VW & Audi Module Cloning: Which Modules Can Be Cloned

Which VW and Audi modules can actually be cloned

Most Volkswagen and Audi control modules can be cloned onto a donor, and the ones that can are cloned because their identity and immobilizer data sit in memory that a bench tool can read and write. Engine ECUs across the Bosch and Continental families clone. The BCM2 body module clones. Comfort BCMs, instrument clusters and the Audi electronic steering lock clone. What does not clone is a module whose security data cannot be recovered from the failed part, and those jobs become an immobilizer-off or a VIN write instead.

That distinction is the whole subject of this article, because it is the thing that decides whether your job is a two-hundred-and-fifty-dollar copy or something else entirely. These are our live prices as of September 2026, and everything here is mail-in bench work: the module travels, the car stays where it is.

Audi and VW module cloning at a glance

Module family	What we do	Price
Bosch ME7 petrol ECU	Clone onto your donor, identity and immo relationship carried over	$250
VW/Audi ME7 IMMO off	Immobilizer switched off inside the ME7 ECU for standalone running	$250
MED9 FSI / TFSI ECU	Clone or immo-off	$250
Continental Simos ECU	Clone or immo-off	$250
MED17 / ME17 ECU	Immobilizer delete plus VIN write	$250
VW/Audi EDC15 TDI	Immo-off plus clone on the early diesel ECU	$250
VW/Audi EDC16 TDI	Immobilizer delete	$250
EDC17 TDI	Immo-off plus clone	$250
PCR2.1 (EA211 / EA888)	Immo-off plus clone	$250
UDS immo-off at the ECM	Last-resort recovery when a UDS cluster has been bricked	$350
Bosch engine-ECU clone	Clone onto your donor with the immobilizer left intact	$300
BCM2 clone	Body module cloned onto a matched donor	$300
BCM2 all-keys-lost read	Bench read of the immobilizer data for key work	$250
Comfort / central electronics BCM	Clone onto a donor comfort module	$250
Instrument cluster clone	Cluster cloned onto a matched donor for dash swaps and failed clusters	$250
Cluster key programming	Bench read of immobilizer data, key programmed — add-a-key or all-keys-lost	$250
Audi ELV / ESL steering lock clone	Steering lock cloned onto a donor unit	$250

What cloning actually means on a VW or Audi

A clone is not a copied file. It is the transfer of a module's working identity from one piece of hardware onto another, so the car cannot tell the difference.

On a Volkswagen group vehicle, a module's identity is really several separate things stored in different places on the board. There is the part number and hardware coding that tell the rest of the network what the module is. There is the calibration or software that determines how it behaves. There is the VIN, written into memory. And on anything security-relevant, there is the immobilizer data: component security values, a key relationship, and in later architectures a cryptographic pairing between modules.

Cloning copies all of that onto the donor. The donor stops being another car's part and becomes yours. That is why a clone installs and runs, and a plain used-module swap does not. We go through the memory structures underneath this in our technical guide to how ECU cloning works at EEPROM level.

The hard requirement is that the original has to be readable. A clone is a copy, and you cannot copy what will not read. That single condition sorts most VW and Audi jobs into their correct lane before anything is shipped.

Component protection, and why a used module fails

If you have ever bolted a working used module into a VAG car and had it do nothing, component protection is usually why.

Volkswagen group introduced component protection as an anti-theft measure that reaches past the traditional immobilizer. In the older architecture, the immobilizer proved that the key belonged to the car. Component protection proves that the module belongs to the car. A protected module checks in with the vehicle's central data set, and if the identity it is carrying does not match, it either refuses to function or runs in a crippled mode — no infotainment, no comfort functions, no start, depending on what the module does.

That is the mechanism most people run into as "it is plugged in and nothing happens." The part is fine. The part just knows it is in the wrong car. We cover the failure pattern in detail in our guide to why a used ECU swap does not run plug and play.

Cloning solves this at the root, because the donor ends up carrying the identity the car expects. Immobilizer-off solves a different problem entirely — it removes the check rather than satisfying it — which is why the two are not interchangeable and why immo-off is scoped to specific legitimate cases described further down.

"The customers who get burned are the ones who buy a used ECU because it has the same part number. The part number is the easy half. The security data is the half that decides whether the car starts, and nothing about a matching label gives you that." — Independent VAG driveability specialist, 16 years (anonymized)

Engine ECUs, family by family

Engine ECUs are the most-cloned modules we see from this group, and each family behaves a little differently.

