The old style automobile theft tactic making a comeback: Here’s how you can keep away from turning into a sufferer
Car thieves are continuously turning to new methods and the latest tech to gain an upper hand on manufacturers, vehicle security providers and the police to steal motors.
But they’re also reverting to old hat tactics used years ago as a means of pinching cars, insurance experts are warning.
And one that’s rearing its ugly head is ‘third key’ thefts.
This is according to the nation’s largest owner-managed loss adjusting and claims solutions group, QuestGates, which warned of the practice making an unwelcome comeback having identified a recent case with a high-end luxury motor.
It says the key copying technique is being ‘reinvented for the digital age’ by criminal gangs who are starting to shift away from a reliance on relay attacks on cars with keyless technology.
Below, we explain how the third key theft tactic is deployed and speak to a car crime expert to get his top tips on how to protect yourself from varying scenarios where this specific vehicle theft method is deployed by robbers.
Third key – also known as copy key – theft is making a comeback, with criminals duplicating a genuine key for a vehicle to then steal it at a later time without raising an alarm
What is ‘third key’ theft?
The practice of third key theft dates back decades.
It is when a criminal secretly cuts a spare physical key for a car without the owner’s knowledge.
This could take place in various scenarios, including when a driver bought a second hand motor or handed over keys to businesses in good faith, such as when they left their vehicle with garages or mechanics for repairs, unaware that they have links to wider crime.
Using key cutting equipment, a duplicate key could easily be reproduced without the owner’s knowledge and sold to thieves targeting a specific model – namely more expensive luxury cars.
The thieves would then wait for the keeper to collect the vehicle and follow them home to see where the car is parked overnight.
The motor would then be taken using the duplicate key without raising an alarm.
This tactic was quickly replicated when car makers switched to electronic keyfobs with transponders.
With access to a recoding machine to duplicate the unique radio-frequency identification (RFID) in the fob that communicates with the car’s door locks, producing a third key is a relatively quick and easy means of gaining access to a vehicle without the keeper’s knowledge.
This broadened the scope of when the process of the third key theft could take place, with some gangs carrying recoding devices when viewing used cars listed for sale, duplicating the RFID when the seller was distracted by another member of the criminal unit.
However, thieves have been like likely to deploy this type of theft because potential victims might spot something untoward going on and because it typically leaves trail, with owners able to trace back to when their keys might have fallen into the hands of someone involved in illegal activity.
This is the reason for why gangs have in recent years focussed on relay attacks, which are not only quick to carry out but also leave no physical or electronic fingerprint that owners and authorities can use as a lead during an investigation.
Criminals previously would need to cut a spare physical key, but now all models come with electronic keyfobs, duplicating a genuine key is a lot easier
The third key crime comeback
A recent claim handled by QuestGates suggests the copy key technique is back, though reinvented for the digital age.
A used luxury SUV was stolen from a policyholder’s driveway just days after it was purchased for more than £100,000.
The short timescale between the transaction and the reported theft, combined with the high vehicle value, raised suspicion and prompted escalation to QuestGates investigation team.
A review of available CCTV footage showed the alleged criminal calmly walking, hands in pockets, to the vehicle. The car’s indicators flashed, the driver’s door opened, and off he went.
Having requested the keys from the victim, they provided what appeared to be a genuine main key and a spare.
However, when the fobs were sent for analysis, this turned out to not be the case.
QuestGate’s investigation found that while the victim was supplied two keys for the high-end luxury SUV they had bought used – and both looked genuine – one was a duplicate
Just one of the keys was found to be original, with markings and a digital ID number that was traced back to the manufacture.
The second was a copy.
Further investigation revealed that the additional key had been duplicated recently.
The explanation settled upon by the police is that the car was taken using a key, presumably the missing original.
The third key – which looked identical to the originals – was provided by the seller who retained one of the genuine keys themselves to steal the motor back after the transaction had gone through.
Philip Swift, technical director at QuestGates, said: ‘With so much focus on relay attacks and keyless entry in recent years, it’s important to remember that there are other threats.
‘The unregulated and unrecorded ease with which spare keys can be obtained, particularly for certain makes, is concerning.’
