FBI Warns of Surge in ATM Jackpotting as Ploutus Malware Threatens Global Financial Security

ATM jackpotting involves hackers breaching cash-machine systems and using malware such as Ploutus to bypass bank authorization and command the machines to dispense cash. The attacks do not require the theft of customer credentials, yet can rapidly drain machines of cash. They have become a shared physical and cybersecurity threat for financial institutions, ATM manufacturers and law-enforcement agencies worldwide.

The Federal Bureau of Investigation said reports of ATM jackpotting across the United States in 2025 accounted for more than 30% of the total over the past five years, causing losses of more than $20 million. In response to the heightened risk, the Bankers Association of the Republic of China in Taiwan has also revised its security guidelines, requiring financial institutions to strengthen ATM protections, deploy virtual patches and plan the replacement of aging machines.