|
I wanted to provide an update regarding the theft of motor vehicles, which members around this area have highlighted as an issue of concern on the Met Engage priority survey. Recent reports have highlighted a specific vulnerability affecting a range of Toyota and Lexus vehicles, including models like the Lexus RX, Toyota C‑HR, RAV4, and others. Thieves have been exploiting a weakness in the CAN‑bus wiring, which controls the car’s electronics.
Multiple sources confirm that criminals gain access by peeling back the front bumper or fender liner to reach the headlight wiring, then connecting a device known as a CAN Invader or CAN‑injector.
· This device injects fake electronic messages that trick the car into thinking a valid key is present, allowing thieves to unlock the doors, disable the immobiliser, and start the engine within minutes.
· In some Lexus models, thieves have also been able to access the CAN‑bus system through the taillights.
· A Lexus RX theft recorded by ClubLexus demonstrated that once thieves plug into the headlight wiring, they can “trick” the ECU and drive away in under 90 seconds.
This method bypasses traditional protections like key‑signal blocking (Faraday pouches), since the attack doesn’t involve key cloning but direct physical access to the wiring.
If you’re considering replacing your vehicle with another Toyota or Lexus model, it may be worth discussing these concerns directly with the manufacturer or dealership. Toyota and Lexus have acknowledged these attacks and, in some regions, have started offering wheel‑well protection to block access to wiring.
Here are some practical preventative measures recommended by security experts:
· Ask Lexus/Toyota about manufacturer‑approved security updates, such as wheel‑well shielding or wiring protection kits that prevent access to the CAN‑bus near headlights.
· Consider installing a CAN‑bus gateway blocker, which is designed to prevent fraudulent CAN messages from being accepted. Note that this is a more technical and costly solution.
· Use visible, low‑tech deterrents like a steering wheel lock or wheel clamp. These don’t stop the electronic method but can make your vehicle a less attractive target.
· When possible, park in well‑lit areas or behind another vehicle on a driveway to reduce physical access to the headlights or wheel wells.
· If buying again, ask the dealership directly:
o Whether the specific model has updated wiring protection
o What security enhancements they provide for high‑risk models
o Whether newer units have redesigned CAN‑bus layouts
It’s always worth having an open conversation with the manufacturer, especially if you’re considering another Lexus or Toyota. They can advise on the latest protections and any additional measures available for your chosen model.
 We know that people can be concerned about the personal and financial impact of having their vehicle stolen, which is why we will pursue and arrest those who break the law. Please consider taking the following steps to keep your vehicle safe: Check that your vehicle is locked and secure every time you leave it. Thieves often look for easy opportunities to steal from vehicles. They will usually try the handles until they get lucky and find one that has been left unlocked. Keep your keys safe, out of view when at home and away from your front door. If you have a keyless entry vehicle, keep the key well away from the vehicle while at home and turn off wireless signals on your fob when its not being used. Consider putting the keys in a screened or signal blocking pouch, such as a Faraday Bag and check that it is still working every few months. Park your vehicle in a private garage if you can. If you don’t have access to one, try to park in a well –lit open space. Try to use public car parks that are part of the police approved Park Mark safer parking scheme. Secure your number plates with tamper resistant screws to avoid them being stolen and used by others.
If you ever experience this issue or have information regarding an incident, please report it using our online reporting tools at https://www.met.police.uk/, speak to an operator in our Force Communications Room via our online web chat or call the non-emergency number 101. Alternatively, you can stay 100% anonymous by contacting the independent charity Crimestoppers on 0800 555 111 or via their untraceable online form at crimestoppers-uk.org. We are working on our brand-new strategy for how we police London and we want your help. Our New Met for London: Phase 2 strategy will guide how we deliver on behalf of Londoners over the next three years. | 
