Can Modern Cars Be Hotwired? What Car Thieves Actually Do Now

Modern cars generally cannot be hotwired. Engine immobilizers — standard on most vehicles since the late 1990s and 2000s — keep the engine from running without the coded chip in the owner's key. Today's thieves instead exploit electronics, such as keyless-entry relay attacks, or target the 2011–2022 Kia and Hyundai models built without immobilizers.

In the movies it takes eleven seconds: pop the steering column, touch two wires together, drive off into the second act. That scene has been mechanically obsolete for roughly a quarter century, yet it still shapes how people think about car theft — and, more importantly, what they do (and don't do) to prevent it.

The short answer: no, the overwhelming majority of modern cars cannot be hotwired, because a hotwire only defeats the ignition switch, and the ignition switch stopped being the gatekeeper decades ago. An electronic immobilizer — a computer handshake between a chip in your key and the engine control unit — decides whether the engine is allowed to run at all. No valid chip, no combustion, regardless of what happens under the steering column.

To be clear about this article's purpose: it explains why the old technique died and what threats replaced it, so you can protect your own vehicle and evaluate theft risk when buying used. It does not — and will not — describe how to start any car without its key.

Why hotwiring worked then and fails now

On older vehicles, the ignition key was purely mechanical: it turned a switch that completed electrical circuits. Anything that completed those circuits by other means started the car, which is why classic cars from roughly the 1980s and earlier remain genuinely vulnerable to the old-school approach — and why many are stolen with far less effort than that.

The transponder immobilizer changed the architecture. A small chip embedded in the key head carries a code; an antenna ring around the ignition reads it; and the engine computer refuses to sustain fuel and spark unless the code answers correctly. The system spread through the late 1990s and became effectively universal on mainstream vehicles through the 2000s — driven in part by insurance-industry requirements in Europe and Canada, where immobilizers were mandated on new cars, and by their obvious effectiveness. Anti-theft researchers, including IIHS-HLDI, credit immobilizers with a substantial share of the long decline in US vehicle theft from its early-1990s peak.

So on a modern car, bypassing the ignition switch achieves nothing: the engine's own computer is the lock. That lock is not absolute — nothing is — but defeating it requires attacking the electronics, which is a different crime with different tools, not two wires and a spark.

What thieves actually do now

Modern vehicle theft has moved up the technology stack. Described at a high level — deliberately without operational detail — the prevalent methods today are:

Relay attacks on keyless entry: two thieves use radio equipment to relay the signal from a key fob inside your house to the car in the driveway, making the car believe the key is present. The car unlocks and starts normally; once driven away it typically will not restart without the key.
Key cloning and programming via the OBD port: thieves who get inside the car use electronic tools to program a new key or bypass modules through the diagnostic port — the same interface locksmiths use legitimately. Newer vehicles increasingly gate this behind security authentication.
Simple key theft: burglaries, valet copies, carjacking, and keys left in running cars. A large share of 'high-tech' theft is still just obtaining the actual key.
Towing and lifting: no electronics needed — the car is winched onto a flatbed in under a minute, then stripped for parts or given a fraudulent identity.
Targeting vehicles with weak or absent immobilizers — which brings us to the exception that made national news.

The Kia/Hyundai immobilizer gap

The most consequential recent example of what happens without an immobilizer: many Kia models from roughly 2011–2021 and Hyundai models from roughly 2015–2021 (with affected vehicles produced into 2022) sold in the US with traditional steel keys were built without engine immobilizers — a cost-saving omission that was legal in the US, though those brands' vehicles sold in Canada and Europe, where immobilizers were required, got them.

Starting around 2021, a social-media-driven theft wave — the so-called 'Kia Boys' phenomenon — exploited that omission, and thefts of the affected models exploded. IIHS-HLDI documented theft claim frequencies for these vehicles many times higher than comparable cars, and the fallout included municipal lawsuits, a class-action settlement, insurers declining coverage on some models, and both automakers shipping a free anti-theft software update plus steering wheel locks distributed through police departments.

If you own or are shopping for one of the affected models: check with a dealer whether the free software upgrade has been applied (dealers can verify by VIN), confirm any open recalls while you are at it, and treat a visible steering wheel lock as a worthwhile extra deterrent since the upgrade addresses the specific method but the models remain targets. If you are buying one used, a history report matters more than usual — theft and recovery records are common in these model years, and a recovered-theft vehicle may carry hidden damage.

