No Card. No PIN. Just Code — The ATM Heist Explained

A man holds a phone near an ATM for 8 seconds, walks away, and the machine empties itself — no card, no PIN, no trace. In 2010, security hacker Barnaby Jack demonstrated live ATM jackpotting on stage at Black Hat Las Vegas, dispensing $50,000 in 90 seconds. Criminal networks turned his ATM hacking technique into a global cybercrime operation, spawning malware like Tyupkin, Ploutus, and GreenDispenser across Russia, Mexico, Taiwan, and the United States. Between 2013 and 2020, ATM malware attacks stole over $1.5 billion — and that only counts what banks publicly reported.