ATM jackpotting is an attack that makes an automated teller machine dispense cash from its own supply without a legitimate customer withdrawal. It targets the ATM’s cash-dispensing system—not necessarily a customer’s card, PIN, or bank account. In attacks involving malware, the malicious software can issue instructions through the ATM’s hardware-control software; criminals typically need physical access to introduce it.
How ATM jackpotting makes a machine dispense cash
An ATM normally processes an authorized withdrawal and sends the required instructions to its hardware. The FBI describes XFS as the software layer that directs ATM hardware. In a jackpotting attack it has reported, malware capable of issuing commands at that layer instructs the cash dispenser to release notes from the machine’s cassettes without a normal customer withdrawal authorization. The cash comes from the ATM itself, and the operator may discover the loss after the dispensing event.
Reported attacks have involved physical access to the machine, including modifying or replacing storage devices or connecting an external device. The FBI and the U.S. Department of Justice describe these methods at a broad level; those descriptions do not establish how common each method is across all attacks. The important distinction is that jackpotting compromises the ATM’s ability to dispense cash, rather than requiring a criminal to first steal a customer’s card details.
Jackpotting is not the same as skimming or a black-box attack
ATM crime reports can group several different techniques together. Europol’s 2015 taxonomy distinguishes them by what the attacker is trying to control or intercept:
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall#1 Best Overall
- AI Motion Detection 2.0 – Driving AI to the next level, human&vehicle detection and flexible detection area are more accurate than before. For quicker locating in crucial moments, human&vehicle smart searching in recordings offers you great help.
- Tried-and-True Safe Guard – This one-stop security solution can work with TVI, AHD, CVI, CVBS & IP cameras, the kit includes 1080P cams. The 8CH 3K lite DVR can hook up with 1080P@30fps or 3K/5MP@20fps cams. Therefore, you can also DIY it with other cameras in your home.
- Reliable 24/7 Continuous Recording – With a pre-installed 1TB HDD(Support up to 10TB HDD), providing 24/7 surveillance recording for you. Upgraded H.265+ saves more storage space and uses less bandwidth, recording videos longer and smoother viewing.
- Smart Dual-Light Effectively Guard Your Home – This newly upgraded security system offers you a crisp full color night vision, IR mode and color night vision switch flexibly. Once detect intruders, immediate pushes pop up on your phone, securing your peace of mind day&night.
- Color Night Vision & IP67 Weatherproof – Built-in IR lights and white lights, these cameras can see up to 100ft in B&W night vision, full-color night vision up to 66ft. Rated IP67, these wired cameras can brave all weather, and stand from cold to hot.
| Attack type | What it targets |
|---|---|
| Jackpotting | Malware controls the ATM computer and directs its dispenser to release cash. |
| Software skimming | Malware intercepts card or PIN data rather than directing the cash dispenser. |
| Black-box attack | An attacker-controlled external computer communicates with the cash dispenser. |
| Man-in-the-middle attack | Communications between the ATM and the acquiring host are altered. |
These categories describe different mechanisms, although broader ATM crime reporting may include more than one kind of activity. Jackpotting does not by itself mean a customer’s bank account or card was compromised.
What the FBI’s recent U.S. figures show
In a February 19, 2026 alert, the FBI reported over 700 ATM jackpotting incidents and more than $20 million in losses in the United States during 2025. The FBI said those cases were part of 1,900 reported jackpotting incidents in the country since 2020. These are U.S. reporting figures from the FBI, not a global estimate.
Rank #2
- 【AI Motion Detection 2.0】Driving AI to the next level, human&vehicle detection and flexible detection area are more accurate than before. For quicker locating in crucial moments, human&vehicle smart searching in recordings offers you great help.
- 【Tried-and-True Safe Guard】This one-stop security solution can work with TVI, AHD, CVI, CVBS & IP cameras, the kit includes 1080P cams. The 8CH 3K lite DVR can hook up with 1080P@30fps or 3K/5MP@20fps cams. Therefore, you can also DIY it with other cameras in your home.
- 【Reliable 24/7 Continuous Recording】With a pre-installed 1TB HDD(Support up to 10TB HDD), providing 24/7 surveillance recording for you. Upgraded H.265+ saves more storage space and uses less bandwidth, recording videos longer and smoother viewing.
- 【Smart Dual-Light Effectively Guard Your Home】This newly upgraded security system offers you a crisp full color night vision, IR mode and color night vision switch flexibly. Once detect intruders, immediate pushes pop up on your phone, securing your peace of mind day&night.
- 【Color Night Vision & IP67 Weatherproof】Built-in IR lights and white lights, these cameras can see up to 100ft in B&W night vision, full-color night vision up to 66ft. Rated IP67, these wired cameras can brave all weather, and stand from cold to hot.
Warning signs ATM operators should investigate
The FDIC Office of Inspector General (OIG) identifies signs that warrant investigation. None proves on its own that an ATM has been compromised:
- Access to the ATM outside an approved maintenance window.
- Unfamiliar files or devices found on or connected to the machine.
- Evidence that a hard drive has been removed or accessed directly.
- Unexpected surveillance activity around an ATM site.
- Cash levels that change abnormally or do not match expected activity.
Operators should compare anomalies with maintenance records and cash-reconciliation data, then follow their incident procedures if the signs cannot be explained.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Rank #3
- 【Local & Remote Control】 The home security camera system support local view & control, no need WiFi, true play & plug. For remote control, support dual-band WiFi 2.4GHz/5GHz connectivity. WiFi pro technology offers 100ft installation distance, suitable for indoor/outdoor use.
