Five Hackers Plead Guilty to ATM Jackpotting Attacks

Key Takeaways

• Five Venezuelan nationals have admitted guilt in a federal case concerning attempted ATM jackpotting attacks in Kansas.
• The attacks involved attempting to install malware on ATMs to force them to dispense cash, a method known as jackpotting.
• Though the attempts failed, the case highlights a rising trend in ATM jackpotting across the U.S., with significant financial losses reported nationwide.
• Financial institutions are urged to enhance security measures to counter such sophisticated attacks.

Five individuals from Venezuela have entered guilty pleas in a U.S. federal court, admitting their involvement in attempted ATM jackpotting schemes. This method of criminal activity employs malicious software to compel automated teller machines to disburse currency without valid customer transactions.

The convictions stem from an FBI investigation into efforts to compromise ATMs in Wamego and Manhattan, Kansas, which occurred in December 2025. U.S. Attorney Ryan A. Kriegshauser emphasized the importance for financial institutions and banks to implement preventive measures, citing a continued increase in jackpotting incidents throughout the United States.

According to court documents, Luis Alberto Velasquez-Artigas, 27, Royder Adrian Figuera-Perez, 29, Javier Mejia Jr., 27, Gabriel Alexjandro Corales-Garcia, 33, and Italo Lizandro Corrales-Carrillo, 26, each pleaded guilty to one count of conspiracy to commit bank larceny.

The Modus Operandi

The conspirators reportedly journeyed from Indiana to Kansas with the explicit intention of targeting ATMs they believed possessed inherent vulnerabilities to malware-based manipulation. Their operational strategy involved gaining physical access to an ATM and attempting to install malicious software. The malware’s purpose was to grant the attackers remote control, enabling them to command the compromised machine to dispense cash.

This particular attack vector is widely recognized as jackpotting, a term derived from the criminals’ objective to trigger an ATM into releasing a substantial amount of currency simultaneously. Unlike card skimming, which targets transaction data, jackpotting focuses on exploiting the ATM’s internal software, operating system, hardware interfaces, or cash-dispensing mechanisms.

Failed Attempts and Rising Threats

In Wamego, the suspects’ attempts to install the malware were unsuccessful. Their actions activated an alarm at the ATM, prompting a law enforcement response. The group subsequently abandoned the site without retrieving any funds.

The defendants also made an attempt to compromise an ATM located in Manhattan, Kansas. However, this second operation similarly failed, and the targeted machine did not dispense any cash. Surveillance camera footage from both attempted thefts proved instrumental in helping investigators identify the suspects, leading to their arrest several days later.

In a February 2026 report, the FBI issued a warning about the escalating trend of ATM jackpotting activity nationwide. The agency documented 1,900 such incidents across the United States since 2020. Over 700 incidents were reported in 2025 alone, culminating in financial losses exceeding $20 million.

U.S. Attorney Kriegshauser noted that the defendants allegedly selected ATMs they perceived to have design flaws that rendered them more susceptible to malware attacks. He strongly advised banks to invest in security updates and advanced protective technologies specifically engineered to thwart unauthorized software installations and remote manipulation attempts.

Chris Ormerod, Special Agent in Charge of the FBI Kansas City Field Office, reiterated that jackpotting attacks exploit technological vulnerabilities within ATMs, allowing criminals to steal cash without legitimate transactions. Velasquez-Artigas has received a nine-month prison sentence, while the remaining defendants await their sentencing. Assistant U.S. Attorney Jared Maag prosecuted the case, with the FBI leading the investigation.

What You Should Do

• Implement Robust Security Updates: Regularly update ATM operating systems and software with the latest security patches to mitigate known vulnerabilities.
• Enhance Physical Security: Strengthen physical access controls for ATMs to prevent unauthorized tampering and malware installation attempts.
• Deploy Advanced Anti-Malware Solutions: Install and maintain specialized anti-malware and intrusion detection systems designed for ATM environments.
• Monitor for Suspicious Activity: Utilize surveillance and monitoring systems to detect unusual activity around ATMs, including attempts at physical access or software manipulation.
• Educate Staff: Train personnel on recognizing signs of jackpotting attempts and proper incident response protocols.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.