ON
← Back to feed
The US Blacklists Alleged Venezuelan Cyber Crime Mastermind
United States🏛️ PoliticsCenter8 hr. ago

The US Blacklists Alleged Venezuelan Cyber Crime Mastermind

The U.S. Department of the Treasury has blacklisted Aníbal Alexander Canelón Aguirre, a Venezuelan national listed on the FBI’s 'Ten Most Wanted' list, as a key figure in the financial operations of the Tren de Aragua (TdA) criminal gang. Canelón Aguirre is accused of orchestrating a large-scale ATM fraud scheme using malware, known as 'jackpotting,' which enables thieves to extract cash from ATMs. He is among six Venezuelans and three Mexicans added to a sanctions list that restricts their access to the global financial system. The U.S. authorities claim they have apprehended him, though he remains listed on the FBI’s website as a fugitive. The FBI’s Director, Kash Patel, stated that the arrest clears the agency’s 10 Most Wanted Fugitives list, but provided no details on the operation or collaboration with Venezuelan authorities. The OCCRP sought comment from the Venezuelan government, which did not respond.

Prosecutors in Nebraska have begun a complex legal battle against Anibal Alexander Canelón Aguirre, a Venezuelan national accused of orchestrating a multimillion-dollar ATM fraud scheme to fund the notorious Tren de Aragua gang. Canelón Aguirre, 50, was arrested and remains in custody after being captured on the high seas, according to FBI Special Agent in Charge Eugene Kowel. His arrest followed a U.S. Treasury Department designation that blacklisted him as a key financier for the transnational criminal organization. The FBI confirmed his capture in a news conference in Omaha on Saturday, marking a significant step in efforts to dismantle the gang’s operations. Kowel stated that the FBI, with assistance from the U.S. Coast Guard and its Critical Incident Response Group, transported Canelón Aguirre by sea and air to the District of Nebraska. His image now displays a red "Captured" bar on the FBI’s most-wanted fugitives webpage. However, this account conflicts with earlier statements by FBI Director Kash Patel, who during a Senate hearing weeks prior claimed Canelón Aguirre had been captured in Venezuela without specifying the method or confirming the location. Patel later emphasized the significance of the arrest, calling it the first time a cyber fugitive was added to the FBI’s Ten Most Wanted list and hailed it as a major success for the agency. Canelón Aguirre appeared in a Nebraska courtroom on Friday, where he pleaded not guilty to four federal conspiracy charges. These include bank fraud, bank fraud using a computer, conspiracy to commit money laundering, and conspiracy to provide material support to a designated foreign terrorist organization. A federal judge denied his bail request, citing concerns over his potential to flee due to his lack of ties to the United States and his involvement in a serious financial crime. The judge ruled that the case qualifies as complex, meaning Canelón Aguirre will not receive a speedy trial. Prosecutors and his court-appointed attorney must file motions by October 23, with a court appearance scheduled for October 30. According to the Justice Department, Canelón Aguirre is alleged to have been the mastermind of a widespread ATM "jackpotting" scheme, a form of cybercrime in which attackers use malware to manipulate ATMs into dispensing cash. The DOJ claims the conspiracy has been linked to Tren de Aragua, a group designated as a foreign terrorist organization by the U.S. government. Over 120 individuals have been charged in the District of Nebraska for their roles in this conspiracy. Attorney General Todd Blanche praised the arrest, noting it marked another victory for the Homeland Security Task Force and Joint Task Force Vulcan, emphasizing ongoing efforts to combat narcoterrorist finance networks. Canelón Aguirre, also known as "Prometheus" or "The Engineer," has been on the FBI’s Ten Most Wanted list since March 12, 2026, making him the first cybercriminal ever included on the list. The FBI offered a reward of up to $1 million for information leading to his arrest. His alleged involvement in developing malware used in the Tren de Aragua’s operations has drawn attention from both domestic and international law enforcement agencies. The U.S. Treasury’s decision to blacklist him effectively barred him from accessing the global financial system, limiting his ability to conduct transactions or move funds internationally. While the FBI has publicly acknowledged his capture, the exact circumstances of his apprehension remain unclear. Kowel’s account of the capture occurring on the high seas contradicts Patel’s earlier assertion that the arrest took place in Venezuela. This discrepancy has raised questions about the coordination between U.S. and Venezuelan authorities, particularly given Article 69 of Venezuela’s constitution, which prohibits the extradition of its citizens. Despite these uncertainties, Canelón Aguirre’s presence in the U.S. legal system signals a new phase in the fight against transnational cybercrime and organized crime groups operating across borders. As the legal process unfolds, the case continues to highlight the challenges of prosecuting complex, cross-border financial crimes.

How this report was made. Objective News wrote this report from 2 source articles, using AI-assisted synthesis under our methodology. It is our own text, not a copy of any single outlet. Read our methodology.

