The U.S. Department of Justice has announced sweeping indictments against members and leaders of Tren de Aragua, a Venezuelan transnational criminal organization, for executing one of the most significant ATM jackpotting campaigns in U.S. history.
Attackers gained physical access to ATMs, installed Ploutus malware onto the ATMs either via hard drive replacement or removable media, and this forced the machines to dispense millions of dollars. According to the DOJ, there have been at least 1,529 jackpotting incidents and $40.73 million in losses as of August 2025. Individual institutions suffered losses exceeding $100,000, and one Nebraska credit union lost $300,000 in a single event.
The stolen funds allegedly financed broader criminal and terrorist activities. This campaign highlights the ongoing risk posed by advanced malware, combined with physical security vulnerabilities.
Why It Matters:
Financial institutions remain prime targets for hybrid attacks that exploit both cyber and physical vulnerabilities. Staying proactive is critical to protecting your organization and clients.
Fraud Prevention Tips To Consider:
- Enhance Physical Security: Restrict and monitor access to ATMs and internal components.
- Update and Patch Systems: Ensure ATM software and operating systems are current to reduce malware risk.
- Monitor for Anomalies: Implement real-time alerts for unusual cash withdrawals or system commands.
- Employee Training: Educate staff on jackpotting tactics and suspicious activity indicators.
- Collaborate with Law Enforcement: Report incidents promptly and share intelligence with industry partners.
Stay Alert. Stay Secure.
For more details on ATM jackpotting risks and prevention strategies, contact your regional production underwriter today! To read the full press release, visit the DOJ’s official release.
Sources:
https://www.justice.gov/usao-ne/pr/tren-de-aragua-members-and-leaders-indicted-multi-million-dollar-atm-jackpotting-scheme
https://www.atmgeeks.com/insights/jackpotting-atms-and-ways-to-prevent-it
https://synergentcorp.com/blog/atm-jackpotting-attacks-are-accelerating-is-your-credit-union-prepared/
Make Sure Your Financial Institution Clients Have the Right Coverage!
Contact any one of our FI insurance experts below for help in making sure your FI customers have the right coverage from a strong, stable company!
Experts Focused On Your Protection. We Deliver.
| Northeast Region Seth Jainchill 860-466-7363 sjainchill@berkleyfs.com | Southeast Region Nick Zacchio 860-466-7190 [email protected] |
| Central Region Mike Saccone 303-408-9599 [email protected] | West Region Pete Verretto 206-802-3076 [email protected] |
| Underwriting Manager Edward Mongon 212-822-3312 [email protected] | National Marketing Director Scott Mynatt 404-443-2076 [email protected] |
| Vice President, Practice Leader Ryan Wenzel 212-497-3740 [email protected] |