting yourself.
Vehicle cyberhacking refers to gaining unauthorized access to a car’s electronic systems without physical key entry. Modern vehicles contain dozens of electronic control units managing everything from engine function to door locks to GPS navigation. Each connected system is a potential entry point.
Unlike traditional theft, where a criminal needs to physically break into a car, many modern attacks can be carried out from outside the vehicle, sometimes from across the street, using equipment available online for under a few hundred dollars.
This is the most common method behind Canada’s vehicle theft surge, and it is alarmingly straightforward.
Your key fob constantly emits a low-level radio signal. When your car detects that signal nearby, it unlocks automatically. A relay attack uses two people and two small devices. One person stands near your house with a relay device that picks up the fob signal through your wall or door. The second person stands beside your car with a receiver. The device amplifies and retransmits the signal, tricking your car into thinking the fob is right outside. The doors unlock. The engine starts. The car is gone, often in under 60 seconds.
The equipment to carry out a relay attack is available online for well under $100. A class action lawsuit was filed in Quebec against 13 vehicle manufacturers specifically over keyless entry vulnerabilities, after massive numbers of thefts between 2021 and 2024.
The OBD-II port (On-Board Diagnostics port) is a small connector located under your dashboard, usually beneath the steering wheel. Every vehicle sold in Canada since 1996 has one. Mechanics use it to read fault codes and diagnose problems.
Thieves have learned to use it for something else entirely. Once inside a vehicle, a thief can plug a cheap programming device into the OBD port and reprogram a blank key fob to match your car’s specifications in minutes. The car then accepts the new key as legitimate and starts normally. Almost any push-to-start vehicle is vulnerable to this method.
The programming devices used to do this are sold online, often marketed as “automotive diagnostic tools,” for less than $1,000. Honda CR-V and Dodge Ram models were among the most targeted vehicles in Canada in 2024, partly due to vulnerabilities in their OBD systems.
Signal jamming is less common but worth knowing about because it can happen to anyone with a keyless entry car without them realizing it.
A thief uses a jamming device to block the signal sent from your fob when you press the lock button. Your car never receives the locking command. You walk away thinking it is locked. It is not. The thief then simply opens the door and accesses your vehicle, often targeting valuables rather than the car itself, or waits for an opportunity to access the OBD port.
The giveaway: if your car does not give its usual beep or flash when you lock it, check again and consider the possibility that a jamming device was used nearby. Always physically verify the doors are locked before walking away.
A less dramatic but real vulnerability worth mentioning: if you use your vehicle’s navigation system and have saved your home address as a shortcut, a hacker or thief who gains access to the system knows where you live. They also potentially know when you are not home.
Similarly, connected vehicles that link to mobile apps, home systems, or cloud services create additional access points. Each connection is only as secure as the weakest link in the chain.
A Faraday pouch is a small, inexpensive signal-blocking bag that you drop your key fob into when you are not using it. It completely blocks the fob’s radio signal, making it invisible to relay attack devices. You can find one for under $20 at most automotive or electronics retailers.
If you do not have a Faraday pouch, storing your fob in a metal tin, a metal-lined drawer, or even the refrigerator (as the original post mentioned, and it does still work) blocks the signal effectively. Wrapping in multiple layers of tinfoil works too, though a proper Faraday pouch is more convenient for daily use.
The key principle: when your fob is at home and you are not using it, its signal should not be able to reach your car.
OBD port locks are inexpensive physical devices that cover the port and prevent anything from being plugged into it without your knowledge or consent. If a thief cannot access the port, they cannot reprogram a new key. This is one of the most practical and underused theft prevention measures available to Canadian drivers.
Some vehicles also allow you to relocate the port to a less accessible location, or add a hidden switch that disables it entirely. Ask your mechanic or dealer about options specific to your vehicle model.
Avoid saving your exact home address as a favourite or shortcut in your vehicle’s navigation system. Instead, save a nearby landmark or intersection. It takes only a few seconds longer to navigate home, and it means a thief who accesses your system cannot immediately find out where you live.
