$175K Stolen Via ATM Jackpotting Scheme In Fair Oaks, Police Say

FAIR OAKS, VA — Detectives from the Fairfax County Police Department's Financial Crimes Unit are investigating a series of ATM thefts that resulted in $175,000 being stolen from a Fair Oaks credit union last month, according to police. Investigators believe the thefts may be connected to an ATM jackpotting scheme.

At 10:18 p.m., on Oct. 3, an unknown person used a key to open the drive-up ATM at the Apple Federal Credit Union in the 4200 block of Members Way near Fair Oaks, according to police. Investigators are not sure what actions the individual took while the machine was open.

On Oct. 4, at 12:28 a.m., just a few hours after the man first opened the ATM, the suspect returned in a late-model blue Jeep and reopened the machine, police say. Then, at 1:15 a.m., the man returned with two suspects in the same Jeep and accessed the machine for about 15 minutes. While this was going on, the suspects appeared to record the incident with their cellphones.

At 2 a.m, the Jeep returned with an unmasked suspect behind the wheel. Investigators say that he withdrew cash without touching the ATM or inserting a card. He left, but returned at 2:09 a.m. and resumed withdrawing cash until 2:44 a.m.

"ATM jackpotting is a cyber-physical crime where attackers compromise an ATM to force it to dispense large amounts of cash," according to FCPD. "This is accomplished by installing malware or a “black box” device to override the machine’s security, which can be done through physical access, such as a USB drive, or by intercepting communications between the ATM and its network. The term 'jackpotting' comes from the way the ATM rapidly dispenses cash on command — similar to hitting a jackpot on a slot machine."

Anyone with information about this incident or who believes they've been a victim are asked to call FCPD's Financial Crimes Unit at 703-246-3533. Tips can also be submitted anonymously through Crime Solvers by phone – 1-866-411-TIPS (866-411-8477), and by web – Click HERE.