Bosch ME7 (petrol, roughly 1998-2006). The Motronic ME7.x generation covers the MK4 Golf and Jetta era, B5 and B6 Passat and A4, the 1.8T, 2.0, VR6 and 2.7 twin-turbo engines, and a long list of platform cousins including Bentley applications. These are the friendliest ECUs in the group for bench work. Immobilizer data is readable, the clone is straightforward, and identity transfers cleanly onto a donor. We clone ME7 ECUs at $250. Where a swap or race build has left the car without a cluster or keys at all, an ME7 immo-off is the other route at the same price.

MED9 (FSI and TFSI petrol). The direct-injection generation that follows ME7. It clones, and where the application calls for it we can take the immobilizer out instead. Our MED9 clone and immo-off service is $250.

Continental Simos. Simos covers a wide span, from the early 6.x units through the 18.x generation on later platforms. The same logic applies: readable data clones, and on the platforms where it is the right answer the immobilizer can be turned off. See our Simos clone and immo-off service.

MED17 and ME17. The modern petrol generation, including all its sub-variants. Here the usual job is not a straight copy but an immobilizer delete plus a VIN write at $250, which also covers MED9.x FSI and TFSI, Simos 6.x through 18.x, EDC15 TDI, and specific part-number requests.

EDC15, EDC16 and EDC17 (TDI diesel). The diesel line splits by generation. EDC15V, EDC15P and EDC15VM+ cover roughly 1998 to 2004. EDC16 covers roughly 2004 to 2009. EDC17 covers roughly 2008 to 2016 across Golf and Jetta TDI, Passat TDI, Audi A3, A4, A6 and Q5 TDI, Touareg, and the Skoda and SEAT cousins. All three generations are $250.

One point about TDI ECUs that we state plainly, because it is the single most common misunderstanding when a diesel ECU arrives on our bench: our work on these modules is immobilizer only. We do not touch emissions calibrations. No DPF, no EGR, no AdBlue or SCR defeat, and we will not modify a controller to disable emissions equipment. That boundary applies to every diesel module we handle, and it is not negotiable.

PCR2.1. The Bosch and Simos PCR2.1 unit on 2013-and-later EA211 1.4 TSI and EA888 2.0 TSI engines — Golf 7, Jetta, Passat B8, A3 8V, A4 B9, Q3 and their relatives. Immo-off plus clone at $250.

Bosch engine-ECU clone with the immobilizer left intact. Sometimes the correct job is simply a clone onto a donor with nothing removed — the security architecture stays exactly as the factory built it, the donor just becomes your ECU. That is our Bosch engine-ECU clone at $300, covering MED17 and ME17 petrol, EDC17 diesel and PCR2.1.

Audi immobilizer cloning: where the data actually lives

The question behind most Audi immobilizer cloning jobs is not "can this module be cloned" but "which module is holding the immobilizer in the first place." The answer changed twice across the modern era, and getting it wrong is what sends people the wrong part.

The immobilizer used to live in the ignition switch reader and the engine ECU. On the earliest generations, a transponder coil around the ignition lock read the key, and a small control unit talked to the engine ECU to authorize starting.

Then it moved into the instrument cluster. Through the immo3 and immo4 era, the cluster became the immobilizer master. It held the component security value, it held the key relationship, and it talked to the engine ECU on CAN. This is why so many VW and Audi immobilizer jobs are cluster jobs, and why a failed cluster on those cars is not just a dead speedometer — it is a car that will not start.

Then, on later Audi platforms, it moved into the BCM2. The second-generation body control module on the B8 A4 and S4, the 8T A5 and S5, the 8R Q5 and their platform cousins — roughly 2008 to 2016 — carries the immobilizer relationship itself.

If you are diagnosing a no-start and are unsure which of those three eras your car belongs to, our VW and Audi immobilizer no-start guide by platform walks through the identification.

BCM2: the immobilizer-carrying body module

BCM2 deserves its own section because it is the module people most often ask about and most often get wrong.

Because BCM2 holds the immobilizer relationship, a used BCM2 dropped into another car is a guaranteed non-start. There is no coding-it-in your way out of that with a generic scan tool. The module has to be made yours.

