Keyless Car Theft in 2026: The Most-Targeted Cars & How to Protect Yours

Keyless car theft in 2026: which cars are targeted, why relay attacks work, and practical steps to close the Relay Gap at home.

Smart Convenience Is the Security Problem

Keyless theft often begins with an ordinary storage choice, not a dramatic break-in. In 2026, the key left on a hallway table can matter more than the lock on the car door. Doorbell camera footage shared by Sky News showed two men unlocking and driving away in under a minute, using nothing more than a pair of cheap relay devices on an ordinary doorstep. No broken glass. No forced entry. No frantic alarm. Just a signal they had no right to reach.

More technology does not automatically mean more security. In many cases, it simply moves the weak point from the lock barrel to the hallway table.

The passive radio systems designed to make your car effortless to unlock are the exact attack surface thieves have learned to exploit. The car marketed as the most convenient to own is often among the simplest to steal, not because manufacturers wanted insecurity, but because convenience and verification pull in opposite directions. If a vehicle is trained to trust a nearby signal instantly, the entire security question becomes whether that signal really is nearby.

A better way to think about keyless car theft is as a permission problem. The thief is not trying to defeat your whole car. They are trying to borrow your key’s presence for long enough to open it, start it, and leave before anyone has reason to look outside.

In 2026, the highest relay-theft risk falls on older high-spec compact SUVs, unpatched premium saloons, and popular export-prone hatchbacks. The quickest wins are a tested Faraday pouch, keeping keys well away from external walls, and a visible steering lock. This article draws on Thatcham Research and NPCC vehicle crime findings to show which cars are most commonly targeted, why they are attractive, and what actually works to keep yours on the driveway.

Thieves chase convenience gaps, not badge prestige. If a car can be started from outside a property, it will be targeted, regardless of price or postcode. The useful question is not, is my car expensive enough to steal? It is, can someone make my car believe the key is beside it while I am asleep?

Do this now: check where your keys are sitting. Move them at least a few metres from any external wall and make that a habit every night. The first useful security upgrade is not a device, it is removing the signal from the street.

How Relay Attacks Work and Why the Relay Gap Matters

A relay attack uses two small devices to stretch your key’s signal across a distance, tricking the car into thinking the key is right beside it. The car unlocks. The engine starts. The thieves drive away, often in under 60 seconds, without forcing entry or ever touching your key.

One thief stands near your front door with a signal amplifier; an accomplice waits at the car. The vehicle detects what it reads as a nearby key and obliges. Doorbell cameras have captured this sequence repeatedly, and the method has changed little since it was first widely reported because the underlying design assumption has not changed enough either.

Rolling codes offer no protection here, and neither does encryption. That may sound odd, because owners are often told modern keys are encrypted and therefore safe. The problem is that both defences assume the conversation between key and car is being intercepted, copied, or decoded. A relay attack does something simpler. It extends the live conversation across a greater distance than the manufacturer intended.

This is what security researchers call the Relay Gap: the window of vulnerability that opens when an owner assumes the key is safely indoors, yet it is still broadcasting a usable signal. Passive keyless entry systems are designed to respond the moment a key comes within range, and that range is not fixed. Walls and building materials reduce the signal, but rarely eliminate it entirely.

Standard driveway parking is particularly exposed. A car parked two metres from the front door, with a key hanging in the hallway behind a glazed panel or thin cavity wall, may sit comfortably within relay range without the owner ever realising. The signal does not stop politely at the door. It leaks, and a relay device captures that leak and amplifies it to the car.

The Relay Gap is not a flaw in any single brand. It is a structural weakness in how passive entry systems were designed. continues to list relay attack as a leading theft method in its vehicle security assessments, consistent with NPCC vehicle crime data across 2023–2026.

The hardware required is cheap and widely available online. That matters because it changes the threat model. This is no longer a niche technique reserved for highly skilled attackers; it is a repeatable routine for anyone prepared to learn which homes and models offer the least resistance.

Look for Faraday pouches that have been independently tested to confirm signal attenuation across the LF 125 kHz (wake/proximity) and UHF 315/433/868 MHz bands used by keyless entry systems. Rely on verified attenuation test results, not marketing claims, as many pouches on sale fail basic independent testing.

A certified Faraday pouch closes the Relay Gap by blocking the signal at source. Place your key inside and it cannot emit anything usable. Choose a product with published, independent attenuation test results across both the LF 125 kHz and UHF bands, since marketing copy alone is not sufficient verification. The costly error is buying a pouch because it looks technical; the only question that matters is whether it actually blocks the frequencies your key uses.

