Alleged Tren de Aragua members among 31 charged in ATM malware case

Published: Monday, January 26, 2026 at 11:00 am

ATM Malware Scheme Leads to Charges Against 31 Individuals

The U.S. Department of Justice announced on Monday that it has filed charges against 31 individuals in connection with a sophisticated scheme that allegedly stole millions of dollars from ATMs across the United States. This brings the total number of individuals charged in the case to over 50.

According to the Justice Department, many of those charged are alleged members of the Tren de Aragua, a Venezuelan gang. Court documents filed in Nebraska detail how the group is accused of using a malware program known as Ploutus to compromise ATMs. The alleged scheme involved recruiting members of the Tren de Aragua to deploy the malware.

The process reportedly began with the group testing ATMs to assess law enforcement response times. Once deemed safe, the malware was deployed via thumb drives, a method authorities have termed "jackpotting." The malware then issued unauthorized commands, forcing the ATMs to dispense cash illegally.

Deputy Attorney General Todd Blanche stated that the alleged perpetrators, described as a "large ring of criminal aliens," sought to enrich themselves and the Tren de Aragua through their actions. He emphasized the Justice Department's commitment to prosecuting those involved and holding them accountable. The investigation was conducted by the Homeland Security Task Force in collaboration with state and local authorities. The Justice Department's Joint Task Force Vulcan is actively working to dismantle the Tren de Aragua and other foreign terrorist organizations.

BNN's Perspective:

This case highlights the evolving nature of financial crime and the increasing sophistication of criminal organizations. While the involvement of a foreign gang raises concerns about transnational crime, the swift action by law enforcement demonstrates the importance of interagency cooperation in combating these threats. The focus on dismantling the Tren de Aragua is a positive step, but ongoing vigilance and investment in cybersecurity measures are crucial to protect financial institutions and the public from similar attacks in the future.

Keywords: ATM, malware, Tren de Aragua, jackpotting, fraud, Justice Department, Ploutus, criminal aliens, Homeland Security Task Force, Todd Blanche, Venezuela, financial crime, cybercrime, investigation, charges

Full Story