TWJmTGhquvdp1jhBmgeGxBBwefteGZUQYW

Tren de Aragua ATM-jackpotting network ('Prometheus' Canelon Aguirre + 6 associates) - OFAC-listed TRON addresses

• Scam type: Money laundering
• Chain: Tron
• Reported: 2026-10-14
• Last updated: 2026-10-16

On 2026-09-30 OFAC designated a Tren de Aragua (TdA, FTO) financial network behind ATM 'jackpotting' (malware forcing U.S. ATMs to dispense cash), led by FBI Ten Most Wanted fugitive Anibal Alexander Canelon Aguirre ('Prometheus'), alleged engineer of the malware. Treasury says the network launders proceeds through cryptocurrency. One TRON address each is listed for Canelon Aguirre, Carlos Javier Martinez Armenta, Alejandro Mejia Castillo, Jose Dario Galeano Bazurto, Eric Gabriel Cardenas Arzola, Oscar Leonardo Martinez Pirona and Anthony Wuiliam Hernandez Guerrero (SDGT/TCO), copied verbatim…

Other addresses in this report: TJjRAn9kLiyh8h6gjBjaYjkfDkskgZfyW9, TCUmMCHQEbFFdGvfdg2LeS64QfzUKP2AgW, THwbVuBBb26abe5TrAsYUpYz9mhWnBppdz, TBEmt7kPSwAv6NJTYKNdBVW524bUfPwJpJ, TCifMAMwst3oEJx8GaNfqZw75dkFUa8vjG, TDxZ1XTZCmqkJJW2eJT362z6omRchJyGBX

OFAC Designation: MEJIA CASTILLO, Alejandro

• Scam type: OFAC designation
• Chain: Tron
• Project or site name: MEJIA CASTILLO, Alejandro
• Incident date: 2026-09-30
• Reported: 2026-09-30
• Last updated: 2026-10-24

Official OFAC designation or update for MEJIA CASTILLO, Alejandro. Action date: 2026-09-30 Source: https://ofac.treasury.gov/recent-actions/20260930 Digital Currency Addresses: TRX: TWJmTGhquvdp1jhBmgeGxBBwefteGZUQYW OFAC selectors: MEJIA CASTILLO, Alejandro, Mexico; DOB 03 Dec 1970; POB Mexico City, Mexico; nationality Mexico; Gender Male; Secondary sanctions risk: section 1(b) of Executive Order 13224, as amended by Executive Order 13886; Digital Currency Address - TRX TWJmTGhquvdp1jhBmgeGxBBwefteGZUQYW; C.U.R.P. MECA701203HDFJSL04 (Mexico) (individual) [SDGT] [TCO] (Linked To: TREN DE…