Treasury Targets TdA-Linked ATM Network and Seven TRON Addresses
The action covers 10 individuals and entities tied to an ATM network that allegedly used malware and cryptocurrency to move proceeds from U.S. thefts.
The U.S. Treasury Department’s Office of Foreign Assets Control sanctioned a Tren de Aragua-linked ATM network connected to millions of dollars in alleged thefts in the United States.
OFAC designated 10 individuals and entities connected to the network.
The Treasury Department said the group used malware to trigger remote ATM cash withdrawals and cryptocurrency transactions to transfer and launder the proceeds.
The seven listed addresses are on the TRON blockchain and were included in the sanctions action.
Reported losses from alleged ATM jackpotting attacks in the United States reached $40.73 million across more than 1,500 attacks as of August 2025.
