December 8, 2024 5 min read

Relay Attack Devices Are Now Selling on Amazon for Under $100

The barrier to entry for keyless car theft has dropped dramatically. What used to require underground connections now ships Prime.

Walk through the process of stealing a keyless car with a relay attack, and you'll realize it requires almost no skill. One person holds a device near the house, another near the car. Press a button, the car unlocks. Press start, the engine runs. Drive away.

The only barrier was obtaining the equipment. That barrier has now effectively collapsed.

What's Available

We're deliberately not linking to specific products, but a quick search on Amazon, eBay, or AliExpress reveals dozens of "signal amplifiers" and "key fob range extenders" that are functionally identical to relay attack equipment.

These devices are marketed for "testing" or "emergency locksmith" purposes. Prices range from $50 to $200. Some include two units (the relay pair), while others sell components separately.

The listing descriptions are often transparent about their capabilities: "extends key fob signal up to 100 meters," "works through walls," "compatible with most keyless entry systems."

The Legal Gray Area

These devices exist in a legal gray area. Owning a signal amplifier isn't inherently illegal—locksmiths and security researchers have legitimate uses. The crime is using them to steal vehicles.

This is similar to how lock picks are legal to own in most states but illegal to use on locks you don't own. The difference is that lock picking requires skill. Relay attacks require only pressing a button.

What This Means for Vehicle Owners

The democratization of theft tools means that opportunistic thieves—not just organized rings—now have access to professional-grade equipment. A neighborhood car enthusiast who posts about their Hellcat on Instagram might be targeted by someone who spent $100 on Amazon.

This shifts the threat model. It's no longer just high-value targets being stolen by sophisticated operations. It's anyone with a desirable keyless vehicle being vulnerable to anyone with a credit card and YouTube access.

Manufacturer Response (Or Lack Thereof)

Automakers have been slow to respond. Some newer vehicles include motion-sensor key fobs that deactivate when stationary for extended periods—but this is inconsistent across manufacturers and model years.

The fundamental architecture of keyless entry—continuously broadcasting signals that can be relayed—remains unchanged in most vehicles.

The Uncomfortable Truth

If your vehicle has keyless entry, the equipment to steal it is available to anyone for less than a tank of gas. Factory security was not designed for this threat environment.

What You Can Do

Faraday pouches for key fobs can help—but only if you use them consistently. The moment your keys are exposed (on the counter, in your pocket near a window), the vulnerability returns.

The more robust solution is adding a security layer that doesn't rely on signal proximity. Digital immobilizers like IGLA require you to enter a PIN using existing buttons before the car will drive. Even if someone relays your key signal and starts the engine, the car won't move.

Learn how IGLA works →