DISPATCH
ESREAD 18 MIN

The National Guard Cartel& The Identity Forgery Factory

Under the Andrés Manuel López Obrador administration, with Audomaro Martínez Zapata at the helm of Mexico's intelligence apparatus, two active members of the National Guard monopolized the hemisphere's most lucrative migrant trafficking corridor. The hidden scaffolding: a clandestine identity forgery factory producing thirteen types of fake documents around the clock, five minutes per piece.


By
Simón Levy
From
Washington D.C.
Date
Apr 26, 2026
Factory
288 docs/day
· OFFICIAL VALIDATION · MAY 19, 2026
The White House signed an Executive Order listing the six typologies this investigation documented three weeks earlier
Read Executive Order →
· VIDEO · INTRODUCTION
· FULL DISPATCH · WASHINGTON D.C. · APRIL 2026

The National Guard Cartel & The Identity Forgery Factory

How the Andrés Manuel López Obrador administration, with Audomaro Martínez Zapata at the helm of the National Intelligence Center, allowed two active members of Mexico's National Guard to monopolize the most lucrative migrant trafficking corridor in the hemisphere, sustained by a clandestine document forgery factory operating around the clock.


BY
Simón Levy
FROM
Washington D.C.
DATE
Apr 26, 2026
LENGTH
≈ 24 min

IA family in uniform

This investigation documents the operations of a transnational criminal network led by the Uscanga Cueto family and operated at its executive core from within Mexico's National Guard. The network moves an estimated one billion eight hundred million dollars annually through four parallel business lines executed simultaneously on each captured victim: charging for the U.S. crossing, extorting family members in U.S. territory, selling migrants to the Cártel Jalisco Nueva Generación, and forced use of persons as fentanyl drug mules. Each of these streams is documented in signed witness statements before the Nuevo León State Attorney General's Office, case file FGJNL-022476/2019, and in federal rescue operations executed between 2019 and 2022.

The central indictment of this report is not the existence of the cartel. It is the fact that the cartel's operational head — Juan José Palacios Maymon, alias Palacios or El Tío, born July 28, 1986 — and his brother-in-law, José Vicente Uscanga Cueto, born April 3, 1991, are active members of the National Guard, assigned to Monterrey airport since the Federal Police era. They wore the uniform of the Mexican State's armed corps while ordering executions, taking bribes, controlling safehouses, and directing the air trafficking of fentanyl into the United States.

The strategic leader is Erika Lizbeth Uscanga Cueto, alias Karla, born March 13, 1986, wife of Palacios and sister of José Vicente. Identified in signed witness statements as the operator who collects payments, authorizes executions, and personally dictates threats to victims' family members in the United States. The financial architect of the scheme is Esperanza Cueto Migliolo, born July 6, 1966, mother of Erika Lizbeth and José Vicente, residing at Allende Norte 287, Colonia Miguel Alemán, Veracruz.

IIThe chain of command

The criminal operation of the Uscanga Cueto family was made possible because three specific figures, at three distinct levels of the Mexican federal apparatus, allowed it. The Presidency built the institution without background screening. Intelligence ignored the financial scheme. The armed corps protected its own members.

Level 01 · The Presidency

Andrés Manuel López Obrador, President of Mexico from December 1, 2018 to September 30, 2024, founded the National Guard on June 27, 2019 through constitutional reform, absorbing the former Federal Police without background screening or review of pending criminal complaints. Three months earlier, on March 1, 2019, federal forces had rescued seventy-four victims in Apodaca, Nuevo León, in an operation where two of this network's leaders were already named. They were inducted into the new corps regardless.

Under his administration, complaints against these active members were systematically shelved for six years. The Presidency had direct command over the armed corps that harbored those responsible and failed to investigate them. This does not constitute political opinion: it is documented institutional accountability.

Level 02 · The Intelligence

Audomaro Martínez Zapata, appointed by López Obrador as Director of the National Intelligence Center for the 2018-2024 period, headed the Mexican agency responsible for strategic intelligence on organized crime, illicit financial flows, and threats to national security. The CNI has technical jurisdiction to detect networks operating from within the Mexican State. It reports directly to the head of the Executive Branch.

Throughout the entire administration, eight hundred collectors structured remittances via Banco Azteca, Coppel, and Western Union for an aggregate flow estimated at forty-eight million dollars annually. Five hundred active bank accounts, none exceeding two million pesos, all operating below the reporting threshold of Mexico's Financial Intelligence Unit. Ten properties acquired in cash each month via a complicit notary in Medellín de Bravo, Veracruz. One ton of fentanyl introduced into the United States in 2021. Zero alerts issued by Mexican intelligence. Zero detentions of leaders. Zero international designations proposed to the U.S. Department of the Treasury.