Do this: map your home’s relay window by moving your key to different rooms while someone walks the perimeter outside, noting where the car still responds. Store your key in a room that fails to trigger a response, or inside a tested Faraday pouch. Testing feels excessive until it shows that the supposed safe place by the stairs is exactly where the signal is strongest.

Why Driveway and Doorstep Parking Carry the Highest Risk

Relay theft often succeeds because owners underestimate how far the signal travels. Kitchen counters, hall tables, and bedside drawers near street-facing walls are the most common culprits. Thin cavity walls and glazed front doors are far more permeable than most people expect, and the difference between a key that is effectively shielded in a concrete-floored garage and one sitting in an open-plan hallway a few metres closer to the street is not obvious until you actually test it.

Internal rooms with any kind of line-of-sight path toward the street may still fall within relay range. Distance feels reassuring. It rarely is. The only reliable way to understand your home’s exposure is to test it, not assume it. This becomes obvious once you compare layouts: a Victorian hallway, a modern glazed porch, and an open-plan kitchen all create different signal behaviour.

Move keys at least three to four metres from the primary external wall, or into a Faraday enclosure, every time you arrive home.

A Faraday pouch and deliberate key placement work best in combination. Distance reduces signal reach; shielding eliminates it. Together they close the Relay Gap far more reliably than either measure alone. The practical cost is convenience. You lose the tiny luxury of dropping keys in the same bowl by the door, but you remove the easiest path into the car.

Where people usually struggle is consistency, not knowledge. The pouch works only if the key is inside it. A steering lock works only if it is fitted. Moving the key to the back of the house works only if everyone in the household follows the same routine. Car security often fails at the most ordinary moment, when someone comes home late, drops the key near the door, and assumes one night will not matter.

Do this: store your key in a tested Faraday pouch in a room at the back of the house, away from street-facing walls, every time you come home. If you park on a driveway, treat this as non-negotiable. The routine should be boring enough that you stop thinking about it.

The Most-Targeted Cars for Keyless Theft in 2026

Relay theft in 2026 clusters around a recognisable profile: older high-specification models with passive keyless entry and unpatched ECUs. The highest-risk vehicles are not necessarily the most expensive. They are simply the quickest to unlock and drive away, and that calculation drives the selection choices of organised theft networks operating across the UK.

It is easy to assume thieves mainly want the flashiest car on the road. Often, they want the car that combines demand with predictability. A popular model has more parts value, more buyer familiarity, and more examples parked in the same way outside similar homes. Rarity can sometimes protect a car; ubiquity can make it efficient to target.

and both point in the same direction. Doorbell-camera footage from multiple incidents shows thieves unlocking and pulling away in under a minute, reflecting targeted vehicle selection by criminal networks who know exactly which models offer the least resistance.

Chart based on NPCC/Thatcham archetype vulnerability. Model-level counts are not publicly available at time of writing. Ranking reflects reported theft incidents restricted to models with passive keyless entry. Source: NPCC vehicle crime dataset, 2023–2026 / Thatcham Research, Vehicle Security Ratings 2026.

Alt: Bar chart showing the most-targeted vehicle archetypes for keyless relay theft in the UK, 2026, based on NPCC and Thatcham Research data.

Based on published theft pattern data, the four archetypes most vulnerable to relay attack are:

• Older high-spec compact SUVs (2016–2020) with factory passive entry. The low-energy key signal broadcasts across a wide area, making amplification straightforward. High export demand to Eastern Europe and West Africa keeps resale attractive to organised theft networks. Owners often assume the age of the car lowers the risk, but for thieves an older system with a known weakness can be more attractive than a newer car with better distance-checking.
• Premium saloons (2016–2019) with unpatched ECUs. Firmware on many of these models has not been updated in years, leaving CAN-bus injection and key cloning pathways open once entry is gained. Parts demand is high and resale channels are well established. The overlooked weakness here is not luxury, it is maintenance history: a car can look immaculate and still be years behind on security updates.
• Popular volume hatchbacks exported to European and African markets (2017–2021). High UK prevalence increases opportunity. Many carry passive entry as standard, and the export value of complete vehicles or stripped parts keeps criminal demand steady. These cars are easy to overlook because they do not feel like trophy targets, yet that ordinariness is exactly what makes them useful to a thief.
• Mid-range crossovers with Bluetooth-proximity unlocking and no UWB upgrade path (2018–2022). Bluetooth has a longer effective range than UWB time-of-flight systems, which widens the relay window considerably. UWB is significantly harder to spoof because it measures precise physical distance between key and car, rather than simply detecting signal presence. Many manufacturers have not issued firmware patches for these variants.

