Modern cars quietly broadcast more information than most drivers realize, and new research suggests one of the least glamorous components may be among the most revealing. A study of tire pressure monitoring systems finds that the tiny radio transmitters inside each wheel can be repurposed as a low-cost tracking network, even when a vehicle’s official location services are turned off.
By listening for the unique identifiers that tire pressure monitors send over the air, researchers show that outsiders could follow specific cars across cities, build detailed movement profiles, and do so without the driver’s knowledge or consent. What was designed as a basic safety feature has become a fresh privacy headache for anyone who drives a vehicle built after 2008.
How tire sensors became a quiet surveillance tool
Researchers at IMDEA Networks Institute describe how a system meant to warn about low tire pressure can double as a persistent digital tag attached to every vehicle. Each tire pressure monitoring system, often shortened to TPMS, uses a small battery-powered sensor inside the wheel to measure air levels and transmit that data wirelessly to the car. According to Researchers at IMDEA, those signals typically include an unencrypted unique ID number for each wheel sensor, along with pressure and temperature readings, so the vehicle can match alerts to the correct tire.
The new study finds that these identifiers are stable over long periods and can be captured with off-the-shelf radio receivers placed near roads or parking lots. Because the TPMS messages are designed for low power transmission yet still travel several meters beyond the car, an eavesdropper does not need physical access to the vehicle to log its presence. Once a particular set of IDs is associated with a specific car, that digital fingerprint can be recognized again and again, turning the TPMS into what the IMDEA team calls a cheap and invisible tracking beacon embedded in everyday traffic.
Cheap gear, detailed movement patterns
The research team set out to test how easily tire sensors could be exploited in the real world and concluded that the barrier to entry is remarkably low. One experiment described in coverage of their findings used low-cost receivers deployed along roads to pick up TPMS transmissions from passing vehicles, allowing the researchers to follow drivers and reconstruct their routes with surprising accuracy. Reports summarizing the work explain that Research finds tire with simple radio hardware that listens for the repeated sensor messages as a car moves through the environment.
Another summary of the study notes that the necessary equipment can cost as little as $100 radio equipment, putting this capability within reach of hobbyists and small organizations rather than only sophisticated intelligence agencies. With that modest investment, an attacker could place several receivers around a neighborhood, workplace, or highway corridor and quietly build a database of tire sensor IDs tied to specific locations and times. Over days or weeks, that database would begin to reveal commuting schedules, frequent stops, and other movement patterns that privacy advocates warn could be misused to monitor individuals, track high-value targets, or map the habits of entire communities.
What the new study actually shows
The IMDEA Networks Institute’s work goes beyond theoretical speculation by demonstrating how real vehicles can be monitored through their tires in controlled tests. In their analysis, the researchers describe how TPMS transmissions can be used to systematically infer sensitive information such as the presence of a vehicle in a given area and its approximate path over time. One technical summary quotes the authors stating that “Our results show that TPMS transmissions can be used to systematically infer potentially sensitive information such as the presence of a vehicle,” a conclusion highlighted in coverage of TPMS transmissions and their unintended side effects.
Industry-focused reporting adds that the team validated their approach by tracking a set of verified cars through test routes and logging how often the receivers could pick up the tire sensor messages. Summaries of the methodology explain that the experiments relied on the same basic sensor signals that a car’s own internal receiver can read, only captured externally with third-party hardware. One account by Teresa Moss describes how Research finds tire can be monitored without any modification to the car itself, which makes the threat harder for ordinary drivers to detect or prevent.
Privacy risks, policy gaps, and what drivers can do
For privacy advocates, the most troubling aspect of the findings is that drivers have little visibility into or control over how their TPMS identifiers are broadcast. Cars produced after 2008 are required to include tire pressure monitoring systems, and reports note that these systems typically rely on unencrypted unique ID numbers that never change over the life of the sensor. A consumer-focused explainer describes how cars built after that year use TPMS sensors that send a fixed identifier along with pressure data, which means a vehicle equipped with such a system can be recognized repeatedly as it passes by a listening device. Coverage of the IMDEA study, including a feature that warns that car’s tire sensors, stresses that this design choice effectively turns every compliant vehicle into a long-term location tag.
Policy responses have not yet caught up with the technical reality, and the study’s authors argue that regulators and manufacturers should treat TPMS data as sensitive rather than incidental. They suggest that future designs could randomize sensor identifiers, encrypt transmissions, or limit how often messages are sent, which would preserve safety benefits while reducing the risk of mass tracking. Until such changes arrive, drivers have few practical defenses beyond general awareness and pressure on automakers to prioritize privacy in their sensor systems. Additional commentary on the research, including analysis that warns that $100 devices can already turn tire sensors into 24/7 trackers without GPS, frames the issue as a test of whether the automotive industry will treat low-level telemetry as personal data worthy of protection.
More from Fast Lane Only
