U.S. sanctions targets tied to Tren de Aragua ATM malware scheme
Image: Crypto.newsThe U.S. Treasury's Office of Foreign Assets Control sanctioned targets tied to an alleged Tren de Aragua ATM jackpotting scheme. One report says the action covers seven TRON addresses that received about $6.1 million, according to TRM Labs. Another says OFAC designated 10 targets plus a high-ranking TdA leader. Reported U.S. losses reached $40.73 million across more than 1,500 attacks as of August 2025.
Key points
- The U.S. Treasury's OFAC sanctioned targets tied to an alleged Tren de Aragua ATM jackpotting scheme.
- Reported U.S. losses from alleged ATM jackpotting attacks reached $40.73 million across more than 1,500 attacks as of August 2025.
- The operation installs malware that forces ATMs to dispense cash, then moves proceeds including through cryptocurrency.
- The Justice Department has indicted 98 people over alleged roles in ATM jackpotting schemes.
Why it matters
The sanctions tie alleged ATM jackpotting proceeds to crypto addresses and exchange-hosted accounts. TRM Labs recommended screening the named addresses and reviewing historical transactions for exposure.
What's unclear
Reports differ on the number of designated targets, with seven TRON addresses versus 10 targets tied to the scheme.
The centralized exchange that hosted the seven TRON addresses is not named.
Price context · TRX
At publication
$0.3328
Now
$0.3292
Change since
−1.09%
7 days
Sources · 2 publishers
The Daily Hodl
Tier 2
Tren de Aragua ATM Malware Network Sanctioned After $40,730,000 Stolen From U.S. Banks Across Over 1,500 Attacks
Coverage timeline
- First reported by Crypto.news
- Also reported by The Daily Hodl
- CryptoVideos brief published
How this page is checked. AI drafted this brief from selected independent reports. Automated checks compare numbers, source coverage and topic terms, but may miss errors. Publication and evidence refreshes run automatically. Read the linked reports for context. Report an error
