FBI Reports 1,900 ATM Jackpotting Incidents Since 2020, $20M Lost in 2025

**Executive summary:** The FBI has warned of a surge in ATM jackpotting across the U.S., with approximately 1,900 incidents since 2020 (700 in 2025) and DOJ reporting roughly $40.73M lost since 2021; attackers deploy Ploutus-like malware by gaining physical access (generic ATM keys, removing or replacing hard drives) to issue XFS commands that dispense cash without card or bank authorization. The bulletin outlines mitigations (physical controls, credential changes, allowlisting, logging, automatic shutdown) and notes recent indictments, including defendants allegedly affiliated with Tren de Aragua.