Level 03 · The Armed Corps

Juan José Palacios Maymon and José Vicente Uscanga Cueto were inducted into the National Guard from the Federal Police without background review. Assigned to Monterrey airport, they controlled the final crossing into the United States from within the apparatus of the State. They operated the country's airports for migrant and fentanyl trafficking. They personally delivered weekly bribes of one million pesos per location to regional prosecutor offices. They ordered the execution of those who attempted to leave the network. They sold geolocation data and call records to the Cártel Jalisco Nueva Generación. They were on the cartel's formal payroll while wearing the institutional uniform.

Despite hundreds of shelved complaints against them and federal rescue operations where victims pointed them out directly, none was discharged, investigated by Internal Affairs, or lost his credentials. The Mexican State's armed corps protected the criminal operation of its own members.

IIIThe Uscanga Cueto family

This is not a one-hundred-person organization. It is a family structure of ten members operating across four hierarchical levels. Tier 01 is the mother, Esperanza Cueto Migliolo, financial architect and recruiter of the collector system. Tier 02 are her three children: Erika Lizbeth Uscanga Cueto at the strategic center; Juan José Palacios Maymon, her husband, in operational control of borders; and José Vicente Uscanga Cueto in airport and narcotics control.

Tier 03 are three trusted extra-family operators. Jorge Luis Olvera Uscanga, cousin of the siblings, born May 3, 1990, in charge of transfers and collections, the only member detained in the 2019 operation and released months later through bribes paid by Erika Lizbeth to prevent him from testifying. Miguel Ángel Vázquez, driver and warehouse keeper, identified on social media as TikTok @miguelvazquez553, the only individual with knowledge of all the network's safehouses across the entire Mexican republic. Arturo Ignacio Moreno Cantellán, alias El Rey del Fusil, born September 23, 1985, sole operator of the document forgery workshop located on the third floor of a building at Papaloapan Poniente 295, Hacienda Sotavento, Veracruz, postal code 91698. His personal cellphone is 2291 154155. His operational email is arturoignacio1985 at gmail. His wife, Angélica Montiel Morales, operates as a collector within Esperanza's network.

Tier 04 are three employees executed by the organization for attempting to leave the network. Hugo Ricardo Ramos Silva, originally from Monterrey, Nuevo León, Zumba instructor, operator of a parallel network of more than one hundred collectors in the Monterrey metropolitan area. Ernesto Alberto Jiménez Martínez, born November 7, 1982, driver and warehouse keeper in Villahermosa, Tabasco. Ernesto Muñoz Maymon, born July 27, 1981, cousin of Juan José Palacios Maymon, murdered by his own cousin. His widow, identified in testimony as Yuliana, was forced under coercion to continue operating a line of thirty collectors without compensation following her husband's homicide.

IVThe identity forgery factory

Without the Hacienda Sotavento factory, there are no Viva Aerobus flights, no bus crossings, no safehouse rentals, no trafficked minors, no parallel bank accounts. The factory is the infrastructure piece that supports every node of the system. And none of this document production was detected by the National Intelligence Center under Audomaro Martínez Zapata during six years of continuous operation.

The workshop produces thirteen distinct types of forged documents classified by operational use. Identity category: INE voter ID and driver's license, used for boarding Viva Aerobus flights and ADO buses without questioning. Migration category: National Migration Institute resident card and FMM migration form, issued identical to official ones, allowing free transit through Mexican territory without detention at federal checkpoints. Passport category: multi-country passport available for cases where the crossing involves an international flight or requires solid identity.

Minors category, marked in red within this investigation's internal catalog because it is explicitly linked to child trafficking: minor's CURP, birth certificate, and school ID — the three documents that generate legal identity for a child used for sale to exploitation networks or presentation at border crossings as the legitimate child of any adult. Evasion category: forged pregnancy certificate, with documented specific function of allowing women to carry money strapped to the body in airports without being scanned with X-rays. Vehicles category: forged auto invoice and trailer invoice, to disclaim quickly in case of seizure. Property category: rental identity, documented impersonation to lease the houses serving as safehouses. Banking category: identity for account opening, supporting the structuring system with five hundred active accounts, none over the SAT and UIF alert threshold.

Each document is produced in five minutes. The workshop operates twenty-four hours a day. The maximum theoretical capacity is two hundred eighty-eight documents per day per operator, which translates to approximately one hundred five thousand pieces annually. This documentary capacity is what allows the system to process ten thousand people daily through its safehouses nationwide, feeding all other business lines.

