I wanted to make check-in easy. I hung a lockbox on the window, texted the code to the guest, and went to sleep. The next morning, the car was gone. The guest claimed they never picked it up. Turo is investigating whether I followed the “Remote Handoff” policy. If I didn’t verify their ID before giving the code, I am 100% liable for the $40,000 loss.
Key Takeaways
- The “Code” is the Key: Giving the code before verifying the ID is equivalent to leaving the keys in the ignition.
- Verification Selfies are Mandatory: You must receive a photo of the guest holding their license next to the car (or their face) before you release the code.
- Turo Go is Safer: Using the app to unlock the car shifts the liability to Turo’s tech.
- Faraday Bags for Lockboxes: Smart thieves can amplify the key signal from inside the lockbox to open the door.
The “Why”: The Unattended Vehicle Policy
Turo’s policy is strict: You cannot leave the vehicle unlocked or unsecured.
If you use a lockbox, you must ensure the guest is who they say they are. If a thief hacks your account or steals the guest’s phone and you give them the code, Turo might deny coverage for “Improper Handover.”
The Investigation: The Secure Handoff
I tested the “Selfie” requirement.
- Scenario: Guest arrives. I ask for a selfie with license.
- Risk: If the license is expired or doesn’t match the name, and I give the code anyway -> Coverage Voided.
- Tech Solution: I switched to a Turo Go compatible car. The guest uses the app to unlock. Turo verifies the ID in the app.
- Result: If the car is stolen with Turo Go, Turo covers it because their system unlocked it.
Comparison: Handover Methods
| Method | Convenience | Security Risk | Turo Coverage Risk |
| In-Person | Low | High (Safety) | Low (You verify ID) |
| Window Lockbox | High | High (Relay attacks) | High (If verification skipped) |
| Turo Go (App Unlock) | High | Low | Lowest |
| Smart Lockbox (Remote) | Medium | Medium | Medium |
[IMAGE: Infographic showing the “2-Step Verification” workflow: 1. Guest uploads license photo -> 2. Host validates -> 3. Host sends code]
Step-by-Step Action Plan
- Buy a Faraday Bag: Put the key FOB inside a signal-blocking bag inside the lockbox. This prevents “Relay Attacks” where thieves amplify the key signal to open the door.
- Follow the Script:
- “Please upload a close-up of your license.”
- “Please upload a selfie holding the license next to your face.”
- Only then send the lockbox code.
- Screenshot Everything: Keep a record of the photos and the timestamp of when you sent the code.
- Hide the Lockbox: Do not hang it on the window. Lock it to a fence post nearby or the tow hook. Don’t advertise “There is a key right here.”
FAQ
Can I leave the key in the glovebox and unlock it remotely?
Yes, but you still need the ID verification photos before you unlock it.
What if the guest arrives late at night?
The rules are the same. No ID, no code. Automated messages are great for this.
Does insurance cover the lockbox if they steal it?
No. They cover the car. The $40 lockbox is a business expense.