Car security investigation: How W5 'stole' a car using a device we ordered online
This is part two of a three-part investigative series by CTV W5 into how car thieves are able to drive off with modern vehicles so easily. W5 correspondent Jon Woodward ordered a device that had been flagged by police and used it to clone a vehicle key.
A device that can be used to clone a car’s key fob and drive it away without the assistance of the owner can be ordered online, delivered within days and put to use in under an hour, a W5 investigation has found.
How do we know? Because we did it.
And the demonstration illustrates what some say is an ongoing security flaw, even as governments, law enforcement agencies and insurance companies rush to block a wave of thefts that totalled some $1.5 billion in value last year.
“I think we have a crisis on our hands in this country,” said the Canadian Automobile Association’s Elliott Silverstein, pointing to figures that show more than 70,000 vehicles were stolen across Canada in 2023.
“You think about a natural disaster, like a flood or a hurricane or a fire, and imagine it happening every day of the year without any end in sight. That’s what the auto theft issue is right now in Canada,” Silverstein said.
The federal government has passed new regulations to restrict some radio devices that could be used for car theft, after a national summit earlier this year. Figures from insurance investigative group Equite Association show auto theft has dropped 17 per cent this year.
But during a consultation on whether to restrict devices thieves used, the York Regional Police Service brought up brands of key reprogrammers that they say are also used in car thefts.
A thief uses a tablet device to access a vehicle in surveillance video obtained by W5
Those are the devices that can be seen on some surveillance videos, with thieves huddled over their tablet screens, usually with a cable plugged into the car’s computer.
They can also be used legitimately by car owners looking to get new keys or find faults with their vehicles.
The federal government told us they did restrict some devices – but those key programmer devices appeared to be widely available. So that’s what W5 decided to order.
Our device cost about $835.07 through online retailer Amazon.ca, and was sold by a Chinese company.
It came in a few days, in a black plastic carrying case with an accessory that allowed it to plug into the car, as well as two universal key fobs.
The device W5 ordered guided its user through the steps to clone a key — even though the original vehicle key was nowhere nearby
Once charged, it allowed us to download files corresponding to a variety of car models, including Ford and Chevrolet. Its operating system offered instructions about next steps.
W5 is not going to explain exactly how we used it. When we tried it on two vehicles in the CTV fleet, the key fobs were nowhere nearby.
The first try, on a Chevrolet SUV with a push-button ignition, didn’t work. The device offered error messages saying it couldn’t connect to the internet.
However, on another CTV vehicle, a Ford SUV with a push-button ignition, our device went through all of its steps, and one of those universal key fobs became matched to the car.
With that newly programmed key inside the Ford’s cab, the car started and I could drive it away.
W5 reporter Jon Woodward used a tablet device ordered online to investigate concerns police were raising about certain devices that can clone car keys
“These devices are out there, and this is a problem,” said Silverstein. “Is this like having lock picking tools for sale on the internet?”
We contacted Ford with the specific details of the demonstration. A company spokesperson, Matt Drennan-Scace, told us our demonstration didn’t reflect real world conditions, because the car doors were initially unlocked and we hadn’t set off an alarm in the car.
But locksmith and engineer Yaser Jafar, who uses the devices legally as part of his Hamilton-based company Auto Key Pro, said in his experience those devices can be used in those scenarios as well.
“The thieves, unfortunately, have their hands on the same exact tools, are doing the same exact steps to be able to steal the cars out there,” Jafar said.
Amazon has said that all devices for sale on its site are there legally, though even legal devices can be misused.
Manufacturer: Devices are 'not for illegal activities'
The device manufacturer, New York-based Autel, said in a statement to W5 that it’s aware that key reprogramming tools have been found in the possession of people involved in vehicle thefts, and it’s co-operating with American authorities looking to ask about its technology.
“Our immobilizer and key programming tools are designed for professional locksmiths to expand their repair service capabilities, not for illegal activities,” spokesperson Allison Whitney said.
“We have been enhancing the technical capabilities of our products to prevent their misuse, including integrating two-factor authentication. We are exploring other solutions, such as co-operating with third-party accreditation service providers,” Whitney said.
“The solution to reducing vehicle theft is a complex one. It will require the concerted efforts of all involved parties—automakers, professional tool developers, law enforcement, policymakers, and the driving public—to realize significant change. Autel is committed to being part of that solution,” she said.
Scace said Ford considers security a top priority and said it’s rolling out new devices to keep cars secure.
It launched “Stolen Vehicle Services” for Ford F-Series trucks in 2024, which featured a dedicated number with live agents who connect with law enforcement to track and recover stolen vehicles, Scace said.
The 2025 F-Series trucks offer the “Ford Security Package,” where vehicle owners receive theft alerts and can remotely disable their truck via the FordPass app, even if someone has an authorized key nearby, he said.
“In time, we will be expanding these features to other Ford vehicles,” he said.
