Four Venezuelan Nationals Charged in $500,000 ATM Theft Ring

Federal prosecutors in Connecticut charged four Venezuelan nationals on June 29, 2026 with stealing more than $500,000 through an ATM jackpotting scheme, according to the U.S. Attorney's Office for the District of Connecticut. Among those charged is Euclides Moreno Itanare, 28, of Raleigh, North Carolina.

What Is ATM Jackpotting?

ATM jackpotting is a hybrid crime — part technical attack, part old-fashioned theft. Criminals install malware (malicious software) or a "black box" device directly inside an ATM by opening it up. Once the code activates, it forces the machine to spit out all its cash at once. A waiting accomplice collects the money, often in minutes. The method requires both specialized technical knowledge and hands-on access to the machine's internal components.

A Pattern of Organized Crime

This case isn't simply about $500,000. Jackpotting operations don't happen by accident or by a single person acting alone. They require someone to code or obtain the malware, others to coordinate which ATMs to target and when, and a network to move and hide the stolen cash. The fact that four people are charged and the sum is substantial suggests a crew with distinct roles — not random thieves grabbing opportunity.

Connecticut has prosecuted jackpotting cases before. In 2018, the same federal district convicted Argenys Rodriguez, 22, of Springfield, Massachusetts, for his role in a similar scheme. He was sentenced to 12 months and one day by U.S. District Judge Vanessa L. Bryant. That case set the legal and evidentiary template prosecutors have used since.

The Question of Nationality and Organization

The defendants' Venezuelan nationality has drawn notice. Law enforcement has tracked Venezuelan criminal networks engaged in various financial frauds in the United States over recent years. However, a person's nationality alone does not prove they belong to a larger criminal organization. Prosecutors must prove what each individual defendant specifically did — which is where the actual evidence comes in.

Why This Matters for Banks and Security

Banks and ATM operators are paying close attention. Law enforcement agencies, including the Secret Service and FBI, have long warned that jackpotting crews tend to move regionally in waves — they hit one area, then relocate before authorities can catch up. A $500,000 haul in what appears to be a compressed timeframe fits that pattern. The lesson for financial institutions is clear: better internal security on ATM machines and real-time software that flags unusual cash-dispensing behavior are not optional safeguards.

What Happens Next

The case now enters the pretrial phase. The defendants may plead guilty, as Rodriguez did in 2018, or contest the charges and go to trial. A guilty plea closes the case faster but keeps much of the operational detail secret. A trial would lay bare how the malware worked, where it came from, and how the network operated — information the public and security researchers would see but the defendants would fight harder to avoid.