A Venezuelan terrorist organization infiltrated America’s financial system, deploying sophisticated malware across the nation to steal millions from ATMs and fund violent criminal operations under the watch of the previous administration.
Story Highlights
- DOJ charges 87 total defendants, including members of Venezuelan terrorist gang Tren de Aragua, in massive ATM hacking scheme that drained millions from American banks
- Criminal network used Ploutus malware to override ATM security systems nationwide, with stolen funds allegedly financing violent terrorist activities
- Defendants face up to 335 years in prison for conspiracy to commit bank fraud, computer crimes, money laundering, and providing material support to terrorists
- Joint Task Force Vulcan’s investigation exposes how foreign criminal organizations exploited U.S. financial infrastructure while borders remained porous
Foreign Terrorist Organization Targets American Banks
The Department of Justice charged 31 additional individuals in January 2026, expanding a massive federal prosecution to 87 defendants linked to Tren de Aragua, a Venezuelan transnational criminal organization officially designated as a foreign terrorist organization by the U.S. government.
The sprawling conspiracy represents one of the most significant ATM jackpotting cases in American history, with primarily Venezuelan and Colombian nationals allegedly deploying malware called Ploutus to compromise ATM security systems and force unauthorized cash withdrawals totaling millions of dollars from financial institutions nationwide.
Investigation into International “ATM Jackpotting” Scheme and Tren de Aragua results in Additional Indictment and 87 Total Charged Defendants
“Tren de Aragua is a complex terrorist organization that commits serious financial crimes in addition to horrific rapes, murders, and… pic.twitter.com/g15mbJ4pFw
— U.S. Department of Justice (@TheJusticeDept) January 26, 2026
Sophisticated Criminal Network Exploited Security Vulnerabilities
Tren de Aragua operated a coordinated nationwide deployment network involving reconnaissance teams, malware installers, and money launderers working in concert to breach American financial security.
The criminal organization recruited operatives to physically access ATMs, install the sophisticated Ploutus malware that overrode security protocols, and coordinate mass cash withdrawals at designated times.
This systematic approach demonstrates how foreign criminal enterprises exploited vulnerabilities in U.S. financial infrastructure, raising serious concerns about border security failures that allowed such networks to establish operations across multiple states under the Biden administration.
Investigation Traces Money to Venezuelan Terror Operations
U.S. Attorney Lesley Woods stated that Nebraska law enforcement followed the money trail of this devastating financial crime back to its terroristic roots in Venezuela, where Tren de Aragua leaders allegedly used stolen American dollars to fund campaigns of violence and terror.
The 32-count indictment includes charges of conspiracy to provide material support to terrorists, establishing a direct connection between crimes committed on American soil and violent operations abroad.
Special Agent in Charge Eugene Kowel of the FBI’s Omaha Field Office confirmed that TdA poses a direct threat to Midwest communities and the entire country, relying on criminal revenue to support terrorism.
Defendants Face Centuries in Prison Under Federal Charges
The indictments detail charges including conspiracy to commit bank fraud, bank burglary, computer fraud, damage to computers, money laundering, and providing material support to terrorists. Defendants face maximum sentences ranging from 20 to 335 years imprisonment depending on their specific roles in the conspiracy.
Acting Assistant Attorney General Matthew R. Galeotti emphasized that the Criminal Division will not tolerate networks of thieves who breach financial system security for the nefarious purpose of supporting terrorists.
Federal officials indicate the investigation remains ongoing, with additional charges possible as authorities continue dismantling this international criminal network.
Case Highlights Border Security and Immigration Enforcement Failures
This prosecution exposes the dangerous consequences of lax immigration enforcement and porous borders that allowed a designated foreign terrorist organization to establish sophisticated criminal operations across America.
The presence of 87 defendants, primarily foreign nationals from Venezuela and Colombia, conducting coordinated attacks on American financial institutions demonstrates how transnational criminal organizations flourished under policies that prioritized open borders over national security.
The Trump administration’s renewed focus on dismantling such networks through Joint Task Force Vulcan represents a necessary correction after years of neglect that permitted foreign criminals to exploit American systems and fund terrorism with stolen money from hardworking citizens and businesses.
Sources:
87 charged in nationwide ATM ‘jackpotting’ scheme tied to Tren de Aragua gang – Fox 5 Atlanta
DOJ charges 31, including alleged Tren de Aragua members, in ATM malware case – ABC News
2 Venezuelans Convicted in US for Using Malware to Hack ATMs – SecurityWeek