We handle it two ways. A BCM2 clone at $300 takes your original and transfers its data onto a matched donor, which is the answer when the original module has failed but still reads. A BCM2 all-keys-lost read at $250 is the other side of the coin: the module is fine, the keys are gone, and what you need is the immobilizer data read off the bench so a key can be made.

Both of those are security work, so both require proof of ownership. That is not a formality we can waive.

Comfort BCMs, clusters and steering locks

Comfort and central-electronics BCM. The comfort control module handles central locking, windows, mirrors, alarm functions and a share of the convenience network. On the cars where it is not the immobilizer master it is still identity-bound, and a used one will not simply take over. Our comfort and central electronics BCM clone is $250.

Instrument clusters. Clusters clone across the immo4 CAN era (roughly 2006-2010) and the UDS era (roughly 2010-2017). The job comes up two ways: a failed cluster that has taken the car's starting ability with it, and a dash swap where the donor cluster has to become the original. Cluster cloning is $250. Where the cluster is healthy and what you need is a key, cluster key programming reads the immobilizer data and component security on the bench and programs a working key, add-a-key or all-keys-lost, also $250.

There is one recovery case worth knowing about. When a UDS cluster has been bricked during a failed key or immobilizer attempt — which happens more often than the tool vendors advertise — the car can sometimes still be saved by switching the immobilizer off at the ECM so it starts and runs without a programmed cluster. That is $350 and it is explicitly a recovery of last resort, not a first choice.

Audi ELV / ESL electronic steering lock. The electronic steering lock on the C6 A6, S6 and RS6 (roughly 2005-2011) and the 4L Q7 (roughly 2007-2015) is a notorious failure point, and like everything else here it is identity-bound. A steering lock clone at $250 transfers your unit's data onto a donor. If you are still confirming that the steering lock is your fault, our ELV and ESL J518 guide covers the symptoms.

A note on what we do not clone here. DSG mechatronic units are a genuinely different discipline from body and engine module cloning, with their own adaptation requirements — if your car is showing DSG mechatronic failure symptoms, read that guide before assuming the fix is the same kind of work described on this page.

What cannot be done

Being straight about the limits is more useful than a longer service list.

A module that will not read cannot be cloned. If the memory is physically destroyed — water damage through the board, fire, a processor area that has been lifted by a previous repair attempt — there is nothing to copy. That job becomes an immo-off or a VIN write on a donor, if the platform supports one, or it becomes a dealer job.

Cloning does not fix a mechanical or electrical fault elsewhere. A cloned engine ECU does not cure a wiring fault, a failed sensor, a fuel delivery problem or a charging system that is destroying modules.

We do not perform emissions edits on any platform. No DPF, EGR, AdBlue or SCR deletes, on TDI or anything else.

We do not do odometer rollback. Cluster work transfers the true recorded mileage. Mileage synchronization when a cluster is replaced is legitimate and documented; winding a number backwards is not, and we decline it.

The legal boundaries we work inside

Immobilizer-delete and immobilizer-off work exists for real and narrow reasons, and we scope it deliberately.

Immo-off is offered for legitimate repair, off-road, and orphaned-platform cases only. The realistic examples are an engine swap or standalone build where the donor cluster and keys no longer exist, a track or off-road vehicle running an engine outside its original body, a platform old enough that the factory security path has been abandoned and no dealer route remains, or a recovery from a bricked module where the alternative is scrapping an otherwise sound car. It is not a service for making a vehicle of unknown origin start.

Proof of ownership is required for any immobilizer, key or security work. Every time, without exception. Electronic immobilizers exist because they work: organizations including the National Insurance Crime Bureau have long credited them with substantially reducing theft of the vehicles that have them, against a backdrop of roughly a million vehicle thefts reported annually in the United States in recent years. A shop that bypasses that check is part of the problem, and we are not going to be that shop.

We do not touch emissions calibrations. Onboard diagnostics have been mandatory on light-duty vehicles sold in the United States since the 1996 model year — three decades of regulation administered through the U.S. Environmental Protection Agency — and defeating the systems it monitors is not work we will perform.

