The new car theft: minutes, not hours

Car theft used to mean a smashed window and a hotwired ignition. Today it is quieter, faster and increasingly driven by technology built into the very cars we drive.

The two methods causing the most concern in Victoria are relay attacks and OBD reprogramming. A relay attack exploits the fact that a keyless fob is constantly broadcasting a low-range signal, even sitting on the hallway table. One thief holds a device near your house to capture that signal, a second holds a receiver near your car, and the signal is relayed between them, tricking the car into thinking the real key is present. It takes under a minute, leaves no broken glass, and does not trigger the alarm.

OBD reprogramming is even more direct. Thieves gain access to the cabin (for example, if you have left the car unlocked), plug a handheld programming device into the OBD-II diagnostic port under the dashboard, and within 60 to 90 seconds override the immobiliser and program a blank key. Victoria Police has attributed 30 to 40 per cent of vehicle thefts in the state to this method, and the devices are legally sold online for locksmith use, meaning no special access is required to obtain one.

The numbers reflect how serious this has become. Victoria recorded a sharp rise in motor vehicle theft, with tens of thousands of vehicles stolen over the past year, the highest level in over two decades. Around one in five thefts show no sign of forced entry, a strong indicator of electronic methods rather than traditional break-ins.

There is a lot drivers can do without spending much. A Faraday pouch, which blocks your key fob's signal entirely, costs very little and stops relay attacks outright, simply store both the primary and spare fob in one. An OBD port lock, a small physical device fitted under the dashboard, blocks access to the diagnostic port and defeats reprogramming attempts. Parking in a locked garage or well-lit, visible spot removes the "quiet minute" thieves rely on. For newer vehicles, check whether keyless entry can be temporarily disabled through settings, and enable PIN-to-drive if your model supports it.

If your car is stolen, contact police immediately, notify your insurer, and if a relay attack is suspected, secure any remaining keys in a Faraday pouch straight away in case thieves attempt to return.