Cars stolen in minutes by tapping headlight wiring: Spanish police hunt Valencia crime workshop

Organised crews of car thieves across the Valencia region have been taking cars without smashing a window or touching the owner’s keys. The suspected theft method has particular resonance because RAV4s have previously been targeted using a CAN-injection technique that accesses the car’s electronic network through the headlight wiring. Doors unlock, the immobiliser drops out, and the vehicle is driven away in a few minutes. National Police are now searching for an illegal workshop in Valencia province where GPS trackers are killed, chassis numbers altered and plates cloned before the cars leave Spain to be sold off elsewhere.

Toyota RAV4s built before 2022 are said to dominate the local caseload because they are common, hold their value and sell well abroad. However, that does not mean the method is limited to one brand or model.

How the headlight attack works

Modern headlights are not just lamps. Many are on the same Controller Area Network (CAN) as the smart-key system. Once thieves gain access to the vehicle’s internal electronic network, specialised equipment can send fraudulent messages that make the car believe a valid key is present and allow the immobiliser to be bypassed. Researchers Ken Tindell and Ian Tabor documented the trick in 2023 after Tabor’s own RAV4 was stolen following two “vandalism” attacks on a headlight. Criminal markets later sold injectors hidden inside Bluetooth-speaker shells. Police in Almeria have already arrested a gang using that style of gadget on RAV4s. Catalonia’s Mossos and customs officers dismantled another network that stuffed the same model into containers for Tangier and Gambia.

Factory alarms often stay quiet because the car believes a genuine electronic key has spoken. Relay-attack advice, keys in a Faraday pouch or a switched-off microwave, still matters for a different crime. It will not stop someone at the connector on the front wing.

Other models already on the same list

CAN-injection tools have been advertised for far more than one Toyota. Public reporting and dark-web compatibility lists cited by researchers have named:

• Toyota Highlander, Land Cruiser, Prius and GR Supra

• Lexus RX, NX, ES, LS, LC and UX

• Ford F-150 and other Fords

• Honda, Volkswagen, Jeep, Fiat, Peugeot, Renault, Nissan

• BMW, Jaguar, Chrysler, Cadillac, GMC

Some Range Rover / Land Rover models have access to a rear light or another exterior loom rather than the headlamp

Entry point changes by design. RAV4 and many Lexus SUVs are attacked at the front light cluster or left wheel-arch liner. Ford pickups have been shown with even quicker headlight-harness access. Other cars bury the same wires deeper, so gangs switch to relay attacks, cloned keys, pirate tow trucks or a simple lift onto a transporter. High-demand SUVs and hybrids still come first because a workshop can change the identity and ship a complete car.

Spain has seen that export pattern before. Euro Weekly News previously covered a clandestine chop shop in La Nucia that rebuilt stolen cars and gave one a fake German identity, and Operation PIMA-KRADSTI, which recovered 13 vehicles after plate and chassis swaps in Denia, Javea, Teulada and Gandia.

Where the Valencia wave is currently targeting

Complaints now run through Valencia and Alicante provinces, including streets and retail car parks, then down the Safor and Marina coasts. Gandia, Altea, Benidorm and Denia are named in the the local press. AP-7 and Mediterranean ports give crews a fast run to a warehouse or a container.

Bocairent supplied a grim detail: A resident reported her RAV4 stolen in the early hours of January 15. She had only owned it two months and usually kept it in a garage. That night she left it on the street. Hours later her phone still showed the car outside the house. Investigators treat a “live” tracker on an empty patch of tarmac as a sign the locator was dumped or switched off at a workshop, not proof the SUV is still there.

What officers think the criminal workshop does

National Police opened a file after the same make kept vanishing. Suspects look specialised, not opportunistic. A nave in Valencia province is thought to strip official identity: GPS out, VIN/chassis changed, duplicate plates on. After that the motor can move as if it were legal. There was also a large RAV4 network broken in 2025. Officers want to know whether this wave is leftovers or a new crew on the same shipping lanes.

Anyone who finds a bumper hanging off or a headlight unplugged should treat it as a failed attempt and report it. Stolen-car reports above petty-theft limits still belong at a station, though Spain now lets some victims start an online complaint via Guardia Civil. Dial 091 for National Police or 062 for Guardia Civil. Have the VIN, plate and any tracker login ready.

Practical steps that actually slow this job

A steering lock can make a thief spend longer trying to take the car, increasing the chance of being noticed. An additional immobiliser fitted by a specialist can provide another layer of protection, while a well-hidden tracker may help police recover a stolen vehicle.

Toyota has also produced security plates for the headlight assemblies of some RAV4 models in certain markets. Owners should ask a Toyota dealer whether one is available for their particular vehicle.

Keeping the car in a locked garage is another simple but effective precaution. As the Bocairent case showed, leaving a car on the street can make it an easier target. Tindell’s original CAN injection explainer is still the clearest public account of why trusted internal messages are the weak point.

Pre-2022 RAV4s have been filling Valencian incident rooms recently. Lexus SUVs, Highlanders, Land Cruisers and several other keyless models share the same class of risk whenever the wiring is easy to reach from outside. Until that workshop is found, a tidy family SUV on a Costa Blanca street is not “too ordinary” to steal. It is exactly the product these gangs already know how to start.