The technical standards behind everything on this page are public. Pass-thru reprogramming was standardized through SAE International more than 20 years ago and underpins essentially all independent flashing in North America, while safety and defect oversight runs through the National Highway Traffic Safety Administration. The hardware itself comes from two suppliers you will see on almost every label: Bosch, whose Motronic and EDC families dominate the engine ECU list above, and Continental, whose Simos units cover much of the rest. The scale is worth appreciating — the Volkswagen group delivers roughly 9 million vehicles a year worldwide, with Audi alone accounting for well over 1.5 million of them, which is why these module families turn up in so many different cars.

How the mail-in bench work happens

This is national mail-in work. Nothing about it requires the car to come anywhere.

Confirm the module first. Text us a photo of the module label together with your VIN. On VAG platforms the label tells us the family, the sub-variant and often the memory type, and the VIN tells us which security era the car belongs to. That check is free and it prevents the most common wasted shipment: the right idea, the wrong module.

Send the right parts. Some jobs need one module. Some need two — a cluster job may need a working key, and a BCM2 or steering lock job may need the partner module for the data to make sense. We tell you before you pack anything.

Ownership documentation travels with the job. For immobilizer, key or security work, we need it before the work starts.

We read, clone or write, and verify. The original is read on the bench, the data is transferred or the target patch is written, and the result is verified before it is packed.

Return shipping is yours to choose. You select the return speed at checkout and it starts at $24.95.

Pack the module properly. Antistatic bag first, nothing plastic directly against the connector pins, and enough dense packing that the module cannot move inside the box. A loose module in a big box damages its own connector housings in transit.

Frequently asked questions

Can an Audi BCM2 be cloned? Yes. The BCM2 body control module on the B8 A4 and S4, 8T A5 and S5, 8R Q5 and their platform cousins from roughly 2008 to 2016 can be cloned onto a matched donor, and we do it for $300. It is necessary work rather than optional, because BCM2 carries the immobilizer relationship — a used one installed without cloning will not start the car.

Which Audi modules carry the immobilizer data? It depends on the era, and there are three. On the earliest cars the immobilizer lived with the ignition reader and the engine ECU, through the immo3 and immo4 generations it moved into the instrument cluster, and on later platforms such as the B8 A4 and 8R Q5 it moved into the BCM2 body module. Identifying which of the three your car uses is the first step in any immobilizer job.

Why will a used VW or Audi module not just work? Because Volkswagen group modules are identity-bound through component protection, which checks that the module belongs to this specific car rather than only checking that the key does. A used module carrying another vehicle identity either refuses to function or runs crippled, which is why it can appear completely dead even though the hardware is perfect.

Do you need my keys or another module to clone one? Sometimes, and we tell you before you ship. A cluster key job often needs a working key sent with the cluster, and some BCM2 or steering lock work needs a partner module so the security data can be interpreted correctly. Confirming this up front is exactly why we ask for a photo of the label and your VIN first.

Is immobilizer removal legal? We offer immobilizer-off work only for legitimate repair, off-road and orphaned-platform situations, and proof of ownership is required for any immobilizer, key or security work we perform. Typical valid cases are engine swaps and standalone builds where the original cluster and keys no longer exist, off-road vehicles, and recovery of a bricked module where the alternative is scrapping the car.

Do you delete DPF or EGR while working on a TDI ECU? No. Our work on EDC15, EDC16, EDC17 and every other diesel controller is immobilizer only. We do not touch emissions calibrations, we do not perform DPF, EGR, AdBlue or SCR deletes, and we will not modify a module to disable emissions equipment on any platform.

What does VW and Audi module cloning cost? Most module families on these platforms are $250, including ME7, MED9, Simos, EDC15, EDC16, EDC17, PCR2.1, comfort BCM, instrument cluster, cluster key programming, BCM2 all-keys-lost reads and the Audi electronic steering lock. The Bosch engine-ECU clone and the BCM2 clone are $300, and the UDS immo-off recovery at the ECM is $350.

The bottom line

Across the Volkswagen and Audi range, the useful question is not whether a module can be cloned but where its identity lives and whether that memory still reads. If it reads, a clone gives you back a module the car accepts as its own, at $250 for most families and $300 for the Bosch engine-ECU and BCM2 jobs. If it does not read, the honest route is an immobilizer-off or a VIN write on a donor, which we offer within clearly stated limits and only with proof of ownership.

The one step worth taking before anything else is the free one. Text us a photo of the module label with your VIN, and we will tell you which lane your car is in before a box leaves your hands. You can see everything we bench on our services page.