The person at the center of this case
Financial institutions and U.S. banking system
Justice for Financial institutions and U.S. banking system — the trail went cold in 2025, but the truth hasn't.
Start here
Where is Canelon Aguirre currently located given his known ties to Venezuela and Mexico?
What specific ATM malware was deployed and how can financial institutions identify compromised systems?
Who are the crew members operating under Canelon Aguirre's direction in the United States?
Anibal Alexander Canelon Aguirre is wanted for leading an international conspiracy that deploys crews across the United States to steal millions from financial institutions using ATM jackpotting malware to support the Tren de Aragua transnational gang, a designated foreign terrorist organization. Since January 2024, the conspiracy has allegedly enriched itself through unauthorized ATM cash withdrawals with proceeds laundered through complex networks. A federal arrest warrant was issued on December 9, 2025, in Nebraska, and investigators continue seeking information on his whereabouts and network connections.
Try asking
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
Beyond the top three above — each detail below could be the thread that pulls this case open.
What money laundering networks and financial institutions are involved in processing the stolen funds?
How can the public report information about Tren de Aragua operations or suspicious ATM activity?
Even the smallest detail could be the key to solving this case.
Official wording
Conspiracy to Commit Bank Fraud; Conspiracy to Commit Bank Burglary and Intentionally Damage a Protected Computer System; Conspiracy to Commit Money Laundering; Conspiracy to Provide Material Support to Terrorists Caution: Anibal Alexander Canelon Aguirre is wanted for allegedly leading a large international conspiracy that deploys numerous crews to the United States to steal millions of dollars from financial institutions in support of the Tren de Aragua transnational gang, a designated foreign terrorist organization which originated in Venezuela and now operates throughout Latin America and the United States. Since at least January of 2024, Canelon Aguirre and other members of the conspiracy are alleged to have unlawfully enriched themselves by committing ATM jackpotting, a scheme where malware is installed on ATMs to force the unauthorized withdrawal of cash, after which the stolen cash flows through a complex money laundering network.
On December 9, 2025, a federal arrest warrant was issued for Canelon Aguirre in the United States District Court, District of Nebraska, Omaha, Nebraska, after he was charged with Conspiracy to Commit Bank Fraud; Conspiracy to Commit Bank Burglary and Intentionally Damage a Protected Computer System; Conspiracy to Commit Money Laundering; and Conspiracy to Provide Material Support to Terrorists. This case is being investigated as part of Joint Task Force Vulcan in conjunction with the Computer Crime and Intellectual Property Section (CCIPS) of the Department of Justice.
Remarks: Canelon Aguirre has ties to Venezuela and Mexico. He is known to speak Spanish.
ATM jackpotting conspiracy allegedly begins with malware deployment across U.S. financial institutions
Warrant issued in U.S. District Court, District of Nebraska for Conspiracy to Commit Bank Fraud, Bank Burglary, Computer Damage, Money Laundering, and Material Support to Terrorists
For information leading to the resolution of this case
For information leading to the resolution of this case