Another product that could be used to block access by this device is offered by mechanic Ryan Jaipal of Durham Autohaus in Pickering, Ont.
Jaipal says he gets customers calling every day looking to make sure the car they replace isn’t as vulnerable as the car that was stolen.
“This client had his vehicle stolen twice already,” Jaipal said, gesturing to a Porsche 911 in his shop. “I can’t even count how many calls and e-mails I get a day.”
He recommends the Igla, which is a small device that can be installed within a car that requires a password to put the car in drive.
With that installed, the device could clone a key, but it would be useless unless the driver also entered their password.
Silverstein, of the CAA, said he thinks the federal government should consider restricting the device that we ordered, and also called for car manufacturers to improve security on their vehicles.
“It doesn’t take very long to use these tools to get access to the cars,” he said. “And given the fact that manufacturers have not tightened security standards enough, consumers are vulnerable.”
For tips on car theft, or any other story, please email Jon Woodward
CTVNews.ca Top Stories
Canada 'falling so consistently short' on defence spending has hurt standing on world stage, but improving: U.S. ambassador
U.S. Ambassador to Canada David Cohen says while Canada's defence spending is going in the right direction, the federal government's persistent failure to meet NATO targets has been damaging to the country's reputation on the world stage.
War monitor says Assad has fled Syria after rebels enter capital
The head of a Syrian opposition war monitor said early Sunday that Syria’s President Bashar Assad left the country for an undisclosed location.
Most Canadians would avoid buying U.S. products post-Trump tariff: Nanos survey
A majority of Canadians would be hesitant to buy U.S. goods in response to the proposed American tariff on products from Canada, according to a new survey.
Longer careers in hockey are linked to greater risk of CTE: study
The largest study ever done on the brains of male hockey players has found the odds of getting a neurodegenerative disease caused by repeated traumatic brain injuries increases with each year played.
Renovations underway to return one of the last Quonset-style theatres in Canada back to former glory
Community members in the small town of Coleman, Alta. are eagerly waiting for the grand re-opening of the historic Roxy Theatre now that renovations have started.
Canada Post strike: Union 'extremely disappointed' in latest offer, negotiator says
A negotiator for the Canadian Union of Postal Workers (CUPW) says the latest offer from Canada Post to end the ongoing strike shows the carrier is moving in the "opposite direction."
Search for UnitedHealthcare CEO's killer yields evidence, but few answers
As the search for UnitedHealthcare CEO Brian Thompson’s killer goes on, investigators are reckoning with a tantalizing dichotomy: They have troves of evidence, but the shooter remains an enigma.
Digging themselves out: With Santa Claus parade cancelled, Londoners make best of snowy situation
Londoners continue to dig themselves out from this week’s massive snowstorm.
Trump is welcomed by Macron to Paris with presidential pomp and joined by Zelenskyy for their talks
French President Emmanuel Macron welcomed Donald Trump to Paris with a full dose of presidential pomp for the reopening of the Notre Dame Cathedral.
Local Spotlight
Major Manitoba fossil milestones highlight the potential for future discoveries in the province
A trio of fossil finds through the years helped put Manitoba on the mosasaur map, and the milestone of those finds have all been marked in 2024.
The 61st Annual Christmas Daddies Telethon raises more than $559,000 for children in need
The 61st annual Christmas Daddies Telethon continued its proud Maritime tradition, raising more than $559,000 for children in need on Saturday.
Calgary company steps up to help grieving family with free furnace after fatal carbon monoxide poisoning
A Calgary furnace company stepped up big time Friday to help a Calgary family grieving the loss of a loved one.
'A well-loved piece': Historic carousel display from Hudson’s Bay Company store lands at Winnipeg shop
When a carousel setup from the Hudson’s Bay Company became available during an auction, a Winnipeg business owner had to have it.
Sask. doctor facing professional charges in circumcision case
A Saskatoon doctor has been accused of unprofessional conduct following a high-cost adult circumcision that included a request for the patient to text unsecured post-op pictures of his genitals.
Regina home recognized internationally for architectural design
Jane Arthur and her husband David began a unique construction project in 2014. Now, a decade later, their home in Regina's Cathedral neighbourhood has won a title in the Urban House and Villa category at the World Architecture Festival.
Calgary director Kiana Rawji turns her lens toward slums of Nairobi with 'Mama of Manyatta'
Two films shot in Kenya by a director and writer based in Brooklyn who grew up in Calgary are getting their Calgary premiere screening Saturday.
N.S. woman finds endangered leatherback sea turtle washed up on Cape Breton beach
Mary Janet MacDonald has gone for walks on Port Hood Beach, N.S., most of her life, but in all those years, she had never seen anything like the discovery she made on Saturday: a leatherback sea turtle.
'It moved me': Person returns stolen Prada bag to Halifax store; owner donates proceeds
A Halifax store owner says a person returned a Prada bag after allegedly stealing it.