Apple AirTags being used by thieves to steal cars — what you can do

An Apple AirTag that seems to have been retrieved from a hiding place inside a car's bumper.
An Apple AirTag that seems to have been retrieved from a hiding place inside a car's bumper. (Image credit: York Regional Police, Ontario)

Car thieves are using Apple AirTags to steal cars, report the York Regional Police (YRP) in the suburbs north of Toronto.

According to the YRP's public service announcement yesterday (Dec. 2), the thieves look for desirable cars in public places, such as shopping-mall parking lots. When they find a car they want, they secretly place an AirTag somewhere on the car that the owner might not notice, such as inside the gas-fill flap door, in a tow hitch, inside a bumper or in an external electrical port.

AirTag Vehicle External Electrical Connection Port

An Apple AirTag placed inside a passenger vehicle's external electric connection port and hidden by the port's flap door. (Image credit: York Regional Police, Ontario)

There have been at least five such incidents in the area since September, says the YRP.

"We've started to notice a new trend emerging in the auto-theft industry," said Detective Jeff McKercher in a YouTube clip posted by the YRP yesterday (Dec. 2). "It's these tagging devices using GPS and Bluetooth technology, and they're using that to install on different vehicles that they're looking to steal."

(In a more ominous development, many women across the United States have reported being stalked by rogue AirTags, and not all the incidents can be explained as related to car thefts.)

Later that night, the car thieves use the AirTag to track the vehicle to the owner's home and steal the car from the driveway. They break into the car using screwdrivers or similar tools, plug a mechanic's electronic tool into the car's on-board diagnostics port to reprogram the key settings, and drive away.

"By using an iPhone, they can always tell where the vehicle's location is," McKercher added. "They can almost wait and commit their theft on their watch, maybe later on in the night, and it always gives them the location of where that vehicle is being stored at the time." 

McKercher said that Lexus, Toyota and Honda crossover SUVs currently seemed to be the most desirable for car thieves in the Toronto suburbs, along with the eternally popular Ford F-Series trucks.

The YRP never uses the word "Apple" in the public-service announcement and two related YouTube clips that were posted yesterday (Dec. 2). But the images and language make it pretty clear exactly what kind devices they're talking about.

"Car thieves are thinking differently," begins the other YouTube clip, which almost looks like an Apple promotional video. "Typically, thieves roam residential neighborhoods (sic) looking for specific models of vehicles. Now they are roaming parking lots and leaving a tracking device called an AirTag on target vehicles. Thieves then track the vehicle using the AirTag and steal it at a later time."

An AirTag will start to chirp if it's been separated from its paired iPhone for between 8 and 24 hours. That still gives car thieves plenty of time and the chirps might not be audible over the noise from a car's engine.

Your iPhone is supposed to be able to alert you when a "mystery" AirTag not paired to your iPhone comes home with you. But that doesn't always seem to work, and people who don't have iPhones won't get those alerts.

We reached out to Apple for comment and were directed to this Apple support page that tells you what to do if you find someone else's AirTag in your belongings or you hear chirps from an AirTag that's been separated from its owner.

AirTags can help you find stolen cars, too

To be fair, car owners can also use AirTags to recover stolen vehicles. FoxNews.com's Gary Gastelu ran tests over the summer and found that AirTags were just as effective at finding lost vehicles as car-tracking devices that can costs hundreds of dollars to install or come with subscription fees. A single AirTag costs $29, and a pack of four costs $99.

In August, Dan Guido, a digital-security researcher, told his Twitter followers how AirTags helped him recover a stolen electric scooter. But he warned that the scooter thief seemed to have noticed that there was an AirTag hidden on the scooter (Guido had placed one in an obvious place, and another hidden inside the handlebars) and tried to remove it.

How to lessen your risk of AirTag car theft

Back in Ontario, the York Regional Police offered these tips to car owners:

  • Park your car in your garage if you have one, not in the driveway
  • If you don't have a garage, then park the car as close to your house as possible
  • Use a third-party steering-wheel lock
  • Put a third-party lock on the OBD-II data port
  • Check your vehicle regularly for tracking devices
Paul Wagenseil

Paul Wagenseil is a senior editor at Tom's Guide focused on security and privacy. He has also been a dishwasher, fry cook, long-haul driver, code monkey and video editor. He's been rooting around in the information-security space for more than 15 years at FoxNews.com, SecurityNewsDaily, TechNewsDaily and Tom's Guide, has presented talks at the ShmooCon, DerbyCon and BSides Las Vegas hacker conferences, shown up in random TV news spots and even moderated a panel discussion at the CEDIA home-technology conference. You can follow his rants on Twitter at @snd_wagenseil.