Four individuals have been arrested and charged in connection with a sophisticated “ATM jackpotting” scheme that allegedly siphoned more than $529,000 from cash machines across Connecticut. U.S. federal prosecutors announced the arrests, highlighting a growing threat where criminals manipulate ATMs to dispense large sums of cash.
The Jackpotting Operation
The alleged thefts occurred over a 10-day period in August 2025. The criminal group reportedly targeted at least nine ATMs, primarily located at Interstate 95 rest stops and other sites across the state. Authorities allege the suspects utilized specialized hardware and malware to bypass the ATMs' security systems, forcing them to disburse cash without authorization—a technique known as 'ATM jackpotting'.
According to the U.S. Attorney's Office for the District of Connecticut, one incident alone saw the group extract $136,000 from a single ATM at a Fairfield rest stop. Investigators estimate the total stolen amount from eight machines to be $529,220.
Suspects Identified and Charges Filed
The four accused men have been identified as Euclides Moreno Itanare, 28; Willian Ricardo Flores, 49; Alberto Jose Freites Arvilla, 41; and Luis Jose Freites Arvilla, 38. Prosecutors detailed a consistent pattern of behavior observed through surveillance footage for each theft.
"For each of the thefts, the pattern of behaviour was similar," the U.S. Attorney's Office stated in its criminal complaint.
Luis Jose Freites Arvilla allegedly acted as a lookout while Alberto Jose Freites Arvilla accessed the ATM's internal components. The remaining suspects then took turns withdrawing cash. Investigators also noted the group changed clothes between withdrawals in an attempt to evade detection.
Extensive Investigation Leads to Arrests
The investigation, a collaborative effort involving the FBI, Connecticut State Police, and various local law enforcement agencies, linked the suspects to the crimes through a combination of evidence. This included surveillance footage, cellphone location data, digital evidence, and photographs reportedly recovered from their online accounts. Some of the digital evidence included images displaying large amounts of cash and internet searches related to ATM repair and skimming methods.
The suspects were apprehended on June 25 and now face federal charges of interstate transportation of stolen property and conspiracy. If convicted, they could face significant prison terms: up to 10 years for the transportation charge and five years for conspiracy.
Federal officials emphasized that this case underscores the increasing threat posed by ATM jackpotting attacks, where sophisticated malware is deployed to compromise cash machines and force them to release funds.