Vehicle crime consultant Dr Ken German – who was previously head of technology at the Met stolen car squad with a PhD in International Vehicle Crime – told the Daily Mail and This is Money: ‘As the country’s police service attempts to tighten its grip on vehicle crime, in particular keyless entry and relay attacks, many thieves have reverted to some older methods of deception to steal cars.
‘Copy key – or third key – theft can be hard to prove, albeit police specialists can detect it and insurance experts are aware of it making a comeback.’
We’ve spoken to vehicle crime experts to explain how to avoid falling victim to third key thefts
How to avoid becoming a victim
The three main target scenarios used by criminals deploying third key thefts is duplicating keys for a car they are selling, when posturing to be interested in purchasing a second-hand vehicle, or when the car is being repaired or left unattended with the keys handed to an unknown individual.
For the latter – which could be a garage, bodyshop and even an individual or company offering car parking services, such close to major airports – drivers should always use a franchised dealer or check the Motor Ombudsman’s Garage Finder tool to ensure the independent business is accredited.
After purchasing a used car, Philip Swift says buyers should weigh the cost of key reprogramming against the desirability and value of the vehicle, and consider ‘effectively changing the locks’ if they believe they are at high risk.
Dr Ken German also says this form of third key theft usually involves a car with a hidden identity, typically displaying cloned plates.
He says that drivers should always do background checks on the vehicle but also scrutinise the vehicle identification numbers (VIN) – and ensure the chassis number matches that on the V5 registration document.
And when selling a vehicle, German says people should always accompany a potential buyer on a test drive and be aware of any distraction methods criminals use to exchange one of the car keys with another recut or reprogrammed fob in order to steal the car at a later time.
As such, you should never let the potential buyer hold the keys at any time.
He says the copy key method is more common with older cars over 10 years, and particularly desirable classic and vintage cars.
13 tips to beat the car thieves
The Daily Mail and This is Money has spoken to a number of experts across the field of vehicle security to create a list of 13 tips all car owners should follow to best protect their motors.
We’ve enlisted the help of Thatcham Research, AA President Edmund King and Dr Ken German to compile the ultimate list of car security tips:
1. Make sure your car is locked in the first place
This may seem obvious, but a large proportion of thefts are a result of the vehicle being left unlocked or criminals using signal jammers that block your key fob from communicating with the car’s locks.
Drivers should always check the vehicle is locked and the windows are up after using a key fob. Listen for the locking noise and watch for the lights to flash and – if your car has them – automatic wing mirrors to fold.
2. Keyless car owners – take these precautions
If your car has Passive Keyless Entry and Start (PKES), it may be susceptible to the relay attack theft method.
Firstly, purchase a signal blocking faraday pouch to store your keys in (including spares). Make sure the pouch is designed specifically for keys and test it by inserting your fob into the pouch and attempting to open your vehicle.
Secondly, refer to your user manual to see if your keyless entry fob can be deactivated at night. Check too if you have a motion-sensor enabled fob, which goes to sleep when idle (i.e., when stored at home). Most vehicle manufacturers now produce this type of fob.
Thirdly, remember the thieves may also operate their relay system even when a driver visits their office or shops with the key in their pocket or bag.
3. Don’t leave your car engine running to defrost windows
Freezing temperatures can tempt drivers into starting the car’s engine to deice or defrost the windows, then returning to the warmth indoors until the windscreen is clear.
It might sound obvious but by leaving a vehicle unattended is a huge security risk, even if it’s on your own private driveway. In fact, it is illegal to do this, and your insurer is unlikely pay out for any loss if your car is stolen as a result of this.
Thieves will be checking for stationary cars emitting exhaust smoke or that have wing mirrors that normally are folded in when locked but are clearly not.
4. Keep valuables out of sight
‘Out of sight, out of mind’. Remove all valuables from your vehicle to make it less of a target to opportunistic thieves.
5. Do you have an alarm and immobiliser?
Ensure your vehicle has a Thatcham-certified alarm, immobiliser and tracking system fitted. Some insurance policies require the fitment of a tracking device, so it’s important any associated subscriptions to monitoring services are maintained.
6. Mechanical security systems – like a steering lock – might seem ‘old hat’ but are a great deterrent
Steering wheel locks, gear clamps, wheel clamps and other traditional security systems can act as a strong visual deterrent against thieves.