" Having a forgery workshop open twenty-four hours a day has allowed them to consolidate as the only criminal organization selling passage through all of Mexico. · Verbatim quote from consolidated case file

VThe financial scheme

The financial scheme is engineered, not accidental. Each collector receives a maximum of five thousand dollars monthly to remain below the U.S. Bank Secrecy Act automatic reporting threshold. Multiplied by eight hundred active collectors over twelve months, the aggregate annual flow amounts to forty-eight million dollars structured specifically to evade the generation of Suspicious Activity Reports at U.S. financial institutions or their correspondent banks in Mexico.

Collectors are recruited by Esperanza Cueto Migliolo from her residence in Veracruz through coercion of close family members and friends. They operate with five bank accounts each at Banco Azteca, Coppel, BBVA Bancomer, Scotiabank, and Western Union, totaling approximately five hundred active accounts in the network. No account exceeds the historical figure of two million Mexican pesos, the threshold that would trigger automatic reports to Mexico's Financial Intelligence Unit. Each collector receives five hundred pesos for every one thousand U.S. dollars collected. The receiver-victims are physical persons authorized to receive up to five thousand dollars monthly before being blocked and reactivated the following month to simulate a pattern of legitimate family remittances.

The product of the flow is consolidated in central safehouses in Veracruz via physical cash transport on ADO bus lines from Villahermosa, Monterrey, and other locations. Once consolidated, it is laundered through cash property purchases at a complicit notary located in Medellín de Bravo, Veracruz. The documented cadence is ten properties acquired monthly, registered to family members without verifiable income, primarily Esperanza Cueto Migliolo and her husband, José Vicente Uscanga Cueto, and Arnulfo Palacios, father of Juan José Palacios Maymon, a worker at Talleres Navales del Golfo SA de CV in Veracruz, whose formal naval worker salary has no financial capacity to sustain the multiple properties registered in his name. This is a textbook configuration of real estate front man under 18 USC § 1957.

VIThe testimony

The testimonial core of this investigation is the statement signed by a victim rescued on March 1, 2019 in Apodaca, Nuevo León, in the federal operation where seventy-four people were liberated. Marhian Alexa Villalobos Rodríguez, sixteen years old, originally from Honduras, traveled with her aunt Kleymer Ivett Rodríguez Altamirano, twenty-five, and her aunt's daughter Ivett Nicolle Herrera Rodríguez, three years old. The family paid three thousand dollars to the coyote in Tegucigalpa on January 25, 2019 to reach Mexico. They were going to reunite with the child's mother in the United States.

After eight days of captivity in a safehouse in Villahermosa, where personnel from the Hacienda Sotavento workshop produced forged identifications for them, they were transported in a van to the Villahermosa airport and boarded a Viva Aerobus flight to Monterrey with tickets purchased by the network's payroll employee at the Veracruz airport. Upon arrival in Monterrey they were received by network personnel in Mini Van vehicles and transported to a white two-story safehouse in Apodaca. They remained there two days, were moved to another safehouse for five days, and then to the final safehouse where they were rescued.

On day fourteen of captivity, Erika Lizbeth Uscanga Cueto made the first phone call to the safehouse keeper, demanding the group pay a debt of forty-two thousand dollars attributed to coyote Omar, equivalent to thirteen hundred dollars per person. Marhian managed to communicate with her sister in the United States, who deposited three thousand nine hundred dollars the next day. On day sixteen, Erika made the second call demanding four hundred additional dollars per person for food, deposited immediately. On day eighteen, Erika ordered the keeper, identified as Fabricio, to make the third call, this time with the maximum threat documented in the signed statement: if family members in the United States did not pay ten thousand additional dollars, the three-year-old girl's organs would be harvested and sold. Subsequently, Erika demanded ten thousand more dollars for Marhian's release.

Marhian's sister had no more money. She called the victim's husband in the United States so that he could report the case to U.S. authorities. The report was crossed with Mexican federal intelligence and resulted in the operation of March 1, 2019. At the rescue arrived, in addition to Fabricio, a second guardian identified as Jorge. When they saw federal forces approaching, both fled the property. Marhian declared verbatim, in the statement signed before the Nuevo León Anti-Kidnapping Prosecutor's Office, word for word: sometimes a man would come who was Karla's husband, and they said he was the boss, they called him Palacios, he is very white and very robust, approximately one meter seventy-five tall, no beard or mustache, approximately thirty-one years old, his hair is curly dark brown, he always wore a gold watch.

This physical description signed in 2019 appears convergent with descriptions recorded in dozens of testimonies from other case files against the same three leaders during the following five years, including the rescue of August 27, 2019 in Guadalupe, Nuevo León, where fifty additional people including fourteen minors were liberated. No rescue resulted in detention or proceedings against Erika Lizbeth Uscanga Cueto, Juan José Palacios Maymon, or José Vicente Uscanga Cueto. The cousin, Jorge Luis Olvera Uscanga, was the only one formally detained in 2019. He was released months later through bribes paid by Erika Lizbeth to prevent him from testifying against the family.

