Skip to main content
AVOID.NET
Sign in

Tren de Aragua Crypto-Laundering Network

avoid.net/tren-de-aragua-crypto-laundering-network→2/100·92% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5mfNpn…geDo

Summary

The Tren de Aragua (TdA) crypto-laundering network is a sub-operation of the Venezuelan transnational criminal organization Tren de Aragua, which the U.S. government designated as a Foreign Terrorist Organization in February 2025. On September 30, 2026, OFAC sanctioned 10 individuals and 2 Mexico-based companies connected to an ATM jackpotting scheme that caused reported losses of $40.73 million across more than 1,500 attacks on U.S. financial institutions, with proceeds allegedly laundered through seven TRON blockchain addresses and a secondary network linked to a $1 billion professional money-laundering operation. The alleged malware architect, Anibal Alexander Canelon Aguirre, was added to the FBI Ten Most Wanted Fugitives list in March 2026 and captured in Venezuela in September 2026; as of the investigation date he has not yet been extradited or tried.

Connected Entities

8 entities · 1 linked investigation
Organizations
□Tren de Aragua Crypto-Laundering Network
Wallets
◇TCUmMC…2AgW◇TJjRAn…fyW9◇TWJmTG…UQYW◇TBEmt7…wJpJ◇TDxZ1X…yGBX◇TCifMA…8vjG◇THwbVu…ppdz
Relationships
  • TJjRAn…fyW9→mentioned with→Tren de Aragua Crypto-Laundering Network(50%)
  • TCUmMC…2AgW→mentioned with→Tren de Aragua Crypto-Laundering Network(50%)
  • THwbVu…ppdz→mentioned with→Tren de Aragua Crypto-Laundering Network(50%)
  • TBEmt7…wJpJ→mentioned with→Tren de Aragua Crypto-Laundering Network(50%)
  • TCifMA…8vjG→mentioned with→Tren de Aragua Crypto-Laundering Network(50%)
  • TDxZ1X…yGBX→mentioned with→Tren de Aragua Crypto-Laundering Network(50%)
  • TWJmTG…UQYW→mentioned with→Tren de Aragua Crypto-Laundering Network(50%)
Also appears in
Anibal Alexander Canelon Aguirre·2

Connected Through

7 shared actors · 1 investigation

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Tren de Aragua Crypto-Laundering Network?

Timeline(11 events)

1 March 2022

Earliest tracked inflows to the seven OFAC-designated TRON deposit addresses begin, per TRM Labs analysis.

TRM Labs

20 February 2025

U.S. Secretary of State designates Tren de Aragua as a Foreign Terrorist Organization (FTO) and Specially Designated Global Terrorist (SDGT).

U.S. State Department

1 August 2025

As of this date, reported U.S. losses from alleged TdA ATM jackpotting attacks total $40.73 million across more than 1,500 attacks, per Treasury data.

U.S. Treasury / OFAC

21 October 2025

DOJ begins indicting individuals for the ATM jackpotting conspiracy; initial indictments filed in U.S. District Court for the District of Nebraska.

DOJ

1 December 2025

DOJ announces indictment of 54 TdA-linked individuals in the ATM jackpotting scheme. Juan Gabriel Rivas Nunez separately indicted for material support to TdA.

HSToday / DOJ

1 January 2026

Federal grand jury in Nebraska indicts additional defendants; total charged defendants reach 87. DOJ also indicts Jorge Figueira in the Eastern District of Virginia for allegedly laundering approximately $1 billion in illicit funds.

DOJ / Yahoo Finance

20 February 2026

Federal grand jury in Nebraska indicts six more individuals, bringing total charged defendants to 93.

1011now.com

12 March 2026

FBI adds Anibal Alexander Canelon Aguirre to its Ten Most Wanted Fugitives list — the first individual designated as a cyber fugitive on the list. A $1,000,000 reward is offered.

FBI / Texas Border Business

1 July 2026

Most recent inflow identified to the TRON address attributed to Eric Gabriel Cardenas Arzola, per TRM Labs.

TRM Labs

15 September 2026

FBI Director Kash Patel announces the capture of Canelon Aguirre in Venezuela. He is described as the last fugitive from the FBI Ten Most Wanted list to be apprehended. Extradition status not publicly confirmed as of the OFAC designation date.

Breitbart / Latin Times

30 September 2026

OFAC designates 10 individuals and 2 Mexico-based entities linked to the TdA ATM jackpotting network and adds seven TRON addresses to the SDN List. DOJ total indictment count reaches 98.

U.S. Treasury
Provenance & Audit Trail
Anchored on SolanaVerify on-chain18 Wayback Archives

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 18 of 19 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 10/1/2026, 12:04:25 PM

last updated: 10/1/2026, 6:45:18 PM

avoid.net — verified advice for a post-truth world