US Sanctions 23 Targets in Crypto Fraud and Iranian Arms Networks

Treasury said alleged ATM-network organizer Anibal Alexander Canelon Aguirre, known as Prometheus, is among the FBI’s ten most-wanted fugitives. It also named Mexico-based Enigma Community and Soluciones Integrales Toluca as companies owned by sanctioned individuals.
The Tren de Aragua designations were made under Executive Orders 13581 and 13224. Treasury said designated parties’ U.S.-based or U.S.-controlled property is blocked, and U.S. persons are generally barred from transactions with them unless authorized or exempt.
In the Iran procurement case, Treasury accused Beijing-based Iranian defense representative Seyyed Asghar Alizadeh Tabatabai of coordinating purchases of weapons systems and dual-use components, and said Kavoshcom Asia R&D Group procured electronics—including connectors—for Iran Aircraft Manufacturing Industrial Company.
The State Department said Russia had delivered nearly all of the 24 Yak-130 aircraft Iran reportedly contracted for, and sent associated equipment from Irkutsk in November and December 2025.
A separate report said vessels operated by Russian shipping company MG-Flot were involved in transporting ballistic missiles from Russia to Iran.
The U.S. Treasury and State Department sanctioned 23 targets across two separate enforcement actions on September 29-30, 2026, targeting a Venezuelan gang's $40.73 million ATM theft network and an Iran weapons procurement ring spanning Russia, China, and Pakistan. Treasury designated 10 individuals and entities linked to Tren de Aragua's malware-driven ATM "jackpotting" scheme, while State Department blocked 13 people and companies accused of helping Iran obtain conventional weapons and aerospace components, including 24 Yak-130 trainer aircraft delivered by Russia.
The designations freeze all U.S.-based assets of the sanctioned parties and ban American citizens from doing business with them. Treasury Secretary Scott Bessent said the department "will not tolerate any support to the regime and will continue to identify, expose, and isolate Iran's enablers."
Tren de Aragua operatives used malware to empty U.S. ATMs of cash, with the scheme targeting over 1,500 machines nationwide through August 2025, according to Treasury. The gang's alleged ringleader, Anibal Alexander Canelon Aguirre—known as "Prometheus"—ranks among the FBI's ten most-wanted fugitives. He orchestrated the technical side of the operation while money flowed through cryptocurrency and shell companies to gang leaders in Venezuela.
Treasury identified seven specific Tron blockchain addresses used to launder stolen ATM cash through cryptocurrency exchanges. The gang funneled proceeds to senior Tren de Aragua figure Juan Gabriel Rivas Nunez, who also oversees gold mining, narcotics exports, and violent operations across South America. Treasury also sanctioned two Mexico-based companies—Enigma Community and Soluciones Integrales Toluca—that gang members used as fronts.
Russia supplied Iran with nearly all of a contracted 24 Yak-130 aircraft between late 2023 and December 2025, State Department confirmed. The jets—officially trainer aircraft—can be retrofitted for light combat and armed with missiles. Russia also shipped associated avionics and equipment from Irkutsk in November and December 2025, according to U.S. intelligence assessments.
Treasury sanctioned Russian aviation manufacturer Joint Stock Company Yakovlev and shipping firm MG-Flot LLC for moving the aircraft and other weapons systems. Treasury also blocked shipping vessels operated by MG-Flot that transported ballistic missiles from Russia to Iran. The enforcement action names Beijing-based Iranian defense official Seyyed Asghar Alizadeh Tabatabai as the coordinator of weapon system purchases from Chinese and Russian suppliers.
Iran's arms supply chain spanned companies in China, Hong Kong, Russia, and Pakistan, Treasury found. Kavoshcom Asia R&D Group in Iran and EC Mojo Technology in Hong Kong procured avionics connectors and electronics for Iran Aircraft Manufacturing Industrial Company (HESA), a state-owned defense contractor. A Pakistani firm called Cavalier Group, chaired by Waseem Pasha Tajammal, also assisted Iranian weapons acquisitions, according to Treasury.
The enforcement actions totaled over 30 separate designations by U.S. agencies targeting roughly 300 entities since 2025, Treasury said. The Iran procurement sanctions aimed to "prevent Iran from reconstituting its proliferation-sensitive programs," according to State Department statements. However, defense analysts told Arab News the impact may be limited, noting that non-aligned states easily route around Western financial sanctions using offshore payments and shadow shipping fleets.
Publishers
32
Articles
101
Reach
133