U.S. Sanctions Individuals Linked to Tren de Aragua Theft Scheme

Why it matters locally: While no specific Connecticut institutions were named, the sanctions highlight a federal effort to combat transnational criminal organizations that could potentially target financial institutions nationwide, including those in Connecticut.

WASHINGTON – The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has sanctioned 11 individuals with alleged ties to the Tren de Aragua (TdA) transnational criminal organization. The sanctions target 10 individuals reportedly involved in a scheme to steal millions of dollars from U.S. financial institutions and one alleged TdA leader in illicit gold mining. OFAC implemented these sanctions, announced by Thomas "Tommy" Pigott, Spokesman for the Office of the Spokesman, on September 30, 2026. These actions fall under Executive Order 13581, which targets transnational criminal organizations, as amended by E.O. 13863, and E.O. 13224, as amended, which targets terrorists and their supporters. Authorities allege that Anibal Alexander Canelon Aguirre, also known as “Prometheus,” orchestrated the ATM theft scheme. Canelon Aguirre appears on the FBI’s 10 Most Wanted Fugitives list. Investigators state that the scheme involved using malicious software installed on U.S.-based automated teller machines. This software allegedly forced ATMs to dispense cash, which criminals then laundered and transferred to TdA members. Separately, OFAC sanctioned Juan Gabriel Rivas Nunez, known as “Juancho,” an alleged TdA leader. Authorities state that Rivas Nunez operated across multiple South American countries. He allegedly engaged in illicit gold mining operations, narcotics exporting, and violent crime. The U.S. government states that it will pursue individuals and entities that finance or conduct business with Tren de Aragua. The Department of the Treasury provided further details on the sanctions in a press release.