The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) designated 10 targets involved in a Tren de Aragua (TdA) fraud scheme that has become a key source of revenue for the foreign terrorist organization, the department announced September 30, 2026.

TdA is a Foreign Terrorist Organization responsible for violent and exploitative criminal activity across the Western Hemisphere, including drug trafficking, human trafficking, extortion, and murder-for-hire. Treasury said disrupting its financial networks is essential to protecting Americans.

The operation is orchestrated by Anibal Alexander Canelon Aguirre, also known as "Prometheus," one of the FBI's ten most-wanted fugitives. OFAC also designated Juan Gabriel Rivas Nunez, also known as "Juancho," a high-ranking TdA leader directing operations in multiple South American countries.

"President Trump's administration will not allow terrorist organizations like Tren de Aragua to exploit the U.S. financial system or enrich themselves through theft and other criminal activity targeting American individuals and businesses," said Secretary of the Treasury Scott Bessent. "Working alongside our law enforcement partners, we will continue to use all tools available to deny these terrorist financial facilitators the resources they need to operate, weakening their overall criminal enterprise and protecting the integrity of the U.S. economy."

While Prometheus's network is based in Mexico and Venezuela, the scheme targets U.S.-based automated teller machines, where criminals deploy malicious software to force ATMs to dispense cash. The stolen funds are then laundered and transferred to TdA members in various countries. Through this scheme, TdA has siphoned funds from U.S. financial institutions.

A "jackpotting" attack exploits vulnerabilities in ATMs and interactive teller machines using malware that forces them to dispense cash without debiting an account. As of August 2025, reported losses from alleged ATM jackpotting attacks in the United States totaled $40.73 million across more than 1,500 attacks. Since October 21, 2025, the Department of Justice has indicted 98 individuals for their roles in ATM jackpotting schemes.

OFAC also designated a TdA leader involved in illicit gold mining operations. The actions form part of a sustained, whole-of-government campaign that has resulted in over 30 actions against more than 300 individuals and entities tied to transnational criminal organizations since 2025.

The action was taken pursuant to Executive Order 13581, as amended, and Executive Order 13224, as amended. As a result, all property and interests in property of the designated persons in the United States or in the possession or control of U.S. persons are blocked and must be reported to OFAC.