U.S. Treasury Targets Venezuelan Crime Ring Over Multi‑Million Dollar ATM Hack Scheme

The U.S. Treasury Department announced sanctions against eight individuals linked to the Tren de Aragua criminal organization for their involvement in a series of ATM jackpotting attacks that siphoned millions of dollars from banks across the United States.

Tren de Aragua, a gang that originated in the Venezuelan state of Aragua, has long been associated with violent street crime, drug trafficking, and extortion. In recent years, the group expanded its operations beyond Venezuela, exploiting digital tools to conduct financially motivated crimes on an international scale.

ATM jackpotting, the technique at the heart of the Treasury's action, involves installing malicious software or hardware on cash‑dispensing machines to force them to dispense large sums of cash on command. The attacks, which were carried out at multiple locations in the United States, allowed the perpetrators to walk away with cash without leaving a traditional electronic trail, complicating law‑enforcement investigations.

By invoking the authority of the Office of Foreign Assets Control, the Treasury placed the eight alleged participants on its Specially Designated Nationals list, effectively freezing any assets they may hold under U.S. jurisdiction and barring U.S. persons from conducting transactions with them. The designations also signal a broader intent to disrupt the financial networks that enable the gang’s activities.

U.S. officials emphasized that the sanctions are part of a coordinated effort to protect the integrity of the nation’s financial infrastructure. They noted that the Treasury works closely with the Department of Justice, the Federal Bureau of Investigation, and international partners to identify and dismantle cyber‑enabled criminal enterprises.

Analysts say the move could hamper Tren de Aragua’s ability to launder proceeds from the ATM thefts, as the sanctions limit access to the global financial system and increase scrutiny of any associated accounts. The designation also serves as a warning to other transnational groups that leverage technology for profit.

The Treasury indicated that it will continue to monitor the gang’s activities and pursue additional measures if further evidence emerges. Ongoing cooperation with foreign law‑enforcement agencies suggests that the United States intends to expand its crackdown on similar cyber‑enabled fraud schemes, aiming to deter future attacks on the banking sector.