Two Illegal Aliens Sentenced in International ATM “Jackpotting” Conspiracy with Ties to Tren de Aragua

• WHO: Carlos Javier Padron, 36, and Oddry Arnoldo Cabrera Torrealba (also known as Luis Alejandro Berdugo Barraza), 37, both identified as illegal aliens from Venezuela.
• WHAT: Sentenced to 78 months (6.5 years) in prison each for their involvement in an international ATM “jackpotting” conspiracy.
• WHERE: The conspiracy involved ATMs throughout the United States; Padron and Torrealba were arrested in Lincoln, Nebraska.
• WHEN: Padron was sentenced yesterday; Torrealba was sentenced on June 11. They were arrested in October 2024.
• STATUS: Both have been sentenced and ordered to pay restitution.

Two Venezuelan nationals, Carlos Javier Padron and Oddry Arnoldo Cabrera Torrealba, have been sentenced to 78 months in prison for their roles in a sophisticated international ATM “jackpotting” conspiracy that led to millions of dollars in losses across the United States.

According to the Department of Justice, Padron, 36, and Torrealba, 37, were identified as illegal aliens from Venezuela. Their arrests occurred in Lincoln, Nebraska, following an incident related to the jackpotting scheme.

What Happened

Padron and Torrealba were part of a criminal network involved in deploying malware, specifically a variant known as Ploutus, to facilitate unauthorized cash withdrawals from ATMs. This technique, referred to as “ATM jackpotting,” causes machines to dispense cash without a legitimate transaction. Court documents indicate that Padron and Torrealba were responsible for physically installing this malware onto ATMs.

Once the Ploutus malware was established and activated, co-conspirators could issue commands to the ATM’s cash dispensing module, enabling them to force unauthorized withdrawals. The malware was also designed to delete forensic evidence of its presence, hindering financial institutions from detecting the intrusion. The Department of Justice stated that the conspiracy caused millions of dollars in losses, with Padron and Torrealba jointly ordered to pay $1,537,696 in restitution to multiple victim banks. Authorities arrested Padron and Torrealba in October 2024 at an ATM jackpotting site in Lincoln, Nebraska.

Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division highlighted that such crimes undermine financial security and support violent transnational criminal organizations like Tren de Aragua (TdA). U.S. Attorney Lesley Woods for the District of Nebraska further described ATM jackpotting as a primary revenue source for TdA, funding activities ranging from human trafficking to armed robbery and murder. Special Agent in Charge Eugene Cowel of the FBI Omaha Field Office emphasized the adaptability of criminal enterprises and the commitment of law enforcement to protect the American public. Acting Special Agent in Charge Rick Sabatini of U.S. Immigration and Customs Enforcement Homeland Security Investigations (HSI) Kansas City affirmed that the individuals’ actions were an attack on the American financial system and an effort by Tren de Aragua to fund further illegal activities.

The Charges Explained

Carlos Javier Padron and Oddry Arnoldo Cabrera Torrealba each pleaded guilty to two specific charges: one count of conspiracy to commit bank burglary and one count of computer fraud and intentional damage to a protected computer. Conspiracy to commit bank burglary involves an agreement between two or more individuals to unlawfully enter a bank or ATM with the intent to commit a felony or larceny, and taking steps to do so. Computer fraud and intentional damage to a protected computer typically refers to intentionally accessing a protected computer without authorization and causing damage, such as altering, damaging, or destroying data, or interfering with its operation. In this case, the deployment of malware to force unauthorized cash dispensing from ATMs fits the criteria for these charges.

How These Cases Move Through Court

Federal criminal cases, such as the one involving Padron and Torrealba, typically begin with an investigation by federal agencies like the FBI or HSI. If sufficient evidence is found, charges are often brought by a grand jury indictment or a criminal complaint. Defendants then appear for an arraignment, where they are formally informed of the charges and enter a plea of guilty or not guilty. If a plea agreement is reached, as in this case where both defendants pleaded guilty, the case proceeds directly to sentencing. If no plea agreement is made, the case would proceed through discovery, pre-trial motions, and potentially a jury trial. Following a guilty verdict or plea, a judge determines the sentence based on federal sentencing guidelines, considering factors such as the severity of the crime, the defendant's criminal history, and any cooperation with investigators.

Context & Background

This case underscores the growing threat of cybercrime targeting financial institutions, particularly from transnational criminal organizations. According to the Department of Justice, the investigation following the arrests of Padron and Torrealba led to the identification of a broader network, with 96 other defendants indicted for related offenses including material support to a designated foreign terror organization, bank burglary, money laundering, and bank fraud. The investigation has established extensive links between these co-conspirators and Tren de Aragua (TdA), a violent transnational criminal organization originating from Venezuela that has expanded its operations throughout the Western Hemisphere, establishing a presence in the United States. TdA uses a range of criminal activities, including drug and firearms trafficking, human trafficking, kidnapping, robbery, theft, fraud, and extortion, to generate revenue, with financial crimes like ATM jackpotting becoming an additional source of funding.

Recognizing and Reporting Cybercrime

Awareness and vigilance are key in preventing and reporting cybercrime. Individuals and businesses should regularly monitor their financial accounts for suspicious activity and report any unauthorized transactions immediately to their bank or financial institution. If you suspect you have been a victim of cybercrime, or have information about criminal activities related to financial fraud or transnational criminal organizations, you can contact the FBI at 1-800-CALL-FBI or submit tips online at tips.fbi.gov. For emergencies, dial 911.

What Happens Next

Following their sentencings, both Padron and Torrealba will begin serving their 78-month prison terms. They are also jointly ordered to pay over $1.5 million in restitution to the victim banks. Further details regarding their incarceration or restitution payment schedule were not immediately released.