The alleged leader of an international conspiracy that deployed digital attacks targeting ATMs across the United States, funneling millions in jackpot theft to the designated foreign terror organization (FTO) Tren De Aragua, has been added to the FBI’s Ten Most Wanted Fugitives List.
The FBI Omaha Field Office and the U.S. Attorney’s Office for the District of Nebraska announced that Anibal Alexander Canelon Aguirre has been added to the priority fugitive list, the first cyber criminal to be added to the list. The national security development comes days after recent federal enforcement efforts in Maine led U.S. Border Patrol to the arrest and deportation of a confirmed member of the same FTO financed by Canelon Aguirre.
[Related: Tren De Aragua Member In Maine Arrested And Deported To Ecuador]
Anibal Alexander Canelon Aguirre faces federal charges stemming from his scheme after a warrant for his arrest was issued on December 9, 2026 in the U.S. District Court in Omaha, Nebraska. Federal officials noted that the laundered proceeds directly supported Venezuelan transnational criminal organizations, which are now designated FTO’s under President Trump.
According to the FBI, Canelon Aguirre allegedly coordinated crews to install malware on ATMs that force unauthorized cash withdrawals, a technique commonly known as “ATM jackpotting.” After the funds were obtained, Canelon Aguirre would launder the “jackpot” through a complex international network prior to its delivery in Tren De Aragua’s hands. As the conspiracy evolved, it involved operations across multiple U.S. communities, enriching criminals through illicit funds.
The case is currently under the responsibilities of Joint Task Force Vulcan, who is working in coordination with the Department of Justice’s Computer Crime and Intellectual property section as Canelon Aguirre faces a lengthy list of charges.
So far, he has been charged with conspiracy to commit bank fraud, burglary, money laundering, and material support to terrorists; a non-conspiracy charge tacked on includes intentionally damaging a protected computer system.
FBI Omaha Special Agent in Charge, Eugen Kowel stated, “Canelon Aguirre led a vast conspiracy to commit cyber attacks against financial institutions in communities across our country on behalf of Tren de Aragua. He and his associates generated a multimillion-dollar revenue stream ultimately funding a foreign terrorist organization.”
Canelon Aguirre is best described to be a 49-year old male, approximately 5 feet and 5 to 7 inches tall, weighing about 190 pounds with black-gray hair. Authorities consider him armed and dangerous, with ties to Venezuela and Mexico, primarily speaking Spanish. Canelon Aguirre is the 540th individual to make the list and is the first cyber fugitive to be featured.
The national case intersects with recent documented activity in Maine, as a Border Patrol resident assigned to the Calais Station arrested an individual near Old Orchard beach for illegal reentry after a prior deportation. A follow-on investigation confirmed that the individual was a member of Tren De Aragua, and after 77 days in custody he was deported to Ecuador. The local case and FBI announcement come days apart — both occurring against the backdrop of Tren De Aragua’s FTO designation under President Trump, enacted under executive order on his first day in office.
The arrest warrant remains active for Anibal Alexander Canelon Aguirre and authorities continue their investigation in pursuit of the fugitive. The FBI is currently offering a reward of up to $1 million dollars for information that leads directly to the arrest of Anibal Alexander Canelon Aguirre.
Tips may be submitted anonymously via the toll-free line 1-800-CALL-FBI (1-800-225-5324) or online at tips.fbi.gov.