Vehicle security eras at a glance
Era / vehicle type	Anti-theft architecture	Practical vulnerability today
Pre-1990s classics	Mechanical ignition switch only	High — old techniques still work; use layered deterrents and storage
Late 1990s–2000s mainstream	Transponder immobilizer standard on most models	Low for hotwiring; key theft and towing remain
2011–2022 affected Kia/Hyundai (steel key, US)	No immobilizer from factory	High until the free software upgrade is applied
Modern keyless-entry vehicles	Immobilizer + proximity fob	Relay attacks on the fob signal; OBD-based key programming
Any vehicle	—	Flatbed towing, carjacking, stolen keys — electronics don't matter

Theft prevention that actually works

Security bodies consistently recommend layered protection: make your car slower and riskier to steal than the next one, and cover the failure modes electronics cannot. In rough order of effort:

Never leave the car running unattended, and don't keep a spare key or valet key in the vehicle — a meaningful share of thefts involve keys the owner made available.
Store keyless fobs away from exterior doors and windows, in a signal-blocking (Faraday) pouch or box; this defeats relay attacks outright. Some fobs can also be set to sleep or have proximity unlock disabled — check your manual.
Use a visible physical deterrent — a steering wheel lock is cheap, and its whole job is convincing a thief to move on. For affected Kia/Hyundai models, get the free software upgrade and use the lock.
Park in well-lit, high-traffic spots or a locked garage; professional theft favors darkness and privacy.
Consider a tracking device (factory telematics or an aftermarket tracker) for recovery, and VIN etching on the glass to lower resale value to a chop shop.
Check whether your model year has theft-related recalls or software campaigns open — free to check by VIN.

The used-buyer angle: theft history follows the car

Theft risk is also a buying consideration. A vehicle that was stolen and recovered may have been driven violently, stripped of parts, or damaged during recovery — and a vehicle with an unrecovered theft record must not be bought at all, because it remains stolen property that can be seized without compensation.

Before buying any used car, run the VIN through a stolen-vehicle check and a full history report: theft records, total-loss events, and the auction photos that often accompany recovered-theft sales tell you whether the bargain price has a reason. And if you are choosing between models, theft-rate data is public — some vehicles are dramatically more targeted than others, which shows up in your comprehensive insurance premium.

Bottom line

Hotwiring is a period drama, not a modern threat: immobilizers made the ignition-switch bypass useless on virtually everything built this century. Real-world theft now runs through relayed fob signals, diagnostic-port key programming, stolen keys, flatbeds — and, notoriously, the 2011–2022 Kia/Hyundai models built without immobilizers. Layer your defenses (Faraday pouch, wheel lock, good parking, the free Kia/Hyundai upgrade if applicable), and when buying used, check the VIN for theft and recovery records before the bargain becomes your problem.

Frequently asked questions

Can modern cars actually be hotwired?

Generally no. Since the late 1990s and 2000s, engine immobilizers have been standard: the engine computer will not run without the coded chip in the key, so bypassing the ignition switch accomplishes nothing. The main exceptions are pre-immobilizer classics and certain 2011–2022 Kia/Hyundai models built without immobilizers.

How do thieves steal cars without hotwiring?

Mostly through electronics and logistics: relay attacks that extend a keyless fob's signal from inside your home, key cloning through the diagnostic port, outright key theft, carjacking, and flatbed towing. Physical deterrents, a Faraday pouch for fobs, and secure parking address most of these.

Which Kia and Hyundai models are easy to steal?

US-market Kia models from about 2011–2021 and Hyundai models from about 2015–2021 (some built into 2022) with traditional steel keys were sold without engine immobilizers, and a viral theft wave targeted them. Both automakers offer a free anti-theft software upgrade — a dealer can confirm eligibility by VIN.

What is a car immobilizer?

An electronic system that prevents the engine from running without the correct key. A transponder chip in the key answers a coded challenge from the car; without a valid response, the engine computer cuts fuel and spark. Immobilizers are credited with a large share of the long-term decline in vehicle theft.

Should I worry about buying a car that was stolen and recovered?

Inspect it like a damaged car, because it often is one: recovered vehicles may have been abused, stripped, or crashed. A vehicle history report shows theft and total-loss records plus auction photos, and a stolen-vehicle check confirms there is no active theft record — never buy a car that is still flagged stolen.