ATM Jackpotting: The Cyber Threat You Might Not Know About

A type of cybercrime known as ATM jackpotting is becoming a growing concern for financial institutions across the country.

In February 2026, the FBI issued an alert about an increase in malware-enabled ATM jackpotting attacks in the United States. According to the FBI, more than 700 ATM jackpotting incidents occurred in 2025, resulting in more than $20 million in losses*.

So, what exactly is ATM jackpotting?

What Is ATM Jackpotting?

ATM jackpotting is a type of cybercrime where criminals compromise an ATM and use malware to make the machine dispense cash without a legitimate transaction.

Unlike a traditional card scam, the criminal isn't necessarily trying to steal information from someone's debit card or gain access to their account.

Instead, they're targeting the ATM itself.

Criminals can use a combination of physical access and malicious software to compromise an ATM's systems and force it to dispense cash.

That's why ATM jackpotting is sometimes described as a cyber-physical attack. It combines physical tampering with cybersecurity vulnerabilities.

How Is This Different From Card Skimming?

You've probably heard of card skimming.

Skimming typically involves criminals using an unauthorized device to capture information from a payment card. That stolen information can then potentially be used for fraudulent transactions.

ATM jackpotting is different.

Card skimming:
 The criminal is targeting your card information.

ATM jackpotting:
 The criminal is targeting the ATM.

With jackpotting, the goal is to make the machine dispense cash without a legitimate customer transaction.

Why Are Financial Institutions Paying Attention?

ATM jackpotting isn't simply a problem for ATM users. It's a cybersecurity issue for the financial institutions that operate and maintain these machines.

The NCUA specifically identified ATM jackpotting in its 2026 Cybersecurity and Credit Union System Resilience Report and highlighted the FBI's warning about the increase in malware-enabled attacks.

Financial institutions can use a combination of cybersecurity and physical security measures to protect ATMs, including monitoring, access controls, software protections and physical safeguards. And don’t worry, UK Credit Union is no different.

The FBI's guidance includes measures designed to detect unauthorized access and prevent compromised machines from dispensing cash.

What Does This Mean for You?

The good news is that ATM jackpotting generally isn't about someone stealing your personal information or accessing your account through your debit card.

But there are still some basic ATM safety habits worth remembering.

Pay Attention to the ATM - If an ATM looks damaged, appears to have been tampered with or has something unusual attached to it, consider using another machine.

Protect Your PIN - Always cover the keypad when entering your PIN, even if you don't see anyone nearby.

Keep Your Card Information Private - Don't share your debit card number, PIN or other account information with anyone who doesn't need it.

Monitor Your Accounts - Regularly review your account activity so you can identify transactions you don't recognize.

If you notice something suspicious, contact your financial institution as soon as possible.

Cybersecurity Goes Beyond Your Password

ATM jackpotting is a good reminder that cybersecurity isn't just about what happens on your phone or computer.

Every time you use your debit card, check your account balance or withdraw cash, you're interacting with a much larger financial technology system.

Behind the scenes, financial institutions are working to protect the systems, networks, devices and information that help keep your money accessible.

That's why cybersecurity requires more than one layer of protection.

At UK Credit Union, Your Security Is a Team Effort

We all play a role in protecting financial information.

You can help by staying alert, protecting your account information, monitoring your transactions and reporting anything suspicious.

And we're doing our part by continuously working to protect the systems and technology our members rely on.

Cyber threats continue to evolve. That's why staying informed matters.

The more you know, the more prepared you are.

This Cybersecurity Month, UK Credit Union is highlighting some of the evolving threats facing consumers and financial institutions. Follow along for more ways to protect yourself and your finances.

*The FBI reported more than 700 ATM jackpotting incidents and more than $20 million in losses during 2025, out of approximately 1,900 incidents reported since 2020. The NCUA specifically included ATM jackpotting among the cyber incidents and emerging threats relevant to credit unions in its 2026 report.