The U.S. Department of the Treasury’s Office of Foreign Assets Control announced on September 30, 2026, that it has designated 10 targets tied to a Tren de Aragua (TdA) fraud scheme, along with a high-ranking leader of the group. The operation utilizes ATM malware to force cash dispensers to release funds, with proceeds subsequently moved in part through cryptocurrency.
According to the Treasury Department, reported losses from the ATM jackpotting attacks totaled $40,730,000 across more than 1,500 incidents as of August 2025. The Mexico- and Venezuela-based network has established the scheme as a primary revenue source for the organization. The operation is reportedly orchestrated by FBI Top 10 Most Wanted fugitive Anibal Alexander Canelon Aguirre, also known as Prometheus.
Treasury Secretary Scott Bessent stated that the administration intends to prevent terrorist groups from exploiting the U.S. financial system. “President Trump’s administration will not allow terrorist organizations like Tren de Aragua to exploit the U.S. financial system or enrich themselves through theft and other criminal activity targeting American individuals and businesses,” Bessent said.
The U.S. State Department officially designated TdA as a Foreign Terrorist Organization on February 20, 2025. Additionally, the U.S. Justice Department has indicted 98 individuals in connection with TdA-linked ATM jackpotting schemes since October 21, 2025. The latest Treasury designations also extend to Mexico-based firms Enigma Community and Soluciones Integrales Toluca.
