ThreatPaper
Assessed, Not Confirmed

TdA jackpotting caused $40.73M across 1,500+ attacks

Assessment

The figure originates with the U.S. Treasury, which scopes it precisely: 'reported losses from alleged ATM jackpotting attacks' in the United States totaling $40.73 million across more than 1,500 attacks 'as of August 2025.' It is a reported, not independently adjudicated, tally and a snapshot taken more than a year before the September 30, 2026 designation. Crypto and trade press routinely repeat it as the confirmed sum TdA stole; the qualifiers ('reported', 'alleged', 'as of August 2025') are what make the repeated form over-confident.

Where this claim appeared

U.S. Department of the Treasury · 2026-09-30

https://home.treasury.gov/news/press-releases/sb0640

What “Assessed, Not Confirmed” means

A named source states this as its own assessment, at its own stated confidence, rather than as established fact. Attribution to a nation state usually sits here. The assessment is real and reportable; treating it as settled is the error.

4 of 5 · rating scale

Assessed in

Tren de Aragua ATM jackpotting: OFAC sanctions network and seven TRON addresses; 'Prometheus' arrested

Think this assessment is wrong? Report an error.