‘Jackpotting’ the ATM: Venezuelan National Crime Ring Dismantled in Multi-State Sting

‘Jackpotting’ the ATM: Venezuelan National Crime Ring Dismantled in Multi-State Sting
Hector Alvarado-Alvarez and Cesar Gil-Sanchez

ALBANY, GA – A sophisticated criminal network of Venezuelan nationals that targeted ATMs across Georgia, Florida, and Kentucky has been dismantled. The group specialized in a high-tech theft method known as “jackpotting,” where malware is used to force machines to dispense large volumes of cash.

On January 7, 2026, the final two major players in the scheme, Hector Alejandro Alvarado-Alvarez (22) and Cesar Augusto Gil-Sanchez (22), pleaded guilty to conspiracy to commit bank fraud. They now face a maximum of 30 years in federal prison.

What is “Jackpotting”?

Unlike card skimming or identity theft, jackpotting does not target individual bank customers. Instead, it is a direct attack on the bank’s hardware.

  1. Physical Breach: Criminals gain access to the ATM’s internal computer, often by using a generic service key or tampering with the casing.
  2. Malware Infection: A USB device containing specialized malware (such as Ploutus-D or Cutlet Maker) is inserted into the machine.
  3. The Cash Out: Once infected, the software overrides the ATM’s security, commanding it to empty its cash cassettes. The money is spit out rapidly, like a slot machine hitting a jackpot.

A Trail of Thefts Across Georgia

The FBI-led investigation tracked the group’s activity through several rural and metropolitan areas:

  • Sept 2024: $24,000 stolen from Peoples South Bank ATMs in Macon, Americus, and Albany.
  • Oct 2024: Over $51,000 taken from ATMs in Morven and Valdosta.
  • Nov 2024: The ringleader, Alvarado Alvarez, was caught in Hazard, Kentucky, with $132,753 in cash, an ATM key, and electronic hacking devices.

Convictions and Deportation

Because the case was prosecuted in the federal system, there is no possibility of parole. All defendants are subject to immediate deportation by Immigration and Customs Enforcement (ICE) upon the completion of their sentences.

DefendantRole / StatusSentence / Status
Hector Alvarado AlvarezRingleaderAwaiting Sentencing (Up to 30 Years)
Cesar Gil SanchezCo-ConspiratorAwaiting Sentencing (Up to 30 Years)
Giobriel Valera-AstudilloAccompliceSentenced to 10 Months
David Suarez-SanchezAccompliceSentenced to 10 Months
Javier Suarez-GodoyAccompliceSentenced to Time Served

“These individuals exploited sophisticated malware and traveled across state lines to target financial institutions,” said Paul Brown, Special Agent in Charge of FBI Atlanta. “The FBI will continue working… to dismantle criminal networks that threaten the security of our banking system.”

Leave a Reply