7. Install a doorbell camera or CCTV at your home
Doorbell cameras and CCTV systems are becoming increasingly popular as both a deterrent for car crime and to catch thieves.
Make sure you invest in one that has a night vision mode and crisp HD resolution.
Motion-sensing driveway lighting can also be a strong deterrent.
8. If you have a garage, use it!
If you have a garage, try to make sure there is enough room for your car to fit into it, rather than using it for storage for all types of household clutter.
If you have multiple vehicles, almost prioritise the garage for the one of highest value – and park another car in front of the garage door as an extra precaution.
And if you have electric garage doors, do not keep the transponder inside the vehicle, such as in the glovebox. Victims have subsequently found this to be the reason for their property being burgled.
9. Think about where and how you park overnight
Most car thefts take place under the cloak of darkness, so this is the most important time to consider how secure your vehicle is.
If you don’t have a garage but do have a driveway, always park tactically.
For instance, if you have a big driveway, park the car sideways to so any thief will need to manoeuvre it. If your driveway is smaller, park facing your house to increase the chances of you being alerted to the lights coming on. And park with the wheels turned on full lock to extend the time it takes for criminals to make a getaway. Even consider parking another less desirable car in front (or behind) your vehicle to prevent easy removal.
Those with driveways can also purchase lockable barriers to restrict access – and experts advise that a car cover is often a deterrent due to the time it takes to remove one and will look suspicious to neighbours and passersby.
If you do not have off-street parking, try to leave your car in a well-lit area – ideally with CCTV monitoring – and in a position that makes it difficult for a thief to move quickly.
Ken German tells us that some motorists are being extra inventive in their bid to protect their cars. Some previous victims are leaving mannequins in the driver’s seat to dissuade unwanted visitors.
10. Check repair centre and bodyshop accreditation to avoid key cloning
If you need to leave your key with a garage or bodyshop, you should check that they are a member of an accredited code of practice/professional standard such as The Motor Ombudsman or The British Parking Association’s Park Mark scheme.
This should reduce your chances of falling victim of key cloning.
Also, if you have purchased your vehicle second-hand with only one working key, visit an approved repair centre to have the missing key(s) deleted and add a spare as soon as possible.
11. Consider a dashcam or a car with theft alerts
Dashcams have grown in popularity in recent years, with motorists primarily using them to prove they were not at fault in a crash.
They also act as a great theft deterrent. This is because many of these devices will also record suspicious activity around your car is parked up and you’re not in it.
However, make sure you buy one that uploads videos to cloud storage rather than saving it only a memory stick in the dash cam – because you will also lose this if your car is stolen.
Some modern vehicles now offer ‘parking mode’, which also can also detect and record movement when parked. This can be used as supporting evidence by your insurer and the police.
Many of these alerts will be powered via a smartphone app, so ensure you’ve activated the feature and turned on notifications.
12. Always wipe stored info from a car before you sell it
Some vehicle apps and connected systems can provide the previous owner with access.
If permissions remain active, ensure that all permissions and data linked to the previous owner are wiped.
13. ‘Locust’ thieves might strike twice
A new wave of ‘locust thieves’ exist today who strip cars whilst they’re parked at the side of the road and even outside owners’ homes.
Many people have woken up to find wheels, bonnets and grills and even doors missing from their cars rendering them undriveable. This is because these parts are becoming more valuable since the pandemic with factory closures and slowdowns meaning some components are not as readily available from manufacturers as pre-Covid.
For instance, a Porsche headlight can be worth up to £1,000 today, which has driven a rise in these parts being stolen. Wing mirrors for top of the range vehicles are also easy-to-steal high-value components.
Ken German warns that falling victim to locust thieves might not be the end of the story. He says owners who have had parts pinched from their car should check around and under the vehicle to ensure thieves have not fitted a tracking device so they can track when the motor is not being used and return at a later date to attempt to steal it.
14. Be aware of scam crash tactics deployed to steal cars
While carjacking still exists today, it is not as prevalent in the UK as it is in some other countries, such as South Africa.
That said, if you are in a high value vehicle you would be wise to drive with the doors locked in traffic.
Also drive defensively when in a queue leaving enough space in front for you to get out of a tight spot should you need to.
If your vehicle is bumped from behind, wait to pull over and find somewhere safe where there are people. If you’re suspicious don’t unlock the door and call the police.
