FBI Warns of Rampant ATM Jackpotting Causing $20 Million Losses in 2025

The FBI warns that ATM jackpotting incidents have surged since 2020, with about 1,900 incidents reported and roughly 700 in the most recent year, costing more than $20 million in 2025; the DoJ cites about $40.7 million in losses since 2021. Attackers deploy malware such as Ploutus to bypass ATM security and dispense cash through the XFS layer, often after physically accessing the machine or swapping its hard drive. Mitigations include stronger physical security, cameras, changing default credentials, automatic shutdown on compromise, device allowlisting, and comprehensive logging.