Six people were arrested and charged today for participating in a worldwide ATM scheme that stole US$45 million (A$48 million) from two Middle East banks.
The five men and one woman, all residents of the New York City suburb of Yonkers, were accused of being members of a global cybercrime organisation that stole Mastercard debit-card information, according to the US attorney for the Eastern District of New York Loretta Lynch.
A spokesman for Lynch's office declined to comment on where the cybercrime organisation is based.
The six arrested Monday were "cashers" in the scheme, withdrawing approximately US$2.8 million from more than 140 ATMs in New York City, according to the US attorney's office.
The hackers stole debit card data from the National Bank of Ras Al-Khaimah in the United Arab Emirates, and Bank Muscat in Oman in two attacks in December 2012 and February 2013, according to prosecutors.
They broke into payment-processing companies used by the two banks and raised the balances and withdrawal limits on the cards, prosecutors said. Crews in more than 20 countries, such as the cell arrested Monday, then withdrew US$5 million between December 21 and December 22 and US$40 million between February 19 and February 20.
Five of the defendants arrested Monday -- Anthony Diaz, 24; Saul Franjul, 23; Saul Genao, 24; Jaindhi Polanco, 29; and Jose Angeley Valerio, 25 -- pleaded not guilty in federal court in Brooklyn to conspiracy to commit access device fraud. Their lawyers were not immediately available for comment.
A sixth defendant, Franklyn Ferriera, is expected to be arraigned on Tuesday. His age and the identity of his lawyer were not immediately available.
Each faces up to 7.5 years in prison and a fine of up to US$250,000, according to the announcement.
Prosecutors said that days after the February attack, Franjul packed approximately US$800,000 in cash into luggage that was sent by bus to one of the heist's organisers, Alberto Yusi Lajud-Pena.
Lajud-Pena, also known as "Prime" and "Albertico," was murdered on April 27 in the Dominican Republic.
"After exploiting cyber-weaknesses in the financial system to steal millions from ATMs, these defendants were packing bags to the brim with stolen cash, destined for the cybercriminal organisers of these attacks," Lynch said in a statement.
The arrests came six months after prosecutors in Brooklyn announced charges against eight others in the scheme, including Lajud-Pena.
Four other defendants have pleaded guilty to participating in the scheme, while three have pleaded not guilty, according to Nardoza.
Authorities in Germany arrested two Dutch citizens in February for their involvement in the scheme after they were caught withdrawing money at cash machines in Dusseldorf.