Five Venezuelan nationals pleaded guilty in federal court to conspiracy to commit bank larceny after targeting automated teller machines with malware in a string of ATM jackpotting attacks. According to the U.S.
Anatomy of a Malware-Driven Cash Out
ATM jackpotting involves installing malware into an ATM to force it to dispense sizeable amounts of money.
Court filings show that the five individuals named in the indictment were Luis Alberto Velasquez-Artigas, 27, Royder Adrian Figuera-Perez, 29, Javier Mejia, Jr., 27, Gabriel Alexjandro Corales-Garcia, 33, and Italo Lizandro Corrales-Carrillo, 26. In December 2025, the group traveled from Indiana to Kansas to execute their scheme against ATMs located in Wamego and Manhattan. Their method of operation relied on one member physically inserting the malicious software into the machines before the crew later triggered a remote command forcing the ATMs to eject bills for them to harvest.
The operation hit immediate roadblocks in Kansas. In Wamego, the attempt to plant the malware was unsuccessful, but it triggered the alarm causing law enforcement to respond, and the culprits didn’t return to the site. Moving on to Manhattan, the group was equally unsuccessful in getting the ATM to dispense money. Both locations captured the perpetrators on surveillance cameras, leading to arrests days later.
National Scale and Federal Warning Metrics
This localized incident highlights a much larger systemic vulnerability facing banking infrastructure across the United States. According to an FBI report released in February 2026, law enforcement has logged 1,900 jackpotting incidents since 2020. The threat vector has accelerated rapidly, with 2025 alone accounting for over 700 attacks and more than $20 million in cumulative financial losses.
“Jackpotting bandits are sweeping the nation. This particular group’s strategy was to specifically target ATMs they thought were by design more vulnerable to malware,” stated U.S. Attorney Ryan A. Kriegshauser. Federal prosecutors are encouraging banks and other financial institutions to take a proactive approach to guard against jackpotting.
Echoing these concerns, Chris Ormerod, FBI Kansas City Special Agent in Charge, noted that criminal actors exploit vulnerabilities in ATM technology to access and steal cash without legitimate transactions ever taking place. Ormerod emphasized that the bureau will continue working closely with private-sector and law enforcement partners to strengthen defense and pursue individuals deploying these innovative methods of theft.
Legal Status and Enterprise Mitigations
Judicial proceedings are moving forward following the guilty pleas. Luis Alberto Velasquez-Artigas has already received a nine-month prison sentence, handed down following prosecution by Assistant U.S. Attorney Jared Maag. The remaining four defendants currently await sentencing.
Attorney Ryan A. Kriegshauser has encouraged banks and other financial institutions to invest in technology to help thwart jackpotting.