Many modern vehicles allow you to turn off the passive keyless entry feature through the settings menu, so the car only responds to a deliberate button press on the fob rather than automatically detecting proximity. If you park in the same spot regularly or are in an area known for vehicle theft, consider disabling this feature. Check your owner’s manual for the steps for your specific vehicle.
Technology-enabled thieves are often looking for fast, low-risk targets. A visible steering wheel lock, a conspicuous alarm sticker, or a dashcam with visible recording indicators can be enough to make a thief move on to an easier target. These are not foolproof, but they add friction to the process and reduce your vehicle’s attractiveness as a target.
Manufacturers release software updates that often include security patches for known vulnerabilities in keyless entry systems and onboard computers. Many drivers ignore these updates, particularly if they require a dealer visit. Staying current with manufacturer updates is one of the simplest and most overlooked protections.
Insurance telematics devices and some aftermarket diagnostic dongles plug into the OBD port and remain connected permanently. These can create their own security exposure since they introduce a persistent connection to the vehicle’s computer systems. If you use one, research the manufacturer’s security practices, and disconnect it when not needed.
Given the prevalence of signal jamming, get into the habit of physically checking your door handle after pressing the fob button, rather than relying solely on the beep or flash. It takes one second and removes any uncertainty.
Report the theft to police immediately and obtain a report number for your insurance claim. Contact your insurance provider as soon as possible. If your vehicle has a factory GPS tracking system, report it to the manufacturer’s telematics service (such as GM’s OnStar or Toyota’s connected services) so they can assist with vehicle location in coordination with police.
In Ontario, vehicle theft is reported to local police or the OPP. Do not attempt to locate or recover the vehicle yourself.
Awareness is a core part of driving safely in any era, and that now includes awareness of how vehicle technology can be exploited. Good drivers are not just skilled at handling the car. They understand the environment they are operating in, including risks that are invisible.
Our Corporate Defensive Driving Course covers broad driver situational awareness, including security and risk awareness for professional and fleet drivers who may operate high-value vehicles regularly.
For drivers at any stage looking to build a thorough, up-to-date understanding of modern driving safety topics, our Driving Improvement Course (DIC) is a practical option worth considering.
What is a relay attack on a car? A relay attack uses two devices to intercept and amplify the signal from your key fob through a wall or door, tricking your car into thinking the fob is right outside. The doors unlock and the engine starts, all without the thief ever touching your actual key. It can be completed in under 60 seconds using equipment that costs well under $100.
Does tinfoil actually block key fob signals? Yes, wrapping a key fob in several layers of tinfoil does block the radio signal it emits. It is not as convenient as a Faraday pouch, but the principle is the same. Any sufficiently thick metal enclosure, a tin box, a metal drawer, or tinfoil wrap, will reduce or eliminate the signal a relay attack device can detect.
What is the OBD port and why is it a risk? The OBD-II port is a diagnostics connector under your dashboard that mechanics use to read fault codes. Thieves use inexpensive programming tools to plug into the port and reprogram a blank key fob to match your vehicle. An OBD port lock is a physical cover that prevents unauthorized access to the port.
How do I know if my car was signal jammed? If your car does not give its usual confirmation (beep, flash, or indicator response) when you press the lock button, the signal may have been jammed. Always check the door handle physically to confirm the car is actually locked before walking away.
Are newer connected cars more at risk of hacking than older cars? Generally yes. The more electronic access points a vehicle has, including Bluetooth, Wi-Fi, cellular connectivity, telematics, and keyless systems, the more potential entry points there are. Older vehicles with physical keys and fewer electronic systems are largely immune to these particular attack methods.
Is vehicle cybertheft covered by car insurance in Canada? Standard comprehensive auto insurance in Canada generally covers vehicle theft, including theft by electronic methods. However, coverage can vary by policy and insurer. Review your policy and speak with your broker if you want to confirm that technology-enabled theft is specifically covered.
Vehicle security is evolving as fast as vehicle technology. Browse our driving courses or contact us to learn more about staying safe on and off the road.
Click on an article below to learn more