VIIThe U.S. legal framework

The consolidated complaint filed with Homeland Security Investigations articulates nine U.S. federal statutes under three simultaneous parallel processing tracks. Criminal track through the Department of Justice and HSI: 18 U.S.C. § 1590 and § 1591 on human trafficking with aggravators for involved minors; 18 U.S.C. § 1201 on international kidnapping with documented extortion of family members in U.S. territory; 18 U.S.C. § 1962 on the Racketeer Influenced and Corrupt Organizations Act, where the family's continuous operation of more than ten years with multiple predicates and repetitive financial nexus configures a textbook RICO case; and 8 U.S.C. § 1324 on alien smuggling aggravated by participation of minors and fatal outcome in the Veracruz trailer case of February 4, 2022.

Financial track through the Financial Crimes Enforcement Network: 18 U.S.C. § 1956 and § 1957 on international money laundering with remittances originated in the United States via Western Union, deposited at Banco Azteca and Coppel in Mexico, and consolidated into cash real estate registered to family front men; and 31 U.S.C. § 5324 on willful structuring to evade reports, where the deliberate design of five hundred collectors with a five-thousand-dollar monthly cap configures willful structuring documented textually in testimonies.

Sanctions track through the Department of the Treasury and the Office of Foreign Assets Control: Executive Order 14059 known as the Kingpin Designation Act on significant fentanyl trafficking, where the introduction of one ton in 2021 by José Vicente Uscanga Cueto and Juan José Palacios Maymon in partnership with Cártel Jalisco Nueva Generación constitutes primary predicate; and Executive Order 13818 known as the Global Magnitsky Act on serious human rights violations by foreign officials, where the profile of active National Guard officers committing trafficking, kidnapping, and homicide configures exactly the scenario for which the statute was designed.

VIIIOperational recommendation

The consolidated complaint proposes to Homeland Security Investigations a five-step simultaneous detention sequence designed to avoid cross-alerts within the network and within the Mexican State protection apparatus. Step one, simultaneous execution: Erika Lizbeth Uscanga Cueto, Juan José Palacios Maymon, José Vicente Uscanga Cueto, and Esperanza Cueto Migliolo at hour zero, simultaneous locations in Veracruz and Monterrey. Step two, fifteen minutes later: Miguel Ángel Vázquez, before he can alert regional warehouse keepers about ongoing operations.

Step three, also fifteen minutes later parallel to step two: Arturo Ignacio Moreno Cantellán in Hacienda Sotavento, with simultaneous securing of the workshop, its equipment, and the USB drive the operator always carries containing the complete database of human smugglers and complicit authorities. Step four, thirty minutes later: José Roberto Rodríguez Roldán, commander of the Veracruz State Ministerial Police, before the transfer of previous detentions to the ministerial system activates alerts in his protection network.

Step five, parallel to all the above: securing of properties registered to Arnulfo Palacios, Esperanza Cueto Migliolo and her husband, and the company Comercializando El Norte 2019 SA de CV with RFC CND190705G27 and address at Calle 12 number 1168, Fraccionamiento Geo Villas Los Pinos, Veracruz, postal code 91808. Securing of the four units in the Torres JV development and multiple units in the Boca Towers development in Boca del Río, all acquired in cash during the López Obrador administration and registered to family members without verifiable financial capacity.

Closing

This investigation is not a piece of political denunciation. It is a documented institutional indictment, formally filed with Homeland Security Investigations in the second quarter of 2026, articulating each fact with its support from a Mexican public case file, signed witness statement, documented federal operation, or U.S. legal predicate. The Sheinbaum administration inherits this institutional liability without having created it. The operational decisions that now correspond are within Mexican sovereign jurisdiction. The decisions on U.S. federal prosecution now correspond to the jurisdiction of the Government of the United States.

Below: the interactive case file. Forensic map, financial scheme calculator, network organization chart, step-by-step testimony, and complaint generator for HSI / FinCEN / OFAC.
Continue to the interactive case file ↓
The Central Indictment · 01

This is not a cartel against the Mexican State. This is a cartel run by the Mexican State.

Before any map, calculator, or witness statement, the reader must grasp one thing: the criminal network that moves one billion eight hundred million dollars a year extorting migrants is not foreign to the Mexican government. Its operational leaders are active members of the National Guard. Its financial impunity is institutional cover. Its territorial expansion was possible because three specific figures, at three distinct levels of the federal apparatus, permitted it, protected it, and scaled it.

