U.S. sanctions 10 over alleged ATM jackpotting network

The U.S. Treasury Department on Wednesday sanctioned 10 people and entities over an alleged ATM jackpotting network that authorities say is linked to Tren de Aragua, a Venezuelan criminal organization. The targets include Anibal Alexander Canelon Aguirre, known as Prometheus, whom Treasury describes as the alleged engineer of malware used to force ATMs to dispense cash, along with associates and two Mexico-based companies. Treasury said the alleged attacks caused more than $40 million in losses across more than 1,500 incidents in the United States as of August 2025. The department’s estimate is based on its reported tally; the separate articles repeat the same government figure rather than offering independent measurements. According to Treasury, the operation involves crews identifying ATMs, breaking into machines and installing malware that can be activated remotely. The software bypasses security controls and sends a command to dispense cash. Authorities say proceeds were moved through associates and laundered through channels that included cryptocurrency and businesses in Mexico and other countries.