Older high-specification models without recent firmware updates are often the easiest targets for thieves, not because of their price, but because they are the quickest to unlock and move.

Four factors drive selection across all archetypes: export and parts demand, high UK road prevalence, passive entry enabled by default, and firmware that has not been updated in years. Speed and minimal resistance matter far more to thieves than badge prestige. A car becomes attractive when the reward is predictable and the friction is low.

That does not mean every car in these groups is equally vulnerable. A patched vehicle with passive entry disabled, keys stored properly, and visible physical deterrents is a different proposition from the same model left unprotected on a predictable driveway. The label most-targeted should be treated as a prompt for action, not a reason to assume theft is inevitable.

Do this: check your manufacturer’s website or contact your dealer for any outstanding security advisories or firmware updates. Have your chassis number ready and request written confirmation of any patches applied to your specific vehicle. Model-year advice is useful, but VIN-level confirmation is better.

Physical & Digital Defences to Protect Your Car in 2026

UWB (Ultra-Wideband) keys work by measuring the precise time it takes for a signal to travel between the key and the car. This time-of-flight calculation lets the vehicle confirm the key is genuinely nearby, rather than being amplified from inside your home. Because relay attacks depend on fooling that distance check, UWB makes the technique significantly harder to pull off. Availability varies by manufacturer and model year, so it is worth asking at your next service whether your vehicle supports a UWB upgrade.

It sounds logical to chase the most advanced solution first, but most people should start with the simplest weakness. Where UWB is not yet available, two simpler options exist. First, disable passive entry in your vehicle’s settings entirely. Second, switch to a motion-activated key that goes to sleep when stationary, cutting its signal off automatically. Both options cost nothing and close a genuine vulnerability without any specialist hardware. The compromise is obvious: you may need to press a button again. That is a small inconvenience compared with giving the car permission to unlock itself whenever a signal appears.

Do this: check your vehicle settings app or owner’s manual today and confirm whether passive entry can be disabled. If it can, turn it off. If several people drive the car, make sure the setting has not been re-enabled by another profile or after a software update.

Consider a hardened wheel or steering lock alongside a non-broadcast immobiliser. These add genuine time and effort to any theft attempt, and many opportunistic thieves will simply move on.

If you’ve lost access to a key, need a replacement programmed, or want professional advice on securing a vulnerable keyless vehicle, an automotive locksmith specialising in modern key programming and vehicle security can assess the best options for your model.

For most owners, the highest-impact starting point costs almost nothing. A quality Faraday pouch, one with independently verified attenuation results from an accredited lab, stored well away from external walls, removes the easiest relay vector. Many pouches sold in supermarkets and on forecourts carry no verified attenuation data at all; without published test figures, there is no way to confirm what protection you are actually getting. Spend a little more and look for products that publish independent lab results before you buy. Combine a tested pouch with thoughtful key placement and a visible steering lock, and you have already addressed the most common opportunistic attempts without any specialist installation.

For higher-risk situations, a second layer is worth adding. A non-broadcast immobiliser, one that requires a driver PIN via existing controls rather than advertising its presence, makes silent bypass considerably harder. An OBD port lock is inexpensive and blocks post-theft key cloning or ECU reprogramming. If your insurer requires it, or your vehicle sits at predictable on-street locations, a aids recovery and often satisfies S5/S7 insurer requirements. Use a certified installer for any of these to avoid warranty and insurance complications.

UWB-equipped vehicles perform noticeably better against relay attack tools in independent testing, though older UWB implementations, particularly on vehicles from 2021–2022, are less consistent than more recent versions. The spec sheet suggests protection; the real-world result depends heavily on firmware version, and UWB handling differs meaningfully between manufacturers. OBD port locks are genuinely effective, but check fitment before buying, as some vehicles position the port in an awkward recess where cheaper lock housings do not seat properly. A steering lock only works if you use it every single time; kept on the back seat after the first week, it does nothing. Store it in the footwell instead, so reaching for it becomes automatic before you leave the car.

