OFAC Sanctions Crypto Wallets Tied to FBI Fugitive and Venezuelan Gang's ATM Jackpotting Scheme

The US Treasury's Office of Foreign Assets Control (OFAC) has sanctioned seven cryptocurrency wallets tied to an FBI Most Wanted fugitive and a Venezuelan gang, Tren de Aragua (TdA).

TdA is accused of running an ATM jackpotting scheme, which uses malware to make ATMs release cash without debiting any account. The group allegedly washes the stolen money through cryptocurrency among other channels.

Prometheus, whose real name is Anibal Alexander Canelon Aguirre, is the alleged engineer of the Ploutus malware used in the jackpotting attacks. He faces charges in Nebraska federal court and has been on the FBI's Ten Most Wanted Fugitives list.

The Treasury identified $40.73 million in reported US losses from alleged jackpotting attacks as of August 2025, with over 1,500 incidents. The sanctioned wallets held at a centralized exchange took in approximately $6.1 million since March 2022, although not all of it necessarily ties to jackpotting.