The chain of command that enabled this

Level 01 · The Presidency
Commander-in-Chief of the National Guard
Andrés Manuel López Obrador
President of Mexico · 2018-2024
Decision: In June 2019 he founded the National Guard absorbing the former Federal Police without background screening or review of pending criminal complaints. Three months earlier, two of this network's leaders had already been identified by 74 victims in case file FGJNL-022476/2019 of the Nuevo León Attorney General's Office. They were inducted regardless.
Institutional failure: Under his administration the very institution that became the cartel's vehicle was built. Criminal complaints against its active members were systematically shelved for six years. The Presidency had command authority over the armed corps that harbored those responsible.
Level 02 · The Intelligence
Director of the National Intelligence Center
Audomaro Martínez Zapata
CNI Chief · 2018-2024 · Appointed by AMLO
Institutional function: The CNI is the Mexican agency responsible for strategic intelligence on organized crime, illicit financial flows, and threats to national security. It reports directly to the head of the Executive Branch. It has technical jurisdiction to detect networks operating from within the State apparatus itself.
Institutional failure: Throughout the entire administration, eight hundred collectors structured remittances via Banco Azteca, Coppel, and Western Union for an aggregate flow of forty-eight million dollars annually. Five hundred active bank accounts, none exceeding two million pesos. Ten properties purchased in cash each month via a complicit notary. One ton of fentanyl introduced into the United States in 2021. Zero alerts issued by Mexican intelligence. Zero detentions. Zero international designations proposed to U.S. Treasury.
Level 03 · The Armed Corps
National Guard · active members
Juan José Palacios Maymon · José Vicente Uscanga Cueto
Assigned to Monterrey airport since Federal Police era
Documented operation: They control the final crossing into the United States. They operate the country's airports for migrant and fentanyl trafficking. They personally deliver weekly bribes of one million pesos per location. They order the execution of anyone attempting to leave the network. They sell geolocation data and call records to the Cártel Jalisco Nueva Generación. They are on the cartel's formal payroll while wearing the institutional uniform.
Institutional failure: Despite hundreds of shelved complaints against them and federal rescue operations where victims pointed them out directly, none were discharged, investigated by Internal Affairs, or lost their credentials. The Mexican State's armed corps protected its own members' criminal operation.
The documented outcome
A criminal network operating from within the Mexican State. Ten thousand people per day processed through its safehouses. One billion eight hundred million dollars in annual revenue. Zero Mexican State accountability. A formal complaint filed with Homeland Security Investigations.

Why this is not political opinion but documentary accountability

Pillar 01 · The institution
He founded the National Guard without screening backgrounds.
In June 2019 he founded the National Guard by absorbing the Federal Police. The two criminal operators, already identified three months earlier by 74 victims in case file FGJNL-022476/2019, were inducted into the new corps without review.
Pillar 02 · Prosecutorial omission
All complaints shelved under his government.
Between 2019 and 2024, federal and state prosecutors received hundreds of complaints against the same three leaders with convergent physical descriptions. No arrest warrant was issued. The case file documents weekly payments of one million pesos per location to regional prosecutor offices.
Pillar 03 · CNI blindness
Audomaro Martínez Zapata failed to detect 800 collectors.
The National Intelligence Center, under his command, ignored a structuring scheme that operated throughout the administration with 800 collectors, 500+ active bank accounts, and ten monthly cash property purchases. No report was issued. No designation was proposed to the U.S. Treasury.
Pillar 04 · The Bienestar channel
Official financial infrastructure served as the vector.
Banco Azteca, Coppel, and Western Union are the same channels through which fourteen million Mexican families receive official remittances under the Bienestar/FINABIEN program. The same technical vector used by the criminal network. Public policy created the ecosystem the cartel parasitized.
Pillar 05 · Instrumentalization
Migrants as diplomatic leverage.
The migrant flow was repeatedly used as leverage against the United States. Allowing ten thousand people per day to enter safehouses controlled by the National Guard was not negligence: it was foreign policy. Every caravan, every trailer, every rescue occurred within the same criminal network the Mexican State never confronted.
Pillar 06 · The USMCA 2026 risk
Active officials + fentanyl = imminent review.
USMCA enters review in 2026. Evidence of active Mexican federal officials operating fentanyl trafficking into the United States, under the López Obrador administration and with documented CNI omission, configures direct predicate for actions under the Kingpin Act and Global Magnitsky. The Sheinbaum administration inherits this liability without having created it, but is politically accountable for it.
Documentary verdict

For six years, the Mexican State —under the direct leadership of Andrés Manuel López Obrador, with Audomaro Martínez Zapata heading the intelligence apparatus, and with active National Guard members executing the operation— was not a State that fought this criminal network. It was the State that created it as institutional byproduct, protected it through systematic omission, and scaled it through political usufruct. That is the central indictment of this investigation.

