Key cloned (potentially) - what can I do?

[c240amg]

Hi all,
I fear that my car key has been cloned.
Background:
I have two cars, F16 X6 M50d, and a Mercedes C-class
So I left the house near 8pm, and noticed a white BMW waiting outside, engine running, guy sitting there waiting. I started the engine on the Mercedes and started to de-ice it.
The guy in the car was doing nothing, just smoking a fag...
After awhile, I accidentally pressed the boot opening button on the X6 key fob (it was in my trousers), and it opened. I then went to close it.
Immediately, the guy chucked his cigarette out of the car window and drove off.

I suspect he was waiting for me to use key fob on the BMW, and now I suspect he has cloned the key.

What can I do about it? Can I somehow get the key cancelled/voided?
I am going to get a steering wheel lock tomorrow, and have temporarily parked the Merc across the driveway entrance.
What else can I do? as I don't want the grief of theft/recovery (am sure they'll do a pick and park on it)  :-[
Note - I do have remote tracking/immobilisation on the car installed by a dealership. :-[

[graemeX5]

Hi

Hopefully it's just a coincidence but you could be right.

I would think X5 Sport will probably know, but In meantime I would give BMW a ring and ask them.

Also as you said, doing physical things will help slow the speed of any theft down, and hopefully deter them, like putting the Mercedes in front of it.

For physical devices I would get a disclook as it covers the whole steering wheel rather than a bar type, a a determined person could just cut the steering wheel and remove a bar type.

Or if the X6 is being parked up for a while then consider possibly a wheel clamp, or even a drive-way post in front of where the car is parked which can be removed or drops down will all help to try and slow them down and may help to deter them. Also a baby alarm with on of the monitors placed in the car may also help alert you to a theft.

Other measures such as CCTV on your property and pointing at the car may help. All of which cost but it's probably a lot less than the excess on the X6.

Hth
Graeme.

[graemeX5]

Hi

Also check with tracking company as to the system capabilities and what it reports.

The reason is the tracker on my old car required a key fob to be present / in vicinity of the car or presssed manually to deactivate it otherwise the car tracker would report the start to the company and they would phone me for the password.

However, when in auto mode it would not require the fob to be pressed, so it if fob in the kitchen and car on the drive it would not report the start, but if started for a second time when 50 meters away from the fob it would alert the system.

Graeme

[X5Sport]

Can't really add anything to what has already been said above.

Calling BMW would be the first activity to see if every key can be de-programmed and new ones used.  I suspect it actually means module changes though.

Make sure you have a two-factor tracker - such as mentioned above - like a Trackstar 6.

Clamps and steering wheel locks too.

If you had any details if the 'watcher' pass them to the Police.  Description of individual, vehicle details and Reg if you have it.

[Ed.Matysiak]

Get into your local dealer when you can. Keys can be canceled 

[lezmtaylor]

not on topic, but good to see Ed Matysiakn has joined our Forum (his profile says he is ''Parts Advisor '' at BMW Hereford ).
So we should be able to get good advise as in this present post.

Lez

[c240amg]

[quote="graemeX5"]
Hi

Also check with tracking company as to the system capabilities and what it reports.

[/quote]
My tag requires it to be in the car when I start the engine up, otherwise trackstar call me.

[c240amg]

[quote="X5Sport"]
Can't really add anything to what has already been said above.

Calling BMW would be the first activity to see if every key can be de-programmed and new ones used.  I suspect it actually means module changes though.

Make sure you have a two-factor tracker - such as mentioned above - like a Trackstar 6.

Clamps and steering wheel locks too.

If you had any details if the 'watcher' pass them to the Police.  Description of individual, vehicle details and Reg if you have it.
[/quote]

Good plan about calling BMW - I hope that they will be able to give me a definitive answer. I talked to the BMW dealership and they basically said, with the security update, they can only clone a key once they have acess to the onboard computer (presumably through the OBD)... still I'd rather have the key de-programmed. I suspect it uses radio, and have heard of radio amplification attacks. This may affect only comfort access users.

