Five Venezuelans Plead Guilty in US Court to ATM Jackpotting

Summary

Five Venezuelan nationals have pleaded guilty in a US court for their involvement in an ATM jackpotting scheme. The group attempted to install malware on ATMs in Kansas to force them to dispense cash, but their efforts were unsuccessful and they were apprehended. This case highlights a growing trend of ATM jackpotting incidents nationwide, with the FBI reporting over 1,900 incidents since 2020.

Full text

Five Venezuelan nationals have pleaded guilty in a US court to attempting to steal money from ATMs. The defendants, Luis Alberto Velasquez-Artigas, 27, Royder Adrian Figuera-Perez, 29, Javier Mejia, Jr, 27, Gabriel Alexjandro Corales-Garcia, 33, and Italo Lizandro Corrales-Carrillo, 26, attempted to install malware on ATMs in Wamego and Manhattan, Kansas. According to court documents, in December 2025, the five individuals traveled from Indiana for their attempted ATM jackpotting operation. The defendants planned to install malware on ATMs and then remotely activate it to force the device to dispense cash. Both their attempts were unsuccessful, but both were caught by surveillance cameras. The five defendants were arrested days later. According to the US Department of Justice, all five pleaded guilty to conspiracy to commit bank larceny. Velasquez-Artigas was sentenced to nine months in prison, while the other four are awaiting sentencing.Advertisement. Scroll to continue reading. “This case highlights a growing trend the FBI and our law enforcement partners are seeing nationwide involving a scheme known as ‘jackpotting’,” FBI Kansas City Special Agent in Charge Chris Ormerod said. In February 2026, the FBI warned that ATM jackpotting incidents have been increasing across the US. Over 1,900 such incidents have occurred since 2020, with over 700 of them (causing more than $20 million in losses) registered in 2025 alone. Last week, the US announced that 27-year-old Venezuelan national Juan Manuel Gouveia-Aguilera was sentenced to 96 months in prison and 5 years of supervised release for his role in an ATM jackpotting scheme. Related: Australia Arrests 2 Alleged TeamPCP Hackers Related: Cyberattack Causes Global Disruption at Boston Scientific Related: Surveillance – Everything You Wanted to Know, But Were Afraid to Ask Related: Snowflake Hacker Pleads Guilty in US Court Written By Ionut Arghire Ionut Arghire is an international correspondent for SecurityWeek. Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from Ionut Arghire Critical Ruby on Rails Vulnerability in Attackers’ CrosshairsExtortion Group Claims Manchester Airports Group Data BreachBerlin Won’t Pay Extortion Group Claiming Data TheftCritical Isolated-vm Vulnerability Leads to RCE on HostRust Supply Chain Attack Linked to North Korean HackersMicrosoft Patches Exploited Entra ID VulnerabilityCISA Urges Immediate Patching of Exploited TrueConf VulnerabilitiesThreat Actor Hacks 14,000 IP Cameras in Ukraine and Russia Latest News Ransomware Gang Claims Nutex Health Data BreachCritical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild9.5 Million Impacted by Aesto Health Data BreachWatchGuard Patches Critical VulnerabilitiesPaperCut Exploitation Escalates to Active IntrusionsNightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product ExploitServiceNow Patches 3 Critical Code Injection VulnerabilitiesMcKesson Confirms Data Breach as Attacker Deadline Looms Trending Daily Briefing NewsletterSubscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Virtual Event: Attack Surface Management Summit 2026 September 16, 2026 Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs. Register Webinar: Minimum Viable Business: Can You Prove Your Organization Would Recover? September 2, 2026 In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk. Register People on the MoveSocial engineering protection company Doppel has promoted Alyssa Smrekar to Chief Marketing Officer.Naveen Bhateja has been appointed Chief People Officer at HackerOne.The Department of War has appointed Sonu Shankar as Principal Deputy Chief Information Officer.More People On The MoveExpert Insights What the Hugging Face Incident Teaches Security Leaders About AI Agent Access Security teams must treat autonomous agents as highly privileged identities. (Etay Maor) The Future of AI-Driven Security Depends on Complete Data For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality. (Danelle Au) The MFA Identity Trap: When Authentication Creates a False Sense of Security Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop. (Torsten George) Silent Patches Don’t Stop Attackers – They Blind Defenders Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk. (Tod Beardsley) Hired for One Job, Judged on Another: The CISO’s Real Problem The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job. (Sravish Sridhar) Flipboard Reddit Whatsapp Whatsapp Email

Indicators of Compromise

• malware — ATM jackpotting malware

Entities