What you are about to read, summarized in six numbers.

Not theory. Not opinion. Every figure is recorded in the public case file of the Nuevo León Attorney General's Office (FGJNL-022476/2019), in signed witness statements, in documented federal rescue operations, or in the body of the document accompanying this investigation. The formal complaint has already been filed with Homeland Security Investigations.

10,000
people / day
captured in network safehouses across the country
$1.8B
USD / year
estimated revenue across the four business lines
800+
collectors
structuring remittances below the U.S. Bank Secrecy Act threshold
2
National Guard members
active officers identified as operational heads
13
types of forged documents
produced 24/7 in a single clandestine factory
0
CNI alerts
during six years under Audomaro Martínez Zapata

Four ways to extract money from each victim

01
Crossing
$10,000 USD
per person, paid to the network to "cross" into the United States
02
Extortion
$10K-$50K USD
to U.S. family members under threat of death or organ harvesting
03
Sale to CJNG
$5,000 USD
per person sold for hitman recruitment or sexual exploitation
04
Drug Mules
$8,000 USD
margin per forced 2-5 kg load when crossing into the U.S.

Eleven nodes. Four functions. A two thousand kilometer corridor.

Each pin corresponds to an address mentioned in public case files or documented testimonies between 2019 and 2022. Addresses at neighborhood level. Filter by function: safehouses, laundering and logistics, documented federal rescues, forgery infrastructure. Click on any pin.

Forensic Map · Transnational Network
Georeferenced points · Neighborhood-level · Public version
Filter:
Safehouses
100+
Estimated nationwide. Eleven specific locations documented with address and function.
Properties / month
10+
Acquired in cash via complicit notaries in Medellín de Bravo, registered under family member names.
Federal operations
3
Rescues documented between 2019 and 2022, all linked to the same network.

Four ways to extract money from a single migrant.

The case file identifies that the network operates four simultaneous business lines per captured person. It is not just "charging for the crossing." For each kidnapped migrant, the network generates revenue from at least four streams: the initial crossing fee paid by the family, the additional extortion for release, the sale to Cártel Jalisco for hitman or sexual exploitation, and forced use as a drug mule at border crossing. Move the parameters and observe how each change impacts annual revenue.

Revenue model · 4 verticals
Case file baseline · Annual operation
Migrants captured / day10000
% paying full crossing (USD 10K)30%
% extorted from U.S. families (USD 10K-50K)25%
% sold to CJNG (USD 5K per person)15%
% used as forced drug mule (USD 8K margin)20%
Estimated total annual revenue
$XXX
Sum of the four lines. Conservative model: the case file records up to $50,000 USD per successful extortion. Crossing and mule figures taken literally from the source document.
Crossing
Extortion
CJNG Sale
Mules
"

The real business is extorting the migrants' families. Per person, up to fifty thousand dollars.

· Verbatim quote from consolidated case file

From Tegucigalpa to the United States · Seven nodes · Four thousand kilometers · One network.

The signed testimony of Marhian Alexa Villalobos Rodríguez, sixteen years old, of Honduras, rescued in Guadalupe NL in 2019, traces the exact route. Each node has its fee, its operational function, and its risk. The network controls the entire trajectory. There is no point on the route where the migrant is outside the apparatus.

01
Origin
Tegucigalpa · Danlí
Honduras
$3,000 USD
paid to coyote at origin
Departure per testimony: January 25, 2019. Marhian Alexa, 16, traveled with her aunt Kleymer (25) and cousin Ivett Nicolle (3). Three thousand dollars to the coyote to reach Mexico.
02
Transit · 1 day
San Pedro Sula → Guatemala
Honduras / Guatemala
incluido
in original payment
One night at San Pedro hotel. Bus to Guatemala January 26. One more night. Departure to Mexico January 27.
03
Mexico Entry
Tapachula
Chiapas
$100 USD
INM bribe per person
Airport and land routes under documented control. National Migration Institute officers charge one hundred dollars to allow each migrant through with forged documents from the Hacienda Sotavento workshop.
04
First Safehouse · 8 days
Villahermosa
Tabasco
$4,000 USD
initial cash payment
Controlled safehouse with one hundred people. Eight-day wait for document forgery. Dollars delivered to the warehouse keeper in cash. Document production: the forger makes INE IDs in five minutes per document.
05
Central Hub · flight
Veracruz
Veracruz
via Viva Aerobus
100-200 tickets daily
Camioneta del aeropuerto a casa de seguridad. Empleada en nómina compra boletos abiertos sin cuestionar. Vuelo VER → MTY operado bajo control de los miembros National Guard members adscritos al aeropuerto.
06
Safehouse · 5+ days
Apodaca · Guadalupe
Nuevo León
$10K-$50K USD
extortion of U.S. family
This is where the real extortion phase begins. Direct call to family members in the United States. If they don't pay, they beat the migrants live on the phone. Marhian's testimony documents threats of organ harvesting against a three-year-old girl to force the deposit.
07
Final Crossing
Frontera norte
EEUU
$10,000 USD
cumulative total per person
Cruce controlado por Juan José Palacios Maymon, miembro activo National Guard members con teléfono prefijo +1 Miami. 300-600 personas/día logran llegar al cruce. La diferencia entre 10,000 procesadas en bodegas y 600 que cruzan equivale a la fase de extorsión, secuestro y venta a CJNG.
~4,000 km
total distance traveled
15-30 days
average journey duration
7 nodes
all under network control
$10K USD
minimum total cost per person

