OMAHA, Neb.—Federal prosecutors in Nebraska have charged 54 individuals in what authorities describe as a large, international ATM “jackpotting” conspiracy that used malware to steal millions of dollars from banks and credit unions across the United States, according to indictments recently unsealed.
The scheme is alleged to have been orchestrated in part by Tren de Aragua (TdA), a Venezuelan-based transnational criminal organization designated as a Foreign Terrorist Organization, the U.S. Attorney's Office, District of Nebraska reported.
A federal grand jury returned two indictments—one on Dec. 9, 2025, charging 22 defendants, and a second on Oct. 21, 2025, charging 32 more—alleging conspiracies that include bank fraud, bank burglary, computer fraud, money laundering, and, in some cases, providing material support to terrorists. Prosecutors allege the defendants deployed malware to force ATMs to dispense cash, then moved and laundered the proceeds among TdA members to conceal their origin.
Among those named is Jimena Romina Araya Navarro, an alleged TdA leader who has been sanctioned by the U.S. Treasury’s Office of Foreign Assets Control. Federal prosecutors allege Araya Navarro provided material support to TdA in connection with the nationwide ATM scheme, including burglaries of ATMs in Nebraska. Treasury officials have previously alleged she helped senior TdA leadership evade authorities and launder proceeds for the group.
According to court documents, the conspiracy relied on a malware variant known as Ploutus, which was installed directly onto ATMs by recruited crews traveling across the country. The groups conducted surveillance on targeted banks and credit unions, tested alarm responses, and then installed the malware by swapping hard drives or connecting external devices to trigger unauthorized cash withdrawals while attempting to erase forensic evidence, the U.S. Attorney's Office, District of Nebraska said.
Proceeds were then divided among participants based on prearranged shares. If convicted, defendants face potential prison sentences ranging from 20 years to as much as 335 years, depending on the charges. Federal officials said the case reflects a coordinated effort by local, state, and federal law enforcement to dismantle a criminal network that used financial fraud to fund broader violent and terrorist activities tied to TdA.