This is the second part of a three-part CTV W5 investigative series on how car thieves can get away with modern vehicles so easily. W5 correspondent Jon Woodward ordered a device reported by police and used it to clone a vehicle key.

A device that can be used to clone a car’s key fob and make it drive away without the owner’s help can be ordered online, delivered within days and used in less than an hour, an investigation has found. W5.

How do we know? Because we did it.

And the demonstration illustrates what some see as a persistent security breach, even as governments, law enforcement and insurance companies rush to block a wave of thefts that have totaled some 1.5 billion dollars last year.

“I think we’re facing a crisis in this country,” said Elliott Silverstein of the Canadian Automobile Association, pointing to figures showing more than 70,000 vehicles were stolen across Canada in 2023.

“You think of a natural disaster, like a flood, hurricane or fire, and imagine it happening every day of the year with no end in sight. That’s the problem with car theft right now in Canada,” Silverstein said.

The federal government has adopted new regulations aimed at restricting certain radio devices that could be used in car theft, following a national summit earlier this year. Figures from insurance survey group Equite Association show car theft has fallen by 17 per cent this year.

But during a consultation on whether to restrict devices used by thieves, the York Regional Police Service brought up brands of key reprogrammers that they say are also used in car thefts.

Thief uses tablet to gain access to vehicle in surveillance video obtained by W5

These are the devices you can see on some surveillance videos, with thieves huddled over their tablet screens, usually with a cable plugged into the car’s computer.

They can also be used legitimately by car owners looking to get new keys or find faults on their vehicle.

• Part One: How Did Thieves Steal Your Car? Perhaps with a device ordered online

The federal government told us it had restricted some devices, but these key programming devices appeared to be widely available. So this is what W5 decided to order.

Our device cost around $835.07 through online retailer Amazon.ca and was sold by a Chinese company.

It arrived within a few days, in a black plastic carrying case with an accessory for plugging it into the car, as well as two universal key fobs.

The W5-controlled device guided its user through the steps of cloning a key, even though the vehicle’s original key was nowhere nearby.

Once loaded, it allowed us to download files corresponding to a variety of car models, including Ford and Chevrolet. Its operating system offered instructions on next steps.

W5 is not going to explain exactly how we used it. When we tried it on two vehicles in CTV’s fleet, the key fobs weren’t close.

The first try, on a Chevrolet SUV equipped with push-button ignition, didn’t work. The device was displaying error messages stating that it could not connect to the Internet.

However, on another CTV vehicle, a Ford SUV with push-button ignition, our unit followed all of its steps and one of these universal key fobs was fitted to the car.

With this newly programmed key in the Ford’s cabin, the car started and I was able to drive it.

W5 reporter Jon Woodward used a tablet ordered online to investigate concerns raised by police over certain devices capable of cloning car keys.

“These devices exist and it’s a problem,” Silverstein said. “Is it like having lockpicking tools for sale on the Internet? »

We’ve contacted Ford with specific details of the demonstration. A company spokesperson, Matt Drennan-Scace, told us our demonstration did not reflect real-world conditions because the car doors were initially unlocked and we did not trigger an alarm in the car.

But locksmith and engineer Yaser Jafar, who uses the devices legally at his Hamilton-based company Auto Key Pro, said that in his experience these devices can also be used in these scenarios.

“Unfortunately, thieves have the exact same tools and follow the exact same steps to be able to steal the cars,” Jafar said.

Amazon has said that all devices for sale on its site are there legally, although even legal devices can be misused.

Manufacturer: devices are “not intended for illegal activities”

Device maker New York-based Autel said in a statement to W5 that it was aware that key reprogramming tools had been found in the possession of people involved in vehicle thefts, and that it was cooperating with American authorities seeking to inquire about its technology. .

“Our immobilizer and key programming tools are designed for professional locksmiths to expand their repair service capabilities, not for illegal activities,” said spokeswoman Allison Whitney.

“We have enhanced the technical capabilities of our products to prevent misuse, including by integrating two-factor authentication. We are exploring other solutions, such as cooperation with third-party accreditation service providers,” Whitney said.

“The solution to reducing vehicle theft is complex. It will require the concerted efforts of all parties involved – automakers, professional tool developers, law enforcement, policymakers and drivers – to achieve meaningful change. Autel is committed to being part of this solution,” she said.

Scace said Ford considers safety a top priority and said it is rolling out new devices to keep cars safe.

It launched “stolen vehicle services” for Ford F-Series trucks in 2024, which included a dedicated number with live agents who connect with law enforcement to track and recover stolen vehicles, said Scace.

The 2025 F-Series trucks offer the “Ford Security Package,” where vehicle owners receive theft alerts and can remotely disable their truck through the FordPass app, even if someone has an authorized key nearby , he declared.

“Over time, we will expand these features to other Ford vehicles,” he said.

Another product that could be used to block access to this device is suggested by mechanic Ryan Jaipal of Durham Autohaus in Pickering, Ontario.

Jaipal says he gets customers calling him every day to make sure the car they’re replacing isn’t as vulnerable as the stolen car.

“This customer has already had his vehicle stolen twice,” Jaipal said, pointing to a Porsche 911 in his store. “I can’t even count the number of calls and emails I receive every day.”

He recommends the Igla, which is a small device that can be installed in a car and requires a password to turn the car on.

Once this is installed, the device could clone a key, but this would be useless unless the driver also enters their password.

CAA’s Silverstein said he thinks the federal government should consider restricting the device we ordered, and also called on automakers to improve the safety of their vehicles.

“It doesn’t take very long to use these tools to get into cars,” he said. “And because manufacturers have not sufficiently strengthened safety standards, consumers are vulnerable.”

For tips on car theft or any other stories, please email Jon Woodward..