Responsible editor: Matej BašaSpotted an error? Report it

4 reports

OCCRP logoOCCRPIndependentCenter8 hr. ago
Prosecution of Tren de Aragua Accused Mastermind Deemed Complex Case

Anibal Alexander Canelón Aguirre, a suspected cybercriminal linked to the Tren de Aragua gang, was arrested at sea and is facing a complex legal case in Nebraska. He is accused of orchestrating a large-scale ATM fraud scheme that funded the violent Venezuelan criminal organization. The FBI collaborated with the Coast Guard and other agencies to secure his arrest, which was confirmed in a news conference. Despite being captured, Canelón Aguirre was denied bail due to concerns over his potential flight risk, citing his lack of ties to the U.S., his foreign connections, and his undocumented status. He has pleaded not guilty to multiple charges, including bank fraud, money laundering, and supporting a foreign terrorist organization. The Justice Department has charged 120 individuals in connection with the ATM jackpotting conspiracy linked to Tren de Aragua.

Bias read (Center): The article presents factual information about the arrest and legal proceedings against Canelón Aguirre without overtly favoring any political perspective. It includes quotes from both the FBI and the defendant's legal representation, offering balanced viewpoints. There is no evident ideological slm

Fox News (US) logoFox News (US)IndependentCenter2 days ago
FBI's first cyber fugitive on Ten Most Wanted list returns to US after capture in Venezuela

Anibal Alexander Canelon Aguirre, a Venezuelan alleged leader of the Tren de Aragua, was captured in Venezuela and returned to the U.S. to face charges related to a multimillion-dollar ATM 'jackpotting' scheme. Known as 'Prometheus' and 'The Engineer,' Aguirre pleaded not guilty to four federal conspiracy charges during his court appearance in Nebraska. FBI Director Kash Patel highlighted the capture as the first cyber fugitive ever added to the FBI's Ten Most Wanted list and noted it marked significant progress under the Trump administration. The DOJ alleges Aguirre developed malicious software used in the ATM attacks, which are linked to the Tren de Aragua, a group designated as a foreign terrorist organization by the U.S. Attorney General Todd Blanche emphasized ongoing efforts to dismantle such networks.

Bias read (Center): The article presents a factual account of a criminal arrest and legal proceedings without overt ideological slant. While it highlights the FBI's achievements and mentions political figures like Kash Patel and Todd Blanche, the tone remains objective, focusing on the legal and security implications.

OCCRP logoOCCRPIndependentCenter5 days ago
The US Blacklists Alleged Venezuelan Cyber Crime Mastermind

The U.S. Department of the Treasury has blacklisted Aníbal Alexander Canelón Aguirre, a Venezuelan national listed on the FBI’s 'Ten Most Wanted' list, as a key figure in the financial operations of the Tren de Aragua (TdA) criminal gang. Canelón Aguirre is accused of orchestrating a large-scale ATM fraud scheme using malware, known as 'jackpotting,' which enables thieves to extract cash from ATMs. He is among six Venezuelans and three Mexicans added to a sanctions list that restricts their access to the global financial system. The U.S. authorities claim they have apprehended him, though he remains listed on the FBI’s website as a fugitive. The FBI’s Director, Kash Patel, stated that the arrest clears the agency’s 10 Most Wanted Fugitives list, but provided no details on the operation or collaboration with Venezuelan authorities. The OCCRP sought comment from the Venezuelan government, which did not respond.

Bias read (Center): The article presents factual information about a U.S. government action against a suspected cybercriminal without overtly endorsing or criticizing the U.S. stance. While the subject involves international relations and law enforcement actions, the framing remains neutral, focusing on the legal and执法

OCCRP logoOCCRPIndependentCenter5 days ago
Dutch Police Arrest Alleged Member of Hacking Group that Targeted FBI

Dutch police arrested a 24-year-old individual suspected of being a member of the cybercrime group ShinyHunters, which has conducted several high-profile data breaches, including an attack on an FBI website. During the arrest, authorities discovered evidence on the suspect’s laptop indicating he was planning two murders overseas, though this plot is unrelated to the ShinyHunters investigation. The suspect’s identity was not disclosed. In a separate statement, FBI Cyber Division Assistant Director Brett Leatherman addressed the ShinyHunters group directly, urging any remaining members to surrender to law enforcement.

Bias read (Center): The article presents factual developments regarding a cybercrime group and law enforcement actions without overtly favoring any political ideology. While cybersecurity and law enforcement are politically relevant topics, the framing remains neutral, focusing on the legal and investigative aspects. S

How each side covered it

The same event, grouped by the political lean of the outlets covering it.

How each side covered it

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Covered around the world

The same event as reported in other countries.

Covered around the world

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Claims check

Key factual claims, and how many sources assert vs dispute each.

Claims check

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Keep the news honest.

ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €4/month.

Become a Supporter

Related stories