The battle against the Tren de Aragua is ongoing on multiple fronts, one of which is focused on Wildermal Marquez Brea and Orlando Mirabal, Venezuelan citizens allegedly linked to this terrorist organization. A federal criminal complaint and supporting affidavit has been filed, aimed at securing arrest warrants in the District of Nebraska.
The primary charge is Bank Robbery and Theft under 18 U.S.C. § 2113(a), related to a conspiracy to illegally intervene in ATMs, known as jackpotting. An affidavit presented by FBI Task Force Officer Brandon Stigge details how the accused allegedly used malware to force an ATM in Grand Island, NE, to dispense cash between September 17 and 18, 2025.
The evidence against them includes bank surveillance, a subsequent traffic stop that led to their arrest, and the seizure of hard drives and tools related to the ATM robbery. The accused allegedly provided false names to the police and are subject to deportation proceedings.
The Criminal Complaint
Between September 17 and 18, 2025, Venezuelans Wildermal Marquez Brea and Orlando Mirabal attempted a bank robbery at an ATM of Equitable Bank in Grand Island, Nebraska, utilizing the illegal method known as “ATM jackpotting” — unlawfully intervening in ATMs through the installation of malicious software to force cash dispensing.
The individuals were captured shortly after the incident during a routine traffic stop by the Nebraska State Patrol. The suspects’ clothing matched what was recorded by the bank’s surveillance cameras. During the arrest, both provided false identities but were correctly identified through Venezuelan identity documents.
A search warrant of the vehicle they occupied led to the discovery of tools and specialized electronic equipment for jackpotting, and crucially, the hard drive extracted from the ATM, which the bank confirmed via its serial number. The attempted robbery could have resulted in a loss of USD 42,780 and also caused material damages estimated at USD 3,000.
Marquez Brea and Mirabal face federal charges for Bank Robbery and Theft under Title 18, Section 2113 of the U.S. Code. Both subjects have active ICE detainers and are currently undergoing pending deportation processes.
The “ATM Jackpotting” Scheme
The federal investigation into Wildermal Marquez Brea and Orlando Mirabal centers on a large-scale conspiracy to steal money from ATMs through a method known as “ATM jackpotting.” This criminal method is characterized by the following elements:
- Team Operation: A group travels to different jurisdictions to carry out attacks. Each member has a specific role such as “scout” (to locate vulnerable ATMs), driver, malware installer, and the person who collects the cash.
- Hardware Manipulation: The team physically accesses the inside of the ATM to install malicious software on the machine’s hard drive.
- Use of Technology: Perpetrators often use pre-programmed computers or devices like Raspberry Pi to install the malware.
- Deceptive Tactics: It’s common for the person manipulating the ATM to dress like a maintenance technician to avoid suspicion.
- End Goal: The installed malware forces the ATM to dispense all available cash in an unauthorized manner.
Timeline of Events
The incident unfolded at the drive-up ATM of Equitable Bank located at 619 N Diers Avenue, Grand Island, Nebraska.
On September 17, surveillance cameras recorded a four-door white Toyota sedan entering the drive-up lane. A male suspect exited the vehicle, popped the hood of the ATM, and began taking photographs of its internal components.
On September 18, a man wearing a blue hoodie and a dark hat exited the vehicle and used tools to manipulate the ATM’s hardware.
On the same date, the driver of the sedan, wearing a long-sleeve red shirt with a white design on the sleeve, was seen holding the rear driver’s side door open.
Later, the same individual in the blue hoodie returned to the ATM, opened it again, and removed an object from inside that appeared to be a cell phone.
On September 18, 2025, Officer J. Lonnborg of the Nebraska State Patrol initiated a traffic stop on a white Toyota sedan at 1215 Allen Drive in Grand Island for a violation related to the vehicle’s taillights.
The officer observed that the two men inside matched the same positions (driver and rear passenger) seen in the bank videos. Their clothing directly matched what was recorded: the driver wearing a red hoodie and the passenger in a blue one. Both individuals provided false names to the authorities.
Profile of the Involved Individuals
| Real Name | Date of Birth | False Identity Provided | Nationality | Legal Status | Role in Incident |
|---|---|---|---|---|---|
| Orlando Mirabal | 31/08/1986 | Carlos José Ramírez Contreras (F.N. 31/08/1987) | Venezuelan | ICE detainer, pending deportation. | Driver of the vehicle. |
| Wildermal Marquez Brea | 17/03/1998 | José Antonio (F.N. 17/03/1997) | Venezuelan | ICE detainer, pending deportation. | Passenger; individual who manipulated the ATM. |
Orlando Mirabal was initially arrested for driving without a license. During a search following his arrest, a wallet with a Venezuelan identity card revealing his true name was found. Wildermal Marquez Brea was arrested for obstruction of justice. He was correctly identified through a Venezuelan identity card.
Both admitted on the scene to providing false names to authorities.
On September 19, 2025, the Grand Island Police Department (GIPD) executed a state search warrant on the Toyota Prius. The search yielded physical evidence directly linking the suspects to the attempted “ATM jackpotting.”
Financial Impact and Legal Charges
Financial impact:
- Potential Loss: The ATM contained USD 42,780 in cash at the time of the robbery attempt.
- Material Damages: The forced extraction of the hard drive resulted in damages to the machine estimated at USD 3,000.
Legal status:
Formal Charges: Based on the evidence gathered, FBI Officer Brandon Stigge determined that there is probable cause to believe that Orlando Mirabal and Wildermal Antonio Marquez Brea committed a violation of Title 18, Section 2113 of the United States Code (Bank Robbery and Theft).
Immigration Status: Both individuals are Venezuelan citizens and have active detainers from Immigration and Customs Enforcement (ICE), with pending deportation proceedings.
Pending Detention Order
On October 6, 2025, Magistrate Judge Ryan C. Carson of the U.S. District Court for the District of Nebraska issued a Pending Detention Order against Wildermal Marquez Brea, indicating that the detention of the accused is justified due to a serious risk that he may flee if released.
The order determined that no condition or combination of conditions would reasonably ensure the defendant’s appearance as required by law. The reasons for detention include the defendant facing a lengthy period of incarceration if convicted, having significant family or other ties outside the United States, and lacking lawful status in the country. The defendant remains in custody pending trial.