Two Tajik Nationals, Iranian Charged in U.S. Over ATM ‘Jackpotting’ Cyber Heist
Washington: U.S. authorities have charged two citizens of Tajikistan and one from Iran with carrying out a coordinated cyberattack on ATMs to steal cash using a method known as “jackpotting.” Two of the three suspects are already in custody, officials confirmed.
Law enforcement in Lincoln County, North Carolina, identified the accused as Nurmuhammad Rahmonzoda, 26, and Firdavs Rajabov, 35, both from Tajikistan, and Milod Avazdavani, 36, an Iranian national. The alleged crimes occurred in February 2025 across several locations in the U.S. state of Maine.
According to investigators, the trio used advanced hacking techniques to infiltrate automated teller machines, forcing them to dispense money without registering legitimate transactions. The cyberattacks triggered multiple alerts after banks reported technical disruptions across their ATM networks.
Authorities said the scheme appeared to be premeditated and synchronized, targeting several machines simultaneously. The suspects allegedly stole more than $10,000 before being traced through CCTV footage and license plate recognition systems.
Avazdavani was arrested on March 13, 2025, in Charleston, South Carolina, while Rahmonzoda was detained two weeks later in Florida and later transferred to Maine. Officials have not yet confirmed the whereabouts of Rajabov.
Rahmonzoda faces formal theft charges and has been ordered by a court to pay $38,480 in restitution to affected banks. Under the ruling, if he fulfills the restitution order, the felony charge may be reduced to a misdemeanor, though he will still retain full criminal liability. Further hearings in the case are expected to take place in Florida.
The U.S. Department of Justice has not disclosed whether additional charges will be filed against the other suspects as the investigation continues.
In recent months, U.S. authorities have reported several arrests of Tajik citizens in unrelated cases, including terrorism and immigration offenses, underscoring what officials describe as a rising concern over cross-border criminal networks involving foreign nationals.
