FBI warns of ‘ATM Jackpotting’ scam — what it is and how to protect your money

The Federal Bureau of Investigation (FBI) has warned that a new cybercrime called “ATM jackpotting” is increasing in the US. In this scam, criminals use malware (hacking software) to make ATMs give out cash whenever they want. The FBI released a warning on Feb. 19 to tell banks and financial institutions about the rise in these attacks.

At least 1,900 ATM jackpotting cases have been reported in the past six years. Out of these, more than 700 cases happened in 2025 alone, causing losses of over $20 million, as stated by USA Today. Recently, a federal grand jury charged six people for running a jackpotting scheme in Nebraska. These accused people allegedly used malware to steal millions of dollars from ATMs across the US. They face charges like bank fraud, computer fraud, and bank burglary.

How ATM jackpotting works

Criminals install malware such as Ploutus into ATM machines. This malware infects the ATM’s software that controls its physical operations. Normally, ATMs send instructions for bank approval before giving cash. But hackers send their own commands, skipping bank authorization. This lets them take cash without any card, account, or permission.


The malware gives criminals direct control of the ATM machine. Importantly, this attack targets the ATM itself, not customer bank accounts. One method: they remove the ATM hard drive, connect it to a computer, copy malware, then reinstall it, as noted by USA Today. Another method: they replace the original hard drive with a new infected one and restart the ATM.

Warning signs an ATM is infected

Strange files appear on the system like Newage.exe or WinMonitor.exe. Suspicious scripts or files like C.dat or Logcontrol.txt may show up. New unknown folders may appear inside the system. Logs may show USB devices being connected to the ATM. Alerts may show ATM doors opened or hard drives removed outside maintenance time.

How to report ATM jackpotting

People or banks should report suspicious activity to their local FBI office or the Internet Crime Complaint Center (IC3). Reports should include bank details, ATM location, machine model, vendor info, and system logs. ATM jackpotting is a hacking scam where criminals control ATMs using malware to steal cash directly from machines. Banks should watch for tampering signs and report quickly.

FAQs

Q1. What is an ATM jackpotting scam?

ATM jackpotting is a cybercrime where hackers use malware to control ATM machines and force them to release cash without any bank card or permission, according to the Federal Bureau of Investigation.

Q2. Can ATM jackpotting steal money from my bank account?

No, this scam usually attacks the ATM machine itself, not customer bank accounts, but it can still cause big losses for banks.