The FBI ATM Jackpotting Warning: Questions for Your Service Provider
Use the FBI jackpotting bulletin to review equipment support, updates, access controls, monitoring, and incident responsibilities.
The FBI's February 19, 2026 bulletin reported more than 700 malware-enabled ATM jackpotting incidents and over $20 million in losses during 2025. The bulletin describes attacks against ATMs that cause cash to dispense without a legitimate transaction. FBI bulletin.
For an equipment owner, the practical step is to review the machine's support and security arrangements with qualified providers. The bulletin's technical details should be evaluated against the actual equipment and configuration, rather than treated as a universal do-it-yourself repair guide.
Identify who supports the equipment
Ask who is responsible for the operating system, ATM application, firmware, hardware, and remote access. Record the responsible contact for each area. Processing support, maintenance, and security work may sit with different parties.
Request confirmation of the equipment and software versions through an appropriate private channel. Ask the responsible provider to review applicable manufacturer guidance and the FBI's mitigation recommendations. Avoid making changes based on a generic article.
Discuss maintenance and access controls
Ask how approved updates are identified, tested, authorized, and recorded. Discuss who has service access, how access is granted, and what happens when personnel or providers change. Keep credentials and detailed security configuration out of public communications.
Clarify what monitoring is in place, who receives alerts, and how unusual activity is escalated. A monitoring service should define its scope rather than be assumed to cover every physical and software issue.
Agree on the incident process
Ask who coordinates an incident, whom to notify, and how records are preserved under the organization's response plan. Discuss the roles of the equipment owner, service provider, processor, security specialists, and law enforcement as applicable.
Request a written account of any assessment and agreed follow-up work. A maintenance visit should not be presented as a guarantee against theft or malware.
Use ATM Atlas to locate relevant service contacts, then confirm whether they offer the security or software scope you need. A hardware repair listing alone does not establish cybersecurity expertise.