Marhian Alexa, sixteen years old, Honduran.

This is neither theory nor journalistic reconstruction. It is the literal transcript of the interview statement signed by a victim rescued from the network in March 2019, within case file FGJNL-022476/2019 of the Nuevo León Attorney General's Office. Every detail here is recorded in official document. Every threat was spoken by the operator in her own voice. Every amount was demanded in a direct phone call.

01
January 25, 2019
Tegucigalpa, Honduras
Marhian Alexa Villalobos Rodríguez, sixteen, leaves Honduras with her aunt Kleymer Ivett Rodríguez Altamirano, twenty-five, and her aunt's daughter Ivett Nicolle Herrera Rodríguez, three. The family pays three thousand dollars to the coyote to take them to Mexico. They were to reunite with the child's mother in the United States.
02
January 26-27, 2019
San Pedro Sula → Guatemala
One night in San Pedro. Bus to Guatemala January 26. One night there. Departure to Mexico January 27. The entire route was controlled by the same network, though the victims did not know it.
03
Late January 2019
Safehouse · Villahermosa, Tabasco
They arrive at a safehouse in Villahermosa. They stay eight days. Forged documents in production. There Marhian first meets Karla, described in the signed statement as "tall, cinnamon skin, wears braces, tattooed eyebrows and eyes, curly black hair, approximately thirty-one years old."
04
Day 8
Villahermosa Airport → Monterrey Airport
They are given fake IDs made by the forger. They are loaded into a van to the Villahermosa airport. Viva Aerobus flight to Monterrey. Upon arrival they walk in the direction they are told. They are received by people with bus-type vans or Mini Vans.
05
Day 8 al 12
White two-story house · Apodaca, NL
White safehouse, two stories, two rooms. No furniture. Only mats. Everyone sleeps on the second floor. No visible address. Marhian sends the location to her sister when she is loaned a phone. Two days later they are moved to another single-story safehouse, five days there, and then to the final safehouse where they were rescued.
06
Day 14
Phone call · Karla
Karla calls. She finds out the group belongs to coyote "Omar." She is angry. She says Omar owes her forty-two thousand dollars. She demands the entire group pay that debt. Thirteen hundred dollars per person. Marhian has no phone, borrows one and notifies her sister in the United States. The sister deposits three thousand nine hundred dollars the next day.
07
Day 16
Second call · Karla
Karla calls again. Four hundred dollars more per person, now for "food." Marhian deposits the four hundred. They give her account numbers. She says she lost track of time, did not know if it was day or night, they were not allowed near the windows or to go out.
08
Day 18
Third call · The ultimate threat
Karla calls the keeper, Fabricio. She orders him to speak with Marhian. Fabricio tells her on the phone, in the presence of the child: "You have to pay ten thousand dollars to free your daughter and your niece. And if you don't pay, they will harvest your daughter's organs to sell them." Then Karla demands ten thousand more to free Marhian. Her sister says she has no more money. She calls Marhian's husband in the United States so he can report to U.S. authorities.
09
March 1, 2019
Federal rescue · Apodaca, NL
On the day of the rescue, before the police arrive, a man named Jorge comes to guard them too. Jorge and Fabricio tell them to get ready because "we're leaving." They change clothes. They look out the window, see the police, close the door and run. The federales enter. Marhian declares: "Those two yes, if we didn't pay them, they wouldn't let us go."
10
Signed Statement
Anti-Kidnapping Prosecutor · Nuevo León
Marhian adds at the end, word for word in the signed statement: "I want to add that in that house Jorge and Fabricio guarded us, sometimes a man would come who was Karla's husband, and they said he was the boss, they called him Palacios. He is very white and very robust, approximately one meter seventy-five tall, no beard or mustache, approximately thirty-one years old, his hair is curly dark brown, he always wore a gold watch."
What happened next
The cousin, Jorge Luis Olvera Uscanga, was the only one arrested. Released months later through bribes paid by Erika Lizbeth Uscanga Cueto to prevent him from testifying against her. The operator was not arrested. The husband was not arrested. The brother was not arrested. The seventy-four victims were transferred to INM and most returned to their countries. Marhian survived. Her three-year-old cousin Ivett survived. The physical description Marhian signed converges with descriptions in dozens of other case files against the same three leaders over the following five years. None were arrested. This investigation is the complaint that does escalate.

