Why cheap copies put condos at risk — and how to stop them
Condominiums in the Greater Toronto Area (GTA) are facing an escalating security concern: the cloning of access control credentials, commonly known as key fobs. Over recent years, websites and storefronts have begun offering cloning services at decreasing prices, with some even offering to visit condominium units to clone fobs for as little as $20 or $30. This unregulated market has led to a rise in security risks for many buildings, as cloned fobs can easily compromise access to sensitive areas, putting both residents and property managers at risk.
What Are Fobs and How Do They Work?
An RFID (Radio-Frequency Identification) key tag, often referred to as a fob or key fob, is a handheld device that grants access to various areas of a condominium, such as entrances, amenities, and even elevators. These fobs contain a microchip with a unique identification number, along with an antenna and a coiled wire. Most of these credentials are low-frequency passive devices operating on frequencies between 30 kHz and 300 kHz, with 125 kHz being the most common. They don’t require a power source; instead, they are powered by the energy transmitted from an RFID reader.
A typical fob transmits two sets of numbers: a facility code and a card number. The facility code is used to reduce the likelihood of duplication, allowing the same card number to be used at multiple buildings. However, these fobs have no encryption, and they always transmit the same identification information, making them vulnerable to cloning.
When a fob is brought within 10 cm of a reader, the reader powers the fob and reads the identification number. The Access Control Unit (ACU), or door controller, checks the number against its database and grants access if the number matches. However, since the communication between the fob and the reader is unencrypted, anyone with the proper cloning device can duplicate the fob’s identification number, effectively gaining unauthorized access.
The Cloning Process: An Increasingly Easy Security Risk
Fob cloning is alarmingly easy. The devices required for cloning are available for purchase online for as little as $10. These devices allow individuals to scan an existing fob, duplicate its number, and program the clone onto a blank fob. Once cloned, the duplicate fob will work identically to the original, granting the same level of access to restricted areas.
The ability to duplicate fobs means that anyone can gain unauthorized access to your building, including potential criminals or unapproved guests. In some cases, cloned fobs may be distributed to short-term rental tenants, leaving the property exposed to further risks. This can be exacerbated by the practice of leaving fobs in lockboxes, where they may be cloned by individuals with malicious intent.
A Solution: Upgrade to Smart Credentials
To mitigate the risk of fob cloning, one solution is to replace low-frequency fobs with high-frequency smart credentials. Smart fobs operate on a 13.56 MHz frequency and use two-way encrypted communication, similar to the technology used in debit and credit cards. These fobs communicate securely with smart readers using encryption key codes, making it much harder for cloning devices to replicate them.
Smart fobs also offer a higher level of security because the communication between the fob and the reader is encrypted. The smart reader and fob engage in a two-way communication process to verify the credential, and the encryption key codes used cannot be copied by cloning devices. Furthermore, mobile credentials, which tie fob numbers to smartphones via apps, use NFC (Near Field Communication) or Bluetooth technology for even more secure, two-way communication.
However, switching to smart fobs requires replacing both the fobs and the card readers, along with upgrading the access control software. This can be costly and may not fit within every property’s budget, especially for larger buildings with multiple access points. In such cases, it’s important to weigh the costs and benefits of upgrading the access control system.
Preventative Measures While Considering Upgrades
While an upgrade to smart credentials offers the best protection, there are several steps condominium corporations can take in the interim to help prevent fob cloning:
Reasonably Priced Fobs: One common issue contributing to the rise of fob cloning is the inflated price of fobs. Many condominiums charge residents between $25 and $100 per fob, which often drives them to seek cheaper alternatives. By offering fobs at a more reasonable price, ideally near the corporation’s cost of $10, residents will be less inclined to use cloning services.
Fob Availability and Purchase: Making fobs more accessible for residents can also help reduce cloning. Allowing residents to purchase fobs online through condominium management software, at the concierge desk, or during office hours at the management office can make it easier for them to replace lost or damaged fobs without resorting to third-party cloning services.
Fob Audits: Corporations should conduct regular fob audits to ensure that unused or lost fobs are deactivated promptly. Deactivating unused credentials while keeping their associated information in the system ensures that the fob no longer grants access but retains valuable data such as suite numbers and contact information.
Staff Training and Awareness: Security and concierge staff should be trained to spot signs of fob cloning. This can include watching for multiple people using the same fob, instances of tailgating, or fobs being used at different access points in a short period. Identifying suspicious activity can help prevent unauthorized access.
Legal Measures: Condominium corporations should periodically check online fob duplication websites to ensure their building isn’t listed. If it is, they should contact the website to have the property removed and consult legal counsel about drafting rules to prohibit fob cloning.
Conclusion: Proactive Measures Are Key
Fob cloning is a persistent security threat that shows no signs of slowing down. Given that legislation concerning fob cloning is unlikely to be introduced anytime soon, condominium corporations must take proactive steps to protect their communities. Whether through upgrading to smart credentials, offering reasonable fob prices, or conducting regular audits, the key to safeguarding your building’s security is vigilance and prevention. By acting now, you can mitigate the risks associated with fob cloning and maintain a secure environment for all residents.
