On December 9, 2025, federal agents arrested Venezuelan businessman Leonardo Rafael Montbrun Álvarez in Omaha, Nebraska, after being charged in a sealed federal indictment linking him to a transnational criminal conspiracy related to money laundering, bank fraud, cyber crimes, and providing material support to a foreign terrorist organization, according to court documents from the District of Nebraska.
Montbrun Álvarez is among the 23 defendants in an extensive legal case that identifies members and associates of the Aragua Train (TdA), a criminal organization originating in Venezuela, which was officially designated by the United States as a Foreign Terrorist Organization (FTO) in February 2025.
A Transnational Criminal Network Linked to the Aragua Train
The indictment details a highly organized criminal structure that operated at least between February 2024 and December 2025, executing cyber attacks known as “ATM jackpotting” against banks and credit unions in various states across the country.
According to prosecutors, the defendants used specialized malware (Ploutus) and electronic devices like Raspberry Pi to force ATMs to dispense cash without debiting accounts, resulting in losses exceeding $5.4 million, with additional attempts totaling over $1.4 million.
The operations affected financial institutions in Nebraska, Texas, Colorado, New York, New Mexico, and Florida, among other states.
Federal Charges
Montbrun Álvarez faces multiple charges, including:
Conspiracy to commit bank fraud
Conspiracy to commit bank robbery and computer fraud
Conspiracy to launder money
Conspiracy to provide material support to a terrorist organization, in violation of the Title 18 of the United States Code
The last charge is based on the allegation that the illegal financial activities would have directly benefited the Aragua Train, also designated as a Transnational Criminal Organization by the Treasury Department in July 2024.
Connection to the Cartel of the Suns
Sources familiar with the investigation indicated that the case also documents financial and operational links between members of the Aragua Train and structures connected to the so-called Cartel of the Suns, a network indicted by the U.S. for its alleged involvement in drug trafficking and state corruption in Venezuela.
According to the indictment, Montbrun Álvarez is reportedly connected to financial intermediaries linked to the families of high-ranking Venezuelan officials, including individuals related to the wife of the Venezuelan Defense Minister, Vladimir Padrino López, although court documents do not specify direct charges against these family members.
Sources also indicate that the arrested individual has ties to several Venezuelan politicians operating in both Venezuela and the state of Florida.
Defendant Profile
Leonardo Rafael Montbrun Álvarez was born on August 23, 1988 and hails from Guatire or La Guaira, Venezuela. He was previously known as a supposed entrepreneur in the fintech sector.
He founded Viajes Montbrun y Asociados and later Montbrun Private Capital in 2017, registered in Singapore. In 2019, he co-founded the cryptocurrency platform Shasta, which collapsed following allegations of fraud, scam, and money laundering in Spain and other countries.
After that collapse, Montbrun remained low-profile for several years, residing in the United States, where he faced financial and personal difficulties, including a divorce in Florida.
Reappearance Before Arrest
In June 2025, months before his arrest, Montbrun reemerged publicly promoting financial education projects, including “La Tribu” and “Traderland”, presented as training and personal reconstruction initiatives.
Authorities have not indicated if these projects are directly part of the criminal investigation.
Seizure and Judicial Process
The federal prosecution requests the confiscation of all illegally obtained assets, estimated at at least $5,401,181, as well as substitute assets in case the original funds cannot be located.
Montbrun Álvarez remains in federal custody as the legal process proceeds. No sentence has been issued, and the defendant retains the presumption of innocence under U.S. law.
This case represents one of the most extensive files presented in the U.S. against the Aragua Train, and exposes — according to prosecutors — the convergence between organized crime, terrorism, financial cyber attacks, and networks linked to the Venezuelan political power.