- 【Corded Powered, 24/7 Recording】 Hiseeu security camera system, 24/7 wired power of cameras and NVR support 24/7 recording, no dropouts or battery hassles. 3 recording modes (24/7 recording, motion-triggered recording, or customized recording ), total flexibility.
- 【1TB Storage, No Monthly Fee】 Security camera system pre-installed in 1TB hard drive, massive local storage (No subscription fee!) offering over 45 days of continuous 24-hour recording. H.265+ bandwidth optimization Delivers 50% bandwidth reduction compared to H.264 while maintaining 4K/8MP resolution, enabling stable transmission even in low-bandwidth environments.
- 【Expand to 10CH & IP66 Waterproof 】 The NVR security camera system is coming with 4pcs 5MP cameras+1pc 4K NVR with 10" Monitor, it supported to expand to 10CH, scalability to secure large homes or businesses. Operates flawlessly in heavy snow, high winds, and sub-zero temperatures
- 【Motion Sensor/AI Human Detection】 Motion detection of the wireless wifi security camera system give you 24/7 uninterrupted protection. Smartly distinguishes people from false alarms (like pets or shadows), sending alerts only for real threats by AI human detection
How ATM operators can reduce risk
No individual safeguard guarantees protection. The FDIC OIG and Europol’s 2015 guidance describe layers of physical, software, monitoring, and operational controls; Europol’s recommendations are historical guidance, not a newly issued standard. Neither source ranks the controls or provides comparative cost or effectiveness data.
| Control area | Measures described by the sources |
|---|---|
| Physical access | The FDIC OIG recommends unique access keys, security gates, changed standard locks, and tamper-resistant screws securing the hard drive. Europol also recommends restricting physical access. |
| Detection and monitoring | The FDIC OIG recommends hood alarms that require a code to disengage, CCTV, and license readers. Europol’s 2015 guidance also describes alarms and surveillance. |
| Software and platform hardening | The FDIC OIG recommends encrypted ATM software. Europol’s 2015 guidance adds BIOS protection, disabling boot from external drives, and operating-system hardening. |
| Operations | Control and record maintenance access, watch for unexpected surveillance, and consider more frequent cash refilling, as described in Europol’s 2015 guidance. |
What operators should do if an ATM may be targeted
The FDIC OIG advises ATM operators and institutions—not customers—to contact law enforcement and the FBI or FDIC OIG if jackpotting is suspected. It also advises preserving surveillance footage and closing the ATM lane while treating the scene as a crime scene. Follow institutional procedures and avoid disturbing potential evidence.
Rank #4
- AI Motion Detection 2.0: Driving AI to the next level, human&vehicle detection and flexible detection area are more accurate than before. For quicker locating in crucial moments, human&vehicle smart searching in recordings offers you great help
- Smart Dual-Light Effectively Guard Your Home: This newly upgraded security system offers you a crisp full color night vision, IR mode and color night vision switch flexibly. Once detect intruders, immediate pushes pop up on your phone, securing your peace of mind day&night
- Reliable 24/7 Continuous Recording: With a NEW surveillance grade pre-installed 1TB HDD(Support up to 10TB HDD), providing 24/7 surveillance recording for you. Upgraded H.265+ saves more storage space and uses less bandwidth, recording videos longer and smoother viewing
- Color Night Vision & IP67 Weatherproof: Built-in IR lights and white lights, these cameras can see up to 100ft in B&W night vision, full-color night vision up to 66ft. Rated IP67, these wired cameras can brave all weather, and stand from cold to hot
- Tried-and-True Safe Guard: This one-stop security solution can work with TVI, AHD, CVI, CVBS & IP cameras, the kit includes 1080P cams. The 8CH 3K lite DVR can hook up with 1080P@30fps or 3K/5MP@20fps cams. Therefore, you can also DIY it with other cameras in your home
What a 2026 DOJ case announcement does—and does not—mean
On January 26, 2026, the Department of Justice announced charges in an alleged conspiracy involving deployment of Ploutus malware. It said 87 people had been charged in the broader investigation at that point. The announcement describes allegations: charges are not convictions, and the figure is tied to that broader investigation, not a count of proven participants in every jackpotting incident.
Quick Recap
Best Value
- 【Tried-and-True Safe Guard】This one-stop security solution works with TVI, AHD, CVI, CVBS & IP cameras. The 8CH 3K lite DVR can hook up with 1080P@30fps or 3K/5MP@20fps cams. Plus, the advanced sensor & smart IR capture clear images up to 100ft away
- 【AI Motion Detection 2.0】Driving AI to the next level, human&vehicle detection, flexible detection area are more accurate than before. For quicker locating in crucial moments, human&vehicle smart searching in recordings offers you great help
- 【Reliable 24/7 Continuous Recording】With a pre-installed 1TB HDD(Support up to 10TB HDD), providing 24/7 surveillance recording for you. Upgraded H.265+ saves more storage space and uses less bandwidth, recording videos longer and smoother viewing.
- 【Smart Dual-Light Effectively Guard Your Home】This newly upgraded security system offers you a crisp full color night vision, IR mode and color night vision switch flexibly. Once detect intruders, immediate pushes pop up on your phone, securing your peace of mind day&night.
- 【Color Night Vision & IP67 Weatherproof】Built-in IR lights and white lights, these cameras can see up to 100ft in B&W night vision, full-color night vision up to 66ft. Rated IP67, these wired cameras can brave all weather, and stand from cold to hot.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
