Anibal Alexander Canelon Aguirre, an alleged Tren de Aragua leader accused of helping direct a multimillion-dollar ATM jackpotting operation, has returned to the United States after being captured in Venezuela last month. He appeared in federal court in Nebraska on Friday and pleaded not guilty to four conspiracy charges. Aguirre will remain detained in Nebraska while he awaits trial. The case marks the first time the FBI has placed a cyber fugitive on its Ten Most Wanted list.
U.S. prosecutors allege that Aguirre helped develop malicious software and lead an international conspiracy that targeted financial institutions. The alleged operation used cyberattacks to force ATMs to dispense cash and was linked by investigators to Tren de Aragua, which the United States has designated as a foreign terrorist organization.
| Article Subheadings | |
|---|---|
| 1) | Return to the United States and first court appearance |
| 2) | Alleged role in the ATM jackpotting conspiracy |
| 3) | Charges and potential penalties |
| 4) | Connection to Tren de Aragua investigations |
| 5) | Significance of the Ten Most Wanted listing |
Return to the United States and first court appearance
Anibal Alexander Canelon Aguirre, 50, was captured in Venezuela last month and returned to U.S. custody before appearing in a Nebraska courtroom on Friday. He is also known by the aliases “Prometheus” and “The Engineer.” During his initial federal court appearance, Aguirre pleaded not guilty to four conspiracy counts. He is being held in Nebraska pending further proceedings and trial.
The return places the alleged cyber fugitive before the U.S. justice system after an overseas arrest. The charges concern activity that prosecutors say affected financial institutions and involved an international network. Aguirre remains presumed innocent unless proven guilty in court.
Alleged role in the ATM jackpotting conspiracy
Federal investigators allege that Aguirre was one of the leaders of a scheme designed to steal millions of dollars from financial institutions. According to the Justice Department, he developed malicious software used in ATM jackpotting attacks and helped organize the broader conspiracy, which prosecutors say had operated since at least 2024.
ATM jackpotting is a cyberattack in which criminals exploit weaknesses in an automated teller machine, including through malware, to make it dispense cash. The alleged conduct combined technical intrusion with physical cash theft, allowing conspirators to target machines and financial institutions in multiple locations.
Charges and potential penalties
Aguirre faces conspiracy charges involving bank fraud, bank burglary and computer fraud, money laundering, and providing material support to terrorists. The charges reflect the alleged financial, cyber, and terrorism-related dimensions of the investigation.
The bank fraud conspiracy count carries a maximum penalty of 30 years in prison, according to the Justice Department. The final outcome will depend on the evidence presented, court proceedings, and any decisions reached at trial or through later legal action.
Connection to Tren de Aragua investigations
Prosecutors have linked the wider ATM jackpotting conspiracy to Tren de Aragua, a Venezuelan criminal organization designated by the United States as a foreign terrorist organization. Authorities allege that the scheme generated funds in support of the organization.
Attorney General Todd Blanche said the Justice Department has charged nearly 350 alleged Tren de Aragua members and associates since the designation. He described Aguirre’s capture and arrest as a result of coordinated efforts involving the Homeland Security Task Force and Joint Task Force Vulcan.
“The capture and arrest of Anibal Alexander Canelon Aguirre marks yet another success for the Homeland Security Task Force and Joint Task Force Vulcan,” Blanche said.
Significance of the Ten Most Wanted listing
Aguirre was the first cyber fugitive ever placed on the FBI’s Ten Most Wanted list. FBI Director Kash Patel said his capture was the 10th Ten Most Wanted fugitive apprehended since the beginning of the Trump administration.
Patel presented the arrest as evidence of intensified efforts to locate high-priority fugitives abroad. He said the FBI’s recent total was more than two and a half times the number of captures recorded during the previous four years. The listing increased public attention on an alleged cybercrime operation with links to international organized crime.
“Now he’s back in the United States to face justice,” Patel said.
| Number | Key Point |
|---|---|
| 1 | Aguirre was captured in Venezuela and returned to the United States. |
| 2 | He pleaded not guilty to four federal conspiracy charges in Nebraska. |
| 3 | Prosecutors allege he helped lead an ATM jackpotting operation. |
| 4 | The alleged scheme has been linked to Tren de Aragua. |
| 5 | He was the first cyber fugitive placed on the FBI Ten Most Wanted list. |
Summary
The case against Anibal Alexander Canelon Aguirre combines alleged cybercrime, financial theft, and support for a designated terrorist organization. His capture in Venezuela and return to Nebraska allow U.S. prosecutors to pursue the charges in federal court. Aguirre has pleaded not guilty, and the allegations will be tested through the judicial process.
Frequently Asked Questions
Who is Anibal Alexander Canelon Aguirre?
Anibal Alexander Canelon Aguirre is a 50-year-old Venezuelan national whom U.S. authorities identify as an alleged Tren de Aragua leader and alleged organizer of an ATM jackpotting conspiracy.
What is ATM jackpotting?
ATM jackpotting is a cyberattack that exploits weaknesses in an automated teller machine, often with malware, to force it to dispense cash.
What charges does Aguirre face?
He faces four federal conspiracy charges involving bank fraud, bank burglary and computer fraud, money laundering, and providing material support to terrorists. He has pleaded not guilty.