I had a trackstar cat 5 installed when I ordered the car, and had the dealership install it before I collected it.

I now have bought a steering wheel lock, and the wheel clamp is on order. Wheel clamp is a bit over kill for now, but will use it when I travel abroad.

I did manage to get the first 4 digits of the license plate, the person was a male, wear a black beanie, probably around 35 ish. I'll have to check the CCTV to see if it got more...

[MarkG_M3CP]

Check your car insurance for key replacement - give them a call and explain....

They are more likely to agree to pay £1000 for all new keys and programming instead of the £75k car.

If not, take he car to the dealer and ask them - they will also be able to lock on in their pound safely while you get to the bottom of it.

This is my worst fear. Best of luck.

[sid10]

There used to be a fitment that went in between the battery and earth cable on my Jensen that you could take out and it broke the circuit rendering the car unstartable that was 20 years ago , surely you can get something like that today . I know it would be a pain but so would getting it stollen ! Alternatively ask the dealer which fuse you could take out when leaving the car to render it unstartable .
Leave it with only a small amount of fuel in so it would need to be fuelled up if stollen , more likely to be caught on cctv .
On another note there have been a spate of car jacking on the news where people are simply thrown out of their own car one person was killed by the attacker for a car .
    Sid10

[X5Sport]

The battery cutouts stop everything, including the Trackers, and add a risk of causing issues with the constantly disconnecting electronics.  They are not a good idea on modern electronically controlled cars.

And yes the keys all uses radio.  There is a single standard for car keys all around Europe (868MHz - and not a secret).  Manufacturers use their own security codes over the radio link.  However some of the security protocols are poor.  VW recently got flagged for using a set of common 'master codes' across their entire model range.  Not sensible.  BMW used to allow easy access via the OBD2 port - which EU regs require to be common on all manufacturers thus making life easier for thieves.

Add in telematics with poor security and pretty much every manufacturer needs to wake up to cyber security - as do those making home 'internet of things' kit.  The largest DDOS web attack before Xmas used unguarded webcam/baby monitors.

[Steamyrotter]

[quote="sid10"]
There used to be a fitment that went in between the battery and earth cable on my Jensen that you could take out and it broke the circuit rendering the car unstartable that was 20 years ago , surely you can get something like that today . I know it would be a pain but so would getting it stollen ! Alternatively ask the dealer which fuse you could take out when leaving the car to render it unstartable .
Leave it with only a small amount of fuel in so it would need to be fuelled up if stollen , more likely to be caught on cctv .
On another note there have been a spate of car jacking on the news where people are simply thrown out of their own car one person was killed by the attacker for a car .
    Sid10
[/quote]

https://www.google.co.uk/search?q=bolt+ ... cQ_AUIBygC

[c240amg]

[quote="X5Sport"]
The battery cutouts stop everything, including the Trackers, and add a risk of causing issues with the constantly disconnecting electronics.  They are not a good idea on modern electronically controlled cars.

And yes the keys all uses radio.  There is a single standard for car keys all around Europe (868MHz - and not a secret).  Manufacturers use their own security codes over the radio link.  However some of the security protocols are poor.  VW recently got flagged for using a set of common 'master codes' across their entire model range.  Not sensible.  BMW used to allow easy access via the OBD2 port - which EU regs require to be common on all manufacturers thus making life easier for thieves.

Add in telematics with poor security and pretty much every manufacturer needs to wake up to cyber security - as do those making home 'internet of things' kit.  The largest DDOS web attack before Xmas used unguarded webcam/baby monitors.
[/quote]

You sound like you work in tech (from a fellow techie) - I follow the same news

But I have found this: OBD Saver, a lock for the OBD port
https://www.obd-saver.de/montage-bmw/auswahl-bmw/

They have a UK distributor, and they have told me there are F15/X5 ones which will fit the X6 too (these require pulling the OBD port out and drilling holes etc)
This year they introduced a universal one and universal plus. From the docs they sent, the universal is a click on click with 4 bolts, the plus is the same but with a key on it, so less drilling installed.

Prices range from £110 for the universal, to £199 for the specific F15/F16 one.