Unless you're the kind of person that believes in the truthfulness, good faith, and technical competence of insurance companies and the police, in which case I have a bridge in Brooklyn that I'd like to sell you.
1) Measure power draw from the car battery (not 100% conclusive probably but a 24-hour measurement might be)
2) Get a 20$ RTLSDR stick, drive somewhere remote with no cell coverage and watch for the tracking device in the GSM/3G frequencies - if found to try to connect it is at least powered on and trying to listen to commands
3) If activated and running on GSM, there might be a chance to listen to and decrypt its communication with the cell tower, especially if text messages are being used - and if not or it's running on 3G you could still monitor how active and frequent the device is in sending and receiving data
2, 3) Like in a multiple level underground parking lot?, that might work.
It is technically possible but probably beyond what the average new car buyer is willing to do.
What car thieves do is to drive the newly stolen car as far as they can in as little time as possible and park it somewhere public. And wait. If its not recovered after a day or two, they assume its not being tracked. (they remove the stereo, ecu and other valuable components in the meantime)
The first one is triggered by a dedicated signal from within the car to be activated. Otherwise they are offline to conserve energy. Energy is a very very limited resource in a car. When they are activated, they send a text message for the GPS position. Only a vary view newer once can trigger a web request to report the GPS position. When they are activated they can receive text messages to execute commands like disabling the engine.
Versus active trackers are the once mostly designed and engineered within the last 5 years, are able to consume very low energy while activated. They report the position (and may acceleration, deceleration and other parameters) via a web request.
Theft prevention are mostly established legacy systems more than 10 years old. Thats a different technology then we are used today.
Remember, there is not only 1 ECU. There are around 40 to more than 100 ECUs. A battery should deplete not more than 50% in 8 weeks.
Yet cars theft is still surprisingly common. Why is that ?
To wit: look at the amplifier attacks that got hundreds of Range Rovers stolen in London last year [1]. Is the tiny effort saved in not getting the keys out of your pocket worth a 50x increase in the chance of your car being stolen? And the subsequent large increase in insurance premiums? Most reasonable people would say "No".
[1] http://www.theguardian.com/money/2014/oct/27/thieves-range-r...
https://www.nicb.org/newsroom/news-releases/historical-look-...
This made me think of the "official cars" the peruvian government gets gifted from time to time. These cars are used by ministers, the president and important people in the government.
Shortly after china gifted a batch of cars an limos the japanese government did the same. Wonder if they are tapped?
For the most popular cars, the ones at higher risk of being stolen, tracking is mandatory. All insurance companies require it, otherwise they won't insure your car.
So, with the justification of a higher risk and by acting in a coordinated manner, peruvian insurance companies (4 which control the market) have effectively deployed a vast tracking network.
Don't know if something similar could happen in the US, there are too many insurance companies as to easily establish common policies across the board and I suspect that it would be harder to come up with a credible justification for it.