Criminals Hack Hundreds of US ATMs, Force Machines To Spew $20,000,000 In One Year: FBI

The FBI is warning financial institutions and the public about a sharp rise in attacks that compromise ATMs, forcing them to dispense cash.

In a flash alert, the FBI’s Internet Crime Complaint Center says there have been more than 1,900 so-called “jackpotting” incidents since 2020.

Over 700 of the attacks happened in 2025 alone, causing more than $20 million in losses.

To crack the machines, criminals first open the ATM using widely available generic keys.

They then remove or replace the hard drive and load malware that exploits Windows-based systems and the XFS software layer that controls cash dispensers.

The malware bypasses bank authorization entirely, letting attackers issue direct commands to spew out money.

The Department of Justice has already brought charges against dozens of people involved in Ploutus jackpotting attacks.

In total, federal authorities have charged 93 suspects, many alleged members of the Venezuelan gang Tren de Aragua.

The FBI is urging lenders to replace standard locks, install vibration sensors and alarms, enable hard-drive encryption, whitelist hardware and software and turn on detailed logging for USB devices.

Generated Image: Midjourney