The practical order matters. Start by stopping the key from broadcasting into the street. Then make the car visibly slower to steal. Then close digital routes such as OBD access, firmware gaps, and passive entry settings. Reversing that order often leads to expensive equipment sitting on top of an unchanged routine, which is how many well-intentioned upgrades fail.

Do this: pair a lab-tested Faraday pouch with at least one physical deterrent, such as a steering lock or OBD port lock, before relying on either measure alone. The strongest setup is not the cleverest one, it is the one you will actually use every day.

Insurance, Compliance and Resale

Many owners do not realise that insurers increasingly name specific conditions for high-value or technology-heavy vehicles, whether that is Thatcham S5 or S7 tracker approvals or particular immobiliser standards. Failing to meet a named condition can affect a claim, regardless of whatever else you have fitted, and that gap in cover rarely becomes apparent until after something goes wrong.

This is where security becomes paperwork as much as hardware. Before making any changes, contact your insurer directly. Ask whether your policy specifies Thatcham-approved tracker categories or immobiliser standards for your vehicle, and request written confirmation. When speaking with your dealer, ask whether your VIN has received all relevant security, ECU, and CAN-bus patches, when they were applied, and for a written record. Keep both confirmations with your vehicle paperwork.

Documented manufacturer updates and installer certificates also improve outcomes when filing a claim. Aftermarket installations can affect warranty and resale value unless they are certified, reversible, and fully receipted. A buyer may value a recognised tracker or immobiliser; they may be less impressed by mystery wiring, missing certificates, or a device that cannot be explained during a sale.

The commercial risk is that the cheapest installer is not always the cheapest decision. Poorly fitted security equipment can create electrical faults, warranty disputes, and insurance questions. For owners of higher-risk cars, the paperwork trail is part of the protection because it proves that the security was not improvised.

Do this: call your insurer, ask the questions above, and file the written responses with your service history before fitting any aftermarket security device. Verbal reassurance is easy to give and hard to rely on.

What Realistic Protection Looks Like

Layered defences deter and delay. They can meaningfully reduce your exposure, but no combination of measures eliminates risk entirely. The realistic goal is to make an attack unattractive and time-consuming, not impossible. In vehicle security, perfection is usually the wrong target; friction is the useful one.

The pattern usually appears when an owner adds one impressive measure, then lets the routine slip. Behavioural slippage, missed firmware updates, and complacency after adding a single measure are the common failure modes. With a UWB key, a physical immobiliser, and an OBD port lock in place, a vehicle shifts from easy target to low priority for all but the most determined attacker. Opportunistic relay theft depends on convenience gaps, and these measures close most of them.

Start with your risk profile. If your car matches a high-risk archetype, parks predictably on-street, or appears in recent NPCC vehicle crime or outputs, professional hardening is worth the investment. For most owners, the cheap behavioural fixes deliver the greatest return per pound spent. Distancing keys from external walls and using a tested Faraday pouch costs almost nothing and works.

For context on typical UK costs: a tested Faraday pouch runs roughly £10–£40, an OBD port lock around £20–£60, a hardened steering or wheel lock £40–£150, and a Thatcham S5/S7-approved tracker £200–£500 plus an annual subscription. Treat these as order-of-magnitude estimates, since prices vary by model and installer.

Small changes to routine, done consistently, outperform expensive kit installed once and forgotten. That is the uncomfortable lesson of keyless car theft in 2026: the weakest point is often not the car, but the moment after you get home, when convenience quietly wins again.

If your car is newer, UWB-equipped, garaged, and backed by current firmware, you may not need an elaborate aftermarket setup. If it is an older passive-entry SUV, saloon, hatchback, or crossover parked near the street every night, treat layered protection as basic ownership, not paranoia. Remove the key signal from the doorstep tonight, then confirm the car’s digital and insurance position this week.

About the reviewer

Independent automotive security analyst. Tracking vehicle theft trends and manufacturer countermeasures since 2018. Not affiliated with any insurer, tracker manufacturer, or security product supplier covered in this article.

Side-by-side comparison of relay attack vulnerability ratings across the most-targeted models in 2026, showing which have UWB, factory immobiliser, and OBD protection as standard. Chart based on NPCC vehicle crime dataset (2023–2026) and Thatcham Research vehicle security ratings. Model-level counts are not publicly available; ranking reflects reported theft incidents restricted to models with passive keyless entry vulnerability.

Please follow and like us: