Car security investigation: How W5 'stole' a car using a device we ordered online
This is part two of a three-part investigative series by CTV W5 into how car thieves are able to drive off with modern vehicles so easily. W5 correspondent Jon Woodward ordered a device that had been flagged by police and used it to clone a vehicle key.
A device that can be used to clone a car’s key fob and drive it away without the assistance of the owner can be ordered online, delivered within days and put to use in under an hour, a W5 investigation has found.
How do we know? Because we did it.
And the demonstration illustrates what some say is an ongoing security flaw, even as governments, law enforcement agencies and insurance companies rush to block a wave of thefts that totalled some $1.5 billion in value last year.
“I think we have a crisis on our hands in this country,” said the Canadian Automobile Association’s Elliott Silverstein, pointing to figures that show more than 70,000 vehicles were stolen across Canada in 2023.
“You think about a natural disaster, like a flood or a hurricane or a fire, and imagine it happening every day of the year without any end in sight. That’s what the auto theft issue is right now in Canada,” Silverstein said.
The federal government has passed new regulations to restrict some radio devices that could be used for car theft, after a national summit earlier this year. Figures from insurance investigative group Equite Association show auto theft has dropped 17 per cent this year.
But during a consultation on whether to restrict devices thieves used, the York Regional Police Service brought up brands of key reprogrammers that they say are also used in car thefts.
A thief uses a tablet device to access a vehicle in surveillance video obtained by W5
Those are the devices that can be seen on some surveillance videos, with thieves huddled over their tablet screens, usually with a cable plugged into the car’s computer.
They can also be used legitimately by car owners looking to get new keys or find faults with their vehicles.
The federal government told us they did restrict some devices – but those key programmer devices appeared to be widely available. So that’s what W5 decided to order.
Our device cost about $835.07 through online retailer Amazon.ca, and was sold by a Chinese company.
It came in a few days, in a black plastic carrying case with an accessory that allowed it to plug into the car, as well as two universal key fobs.
The device W5 ordered guided its user through the steps to clone a key — even though the original vehicle key was nowhere nearby
Once charged, it allowed us to download files corresponding to a variety of car models, including Ford and Chevrolet. Its operating system offered instructions about next steps.
W5 is not going to explain exactly how we used it. When we tried it on two vehicles in the CTV fleet, the key fobs were nowhere nearby.
The first try, on a Chevrolet SUV with a push-button ignition, didn’t work. The device offered error messages saying it couldn’t connect to the internet.
However, on another CTV vehicle, a Ford SUV with a push-button ignition, our device went through all of its steps, and one of those universal key fobs became matched to the car.
With that newly programmed key inside the Ford’s cab, the car started and I could drive it away.
W5 reporter Jon Woodward used a tablet device ordered online to investigate concerns police were raising about certain devices that can clone car keys
“These devices are out there, and this is a problem,” said Silverstein. “Is this like having lock picking tools for sale on the internet?”
We contacted Ford with the specific details of the demonstration. A company spokesperson, Matt Drennan-Scace, told us our demonstration didn’t reflect real world conditions, because the car doors were initially unlocked and we hadn’t set off an alarm in the car.
But locksmith and engineer Yaser Jafar, who uses the devices legally as part of his Hamilton-based company Auto Key Pro, said in his experience those devices can be used in those scenarios as well.
“The thieves, unfortunately, have their hands on the same exact tools, are doing the same exact steps to be able to steal the cars out there,” Jafar said.
Amazon has said that all devices for sale on its site are there legally, though even legal devices can be misused.
Manufacturer: Devices are 'not for illegal activities'
The device manufacturer, New York-based Autel, said in a statement to W5 that it’s aware that key reprogramming tools have been found in the possession of people involved in vehicle thefts, and it’s co-operating with American authorities looking to ask about its technology.
“Our immobilizer and key programming tools are designed for professional locksmiths to expand their repair service capabilities, not for illegal activities,” spokesperson Allison Whitney said.
“We have been enhancing the technical capabilities of our products to prevent their misuse, including integrating two-factor authentication. We are exploring other solutions, such as co-operating with third-party accreditation service providers,” Whitney said.
“The solution to reducing vehicle theft is a complex one. It will require the concerted efforts of all involved parties—automakers, professional tool developers, law enforcement, policymakers, and the driving public—to realize significant change. Autel is committed to being part of that solution,” she said.
Scace said Ford considers security a top priority and said it’s rolling out new devices to keep cars secure.
It launched “Stolen Vehicle Services” for Ford F-Series trucks in 2024, which featured a dedicated number with live agents who connect with law enforcement to track and recover stolen vehicles, Scace said.
The 2025 F-Series trucks offer the “Ford Security Package,” where vehicle owners receive theft alerts and can remotely disable their truck via the FordPass app, even if someone has an authorized key nearby, he said.
“In time, we will be expanding these features to other Ford vehicles,” he said.
Another product that could be used to block access by this device is offered by mechanic Ryan Jaipal of Durham Autohaus in Pickering, Ont.
Jaipal says he gets customers calling every day looking to make sure the car they replace isn’t as vulnerable as the car that was stolen.
“This client had his vehicle stolen twice already,” Jaipal said, gesturing to a Porsche 911 in his shop. “I can’t even count how many calls and e-mails I get a day.”
He recommends the Igla, which is a small device that can be installed within a car that requires a password to put the car in drive.
With that installed, the device could clone a key, but it would be useless unless the driver also entered their password.
Silverstein, of the CAA, said he thinks the federal government should consider restricting the device that we ordered, and also called for car manufacturers to improve security on their vehicles.
“It doesn’t take very long to use these tools to get access to the cars,” he said. “And given the fact that manufacturers have not tightened security standards enough, consumers are vulnerable.”
For tips on car theft, or any other story, please email Jon Woodward
CTVNews.ca Top Stories
DEVELOPING Police find bag carried by gunman who killed UnitedHealthcare's CEO, say he likely fled NYC on bus
Investigators found a backpack in Central Park that was carried by the shooter, police said Friday, following a massive sweep to find it in a vast area with lakes and ponds, meadows, playgrounds and a densely wooded section called 'The Ramble.'
A police photographer recounts the harrowing day of the Polytechnique massacre
Montreal crime scene photographer Harold Rosenberg witnessed a lot of horror over his 30 years on the job, though nothing of the magnitude of what he captured with his lens at the Polytechnique on Dec. 6, 1989. He described the day of the Montreal massacre to CTV Quebec Bureau Chief Genevieve Beauchemin.
Quebec premier wants to ban praying in public
Premier François Legault took advantage of the last day of the parliamentary session on Friday to announce to 'Islamists' that he will 'fight' for Quebec values and possibly use the notwithstanding clause to ban prayer in public places such as parks.
Northern Ontario man sentenced for killing his dog
WARNING: This article contains graphic details of animal abuse which may be upsetting to some readers. A 40-year-old northern Ontario man is avoiding prison after pleading guilty to killing his dog earlier this year.
'Home Alone' house up for sale for US$3.8 million in Chicago suburb – but not the one you're thinking of
Social media sleuths noticed that the house next door to the iconic 'Home Alone' house in Winnetka is now up for sale.
Purolator, UPS pause shipments from couriers amid Canada Post strike
Purolator and UPS have paused shipments from some courier companies as they try to work through a deluge of deliveries brought on by the Canada Post strike.
NDP's Singh forces debate on $250 cheques for more Canadians; Conservatives cut it short
With the fate of the federal government's promised $250 cheques for 18.7 million workers hanging in the balance, the NDP forced a debate Friday on a motion pushing for the prime minister to expand eligibility. The conversation was cut short, though, by Conservative MPs' interventions.
Sask. father who kept daughter from mom to prevent COVID-19 vaccine free from additional prison time
Michael Gordon Jackson, the Saskatchewan father who withheld his then seven-year-old daughter from her mom for nearly 100 days to prevent the girl from getting a COVID-19 vaccine, was handed a 12-month prison sentence and 200 days probation on Friday, but credited with time served.
South Korea president apologizes for declaring martial law, but did not resign. Now he faces an impeachment vote
South Korean lawmakers are set to vote later Saturday on impeaching President Yoon Suk Yeol over his short-lived attempt to impose martial law, as protests grew nationwide calling for his removal.
Local Spotlight
'A well-loved piece': Historic carousel display from Hudson’s Bay Company store lands at Winnipeg shop
When a carousel setup from the Hudson’s Bay Company became available during an auction, a Winnipeg business owner had to have it.
Regina home recognized internationally for architectural design
Jane Arthur and her husband David began a unique construction project in 2014. Now, a decade later, their home in Regina's Cathedral neighbourhood has won a title in the Urban House and Villa category at the World Architecture Festival.
Calgary director Kiana Rawji turns her lens toward slums of Nairobi with 'Mama of Manyatta'
Two films shot in Kenya by a director and writer based in Brooklyn who grew up in Calgary are getting their Calgary premiere screening Saturday.
N.S. woman finds endangered leatherback sea turtle washed up on Cape Breton beach
Mary Janet MacDonald has gone for walks on Port Hood Beach, N.S., most of her life, but in all those years, she had never seen anything like the discovery she made on Saturday: a leatherback sea turtle.
'It moved me': Person returns stolen Prada bag to Halifax store; owner donates proceeds
A Halifax store owner says a person returned a Prada bag after allegedly stealing it.
'It's all about tradition': Bushwakker marking 30 years of blackberry mead
The ancient art of meadmaking has become a holiday tradition for Regina's Bushwakker Brewpub, marking 30 years of its signature blackberry mead on Saturday.
Alberta photographer braves frigid storms to capture the beauty of Canadian winters
Most people want to stay indoors when temperatures drop to -30, but that’s the picture-perfect condition, literally, for Angela Boehm.
N.S. teacher, students help families in need at Christmas for more than 25 years
For more than a quarter-century, Lisa Roach's middle school students have been playing the role of Santa Claus to strangers during the holidays.
Nova Scotia girl battling rare disease pampered with Swiftie spa day
A Nova Scotia girl battling a rare disease recently had her 'Wildest Dreams' fulfilled when she was pampered with a Swiftie salon day.