What began as a string of odd, apparent ATM malfunctions Maine towns turned out to be part of a sophisticated cyber scheme carried out by foreign nationals from Tajikistan and Iran, according to the Lincoln County Sheriff’s Office (LCSO).
According to a February 21, 2025, statement from the LCSO, investigators responding to multiple reports of suspicious activity at local ATMs uncovered a “widespread cyberattack” that allowed foreign thieves to drain machines of cash while appearing to conduct normal transactions — a scam known as “ATM jackpotting.
One of the culprits reached an agreement with a Maine court last week.
Through surveillance and license plate reader data, investigators identified three suspects: Nurmukhammad Rakhmonda, 26, and Firdavs Jonmahmadovic Radzhabov, 35, both of Tajikistan, and Milad Avazdavani, 36, of Iran, who also went by the alias Melech Vasquez. Authorities say the trio stole more than $10,000 from Maine ATMs.
Avazdavani was arrested March 13, 2025, in Charleston, South Carolina. Booking records later revealed his true identity after fingerprint analysis showed he was using a false name. Rakhmonda was captured two weeks later in Miami, Florida, and extradited to Maine, where he was booked at Two Bridges Jail in Wiscasset.
Prosecutors charged Rakhmonda with felony theft and criminal conspiracy in Lincoln County, felony theft in Hancock County, and misdemeanor theft in Waldo County. He resolved his Maine cases on November 5, 2025, under a deferred disposition agreement requiring him to pay $38,480 in restitution to affected victims. If he meets the terms of that agreement, the felony charges could be reduced to misdemeanors.
Rakhmonda will be extradited back to Florida, where he faces separate theft charges.
Avazdavani — whose criminal history extends back nearly a decade — was previously convicted in Florida in 2016 for his role in hacking American Airlines’ computer systems and stealing more than $260,000 worth of airline miles, according to law enforcement officials.
Authorities have not disclosed whether Radzhabov has been apprehended.
While the Maine losses pale in comparison to national cyber theft figures, investigators say the case underscores how organized foreign actors are increasingly targeting small-town financial institutions using sophisticated malware and remote-access technology.
The Lincoln County Sheriff’s Office continues to coordinate with federal and out-of-state agencies as the investigation unfolds.
Seamus Othot and Steve Robinson contributed to this report.
