The FBI is alerting financial institutions to a dramatic increase in ATM "jackpotting" attacks, a sophisticated scheme forcing cash machines to dispense money. Since 2020, the Internet Crime Complaint Center has recorded over 1,900 such incidents. In 2025 alone, more than 700 attacks resulted in over $20 million in losses.
Criminals gain access using common keys, then load malware onto the machines. This exploit bypasses bank authorization, allowing direct commands to eject cash. Federal authorities have charged 93 individuals, many linked to the Venezuelan gang Tren de Aragua, in connection with these attacks.
The FBI recommends financial institutions upgrade locks, implement vibration sensors and alarms, encrypt hard drives, enforce hardware and software whitelisting, and activate detailed USB device logging to combat this growing threat.