Five Venezuelan nationals have pleaded guilty after trying to steal cash from ATMs in Kansas using the popular ATM jackpotting technique. The U.S. Department of Justice announced the case on August 31, following an FBI investigation that ended with the suspects’ arrests just days after the attempted thefts.
The case started in December 2025, when the five defendants traveled from Indiana to Kansas and targeted ATMs in Wamego and Manhattan. According to court documents cited by the DOJ, their plan was to install malware directly onto the machines and then remotely trigger the infected ATMs to dispense cash, which the group would collect afterward.
“The conspirators were unsuccessful in installing the malware on the ATM in Wamego, but their attempts at installing the malware triggered the alarm causing law enforcement to respond, and the culprits didn’t return to the site. In Manhattan, the group was equally unsuccessful in getting the ATM to dispense money. Both attempted thefts were captured by surveillance cameras, and the perpetrators were arrested a few days later.”
“According to court documents, Luis Alberto Velasquez-Artigas, 27, Royder Adrian Figuera-Perez, 29, Javier Mejia, Jr, 27, Gabriel Alexjandro Corales-Garcia, 33, and Italo Lizandro Corrales-Carrillo, 26, all pleaded guilty to one count of conspiracy to commit bank larceny.” reads DoJ.
The operation failed at both locations. In Wamego, attempts to install the malware triggered the ATM’s alarm, bringing law enforcement to the site and forcing the group to leave without completing the attack; in Manhattan, the criminals again failed to make the ATM dispense money. Surveillance cameras captured both attempts, and investigators arrested the suspects a few days later.
The DOJ identifies the five defendants as Luis Alberto Velasquez-Artigas, 27; Royder Adrian Figuera-Perez, 29; Javier Mejia Jr., 27; Gabriel Alexjandro Corales-Garcia, 33; and Italo Lizandro Corrales-Carrillo, 26. All pleaded guilty to one count of conspiracy to commit bank larceny. Velasquez-Artigas has already received a nine-month prison sentence, while the other four defendants are awaiting sentencing.
The important point for financial institutions is that jackpotting doesn’t depend on a customer using a stolen card or entering fraudulent credentials. Instead, criminals attack the ATM itself, using malware to take control of its cash-dispensing function. The FBI describes this as an emerging nationwide problem and says these attacks can allow criminals to steal cash without any legitimate transaction taking place.
The numbers help explain why federal authorities are paying attention. In a February 2026 FLASH, the FBI reported 1,900 ATM jackpotting incidents since 2020, including more than 700 in 2025 alone, with losses exceeding $20 million during that year.
The Kansas case also shows that jackpotting is not simply a software problem. The criminals needed physical access to the ATM to install the malware, but their plan then relied on remote activation to make the machine release the cash. That combination of physical intrusion and remote control makes jackpotting a hybrid security problem for banks.
The DOJ says the group specifically targeted ATMs they believed were more vulnerable to malware. That’s a relevant detail because it suggests some attackers may assess ATM technology before choosing their targets, rather than simply trying the technique against random machines.
That also explains why the U.S. Attorney’s Office is urging banks and other financial institutions to take preventive action. The advice is not limited to investigating theft after the fact. Authorities are asking institutions to invest in technology and security updates designed to prevent jackpotting attempts from succeeding in the first place.
For banks, the case is a reminder that ATM security now sits at the intersection of physical security, cybersecurity and fraud prevention. Protecting the customer account isn’t enough when the criminal’s objective is to compromise the machine and make it hand over the cash itself.
The FBI has made clear that it plans to continue working with financial institutions and law-enforcement partners to identify these schemes and strengthen defenses. The Kansas case shows that the attackers don’t need a successful cash-out to attract federal attention. In this case, the alarm went off before the ATM did its part.
“Jackpotting bandits are sweeping the nation. This particular group’s strategy was to specifically target ATMs they thought were by design more vulnerable to malware,” said U.S. Attorney Ryan A. Kriegshauser. “Fortunately, there is technology to help thwart jackpotting. We at the U.S. Attorney’s Office encourage banks and other financial institutions to invest in these updates, and we’re happy to answer questions about how to do so.”
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, ATM jackpotting)