Thieves are combining SMS-based phishing attacks with new “cardless” ATMs to rapidly convert phished bank account credentials into cash. Recent arrests in Ohio shed light on how this scam works.

https://krebsonsecurity.com/2018/11/sms-phishing-cardless-atm-profit/