A federal grand jury in Nebraska has issued a new indictment charging 31 individuals for their alleged involvement in an international scheme to deploy malware and steal millions of dollars from ATMs across the United States, known as “ATM jackpotting.” This brings the total number of charged defendants to 87. The operation, led by a Homeland Security Task Force, involves numerous Venezuelan and Colombian nationals, including members of the Tren de Aragua (TdA) group.
The indictment includes 32 counts such as conspiracy to commit bank fraud, computer fraud, bank burglary, and damage to computers. Authorities allege that TdA used sophisticated malware called Ploutus to hack into ATMs and force them to dispense cash. The conspiracy reportedly involved coordinated groups traveling nationwide to target banks and credit unions, conducting surveillance before installing malware on ATM hard drives or connecting external devices like thumb drives. After stealing money, participants allegedly divided the proceeds among themselves.
Attorney General Pamela Bondi stated, “Tren de Aragua is a complex terrorist organization that commits serious financial crimes in addition to horrific rapes, murders, and drug trafficking. This Department of Justice has already prosecuted more than 290 members of Tren de Aragua and will continue working tirelessly to put these vicious terrorists behind bars after the prior administration let them infiltrate our country.”
Deputy Attorney General Todd Blanche said, “A large ring of criminal aliens allegedly engaged in a nationwide conspiracy to enrich themselves and the TdA terrorist organization by ripping off American citizens. After committing bank robbery, fraud, and other serious crimes, they will be vigorously prosecuted and held accountable for their crimes. The Justice Department’s Joint Task Force Vulcan will not stop until it completely dismantles and destroys TdA and other foreign terrorists that import chaos to America.”
Assistant Attorney General A. Tysen Duva added, “This latest indictment demonstrates the Criminal Division’s commitment to dismantling cartels, including when they attack our nation’s financial systems with sophisticated malware. The announcement of charges against a total of 87 defendants underscores both the massive scale of these alleged conspiracies and the strength and skill of our investigators and prosecutors who dismantle them. As cartels level up their criminal game, so will we.”
U.S. Attorney Lesley A. Woods for the District of Nebraska commented on TdA’s activities: “Tren de Aragua uses ATM jackpotting crimes committed all across America to fund its terrorist organization which is responsible for horrific crimes such as human trafficking (to include sex trafficking of children in Nebraska), kidnapping, murder and other unspeakably evil and violent acts...The U.S. Attorney’s Office for the District of Nebraska will fight TdA directly by taking every action at our disposal to shut down their financial pipeline and handicap their ability to terrorize American communities.”
Chris Eason from Joint Task Force Vulcan stated: “TdA grew from a prison gang to a transnational criminal organization to a foreign terrorist organization. Using sophisticated malware to empty ATMs and damage U.S. financial institutions that also fund TdA’s terrorist activity will not be tolerated...We are grateful for our partnership with the U.S. Attorney’s Office for the District of Nebraska, and our law enforcement partners who worked tirelessly to investigate and bring these important charges.”
FBI Omaha Special Agent Eugene Kowel noted ongoing efforts: “A dedicated team of FBI Omaha agents and analysts are working shoulder to shoulder with our local, state, and federal partners to disrupt and dismantle an international criminal conspiracy ultimately funding a foreign terrorist organization...We will never stop following the money and surging resources to arrest and apprehend TdA members and leadership.”
Court documents describe TdA as originating from Venezuela in the mid-2000s before expanding operations throughout the Western Hemisphere—including establishing a presence in the United States—and engaging in various forms of crime ranging from drug trafficking to violent acts like murder.
The investigation is being led by FBI Omaha Field Office along with Homeland Security Investigations Omaha; several other regional FBI offices; multiple federal agencies including Secret Service; Customs agencies; numerous state police departments; sheriff's offices; local police departments; state attorneys general; district attorney offices; as well as specialized federal divisions within DOJ.
Prosecution is handled by DOJ’s Computer Crime Section alongside U.S. Attorney’s Offices from Nebraska—supported by counterparts in Washington State, California, New York City area districts (Southern), Illinois (Northern & Central), Oklahoma (Eastern), New Mexico (District), Florida (Southern), Wisconsin (Eastern), Colorado (District), plus county-level legal teams.
These actions fall under initiatives launched through Executive Order 14159—Protecting the American People Against Invasion—which established whole-of-government task forces targeting transnational criminal organizations operating within or affecting U.S interests.
Joint Task Force Vulcan was originally created in 2019 targeting MS-13 but has since expanded its focus on Tren de Aragua with collaboration among major law enforcement bodies such as FBI; DEA; HSI; ATF; USMS; Bureau Of Prisons—and many U.S Attorneys’ Offices nationwide.
If convicted on all counts listed in this most recent indictment or related indictments returned since October 2025 regarding ATM jackpotting schemes tied directly back towards material support for terrorism—defendants could face maximum sentences between 20 years up through life imprisonment depending upon specific charges brought forward per individual case files reviewed thus far.
All individuals named remain presumed innocent until proven guilty beyond reasonable doubt at trial.
