Depending on what bypass they used they could have tapped into the obd2 connector or tapped into the pass key module wiring.