Eight events. Eleven years. A sustained pattern.

The network has been operating since at least 2013. Between 2019 and 2022 the events that are already in public case files occurred. All during the López Obrador administration. All shelved by Mexican prosecutors.

← Scroll horizontally →

January 2013
INE Tier 03 Registration in Mexico City
Voter ID of the operator's brother issued with address in Col. San Miguel, Iztapalapa. Valid through 2023. Early entrenchment in federal structure via Federal Police.
INE 0930122102599
March 1, 2019
Apodaca Rescue · 74 victims
Federal forces rescue 74 people in Col. Los Encinos Residencial, Apodaca NL. Victims from Honduras, Guatemala, El Salvador, Nicaragua. Two operators arrested. The family head escapes. Base relocates to Veracruz under state protection.
FGJNL-022476/2019
June 2019
National Guard Creation
Andrés Manuel López Obrador founds the National Guard by absorbing the former Federal Police. The two criminal network operators, already identified by 74 victims three months earlier, are automatically inducted into the new institution without background screening.
Institutional creation
August 27, 2019
Guadalupe Rescue · 50 migrants
Second federal rescue in Col. Pedregal de Linda Vista, Guadalupe NL. Includes 14 minors. Ecuadorian footballer rescued remains imprisoned falsely accused of kidnapping while being a forced victim.
Oficio 0848-AEI-2019
2021
One ton of fentanyl to U.S.
Documented introduction into U.S. territory by the husband and brother in partnership, using airport infrastructure under their control. At the peak of the opioid crisis. Automatically configures Kingpin Act predicate.
OFAC candidate
February 4, 2022
Veracruz Trailer · 53 victims
Trailer with victims in deplorable conditions found in Veracruz. The case fits the documented operational pattern of forced transfer by the network, previously described in 2019 signed testimonies.
Operational pattern
March 10, 2022
5 INM Agents Kidnapped
Boca del Río, Veracruz. Five National Migration Institute agents kidnapped. Objective: extract intelligence and force the entire office to work for the network. Progressive institutional capture.
Institutional capture
2024 · now
Formal Complaint Filed with HSI
Consolidated case file presented to Homeland Security Investigations with the full financial scheme, nine U.S. federal statutes mapped, and documentary evidence from the full presidential term. The case is now under U.S. federal jurisdiction.
HSI / FinCEN / OFAC

Ten people. One family. This is how it all operates.

No es un cártel de cien personas. Son diez personas organizadas en cuatro niveles. La madre lava el dinero. Los tres hijos operan el negocio (dos de ellos con uniforme National Guard members). Three trusted employees sustain logistics. Tres fueron asesinados por intentar salir. Esto es todo el cártel. Click en cualquier persona para ver qué hace exactamente.

ECM
La Madre
Lavadora de dinero
Compra propiedades · Red de collectors
Sus tres hijos operan el negocio · dos con uniforme National Guard members
The Head
"K"
La Hija
Extorsiona a familias en EEUU
Autoriza ejecuciones · Instagram @cueto6127
spouses
🎖 National Guard
"P"
El Esposo
Controla paso a la frontera
Teléfono +1 Miami · "El Tío"
🎖 National Guard
"V"
El Hermano
Paga sobornos · Opera aeropuertos
1 tonelada de fentanilo a EEUU (2021)
Three trusted employees sustain logistics
JLO
El Primo
Traslados y cobros
Único que ha pisado la cárcel · Liberado por soborno
MAV
El Supervisor
Conoce TODAS las casas
Pieza crítica de la logística
AMC
El Falsificador
Produce documentos 24/7
"El Rey del Fusil" · 5 min por credencial
Three employees were murdered for attempting to leave
† Murdered
HRS
H. Ramos Silva
Maestro de Zumba · Monterrey
Tenía red de 100 collectors
† Murdered
EJM
E. Jiménez Martínez
Chofer bodega · Villahermosa
Nacido 1982
† Murdered
EMM
E. Muñoz Maymon
Primo del esposo · Villahermosa
Lo mató su propio primo
Family (Tier 01-02)
Mando con National Guard
Trusted operators
Document infrastructure
Murdereds por intentar salir

The scheme that evades FinCEN, in real time.

Este es el punto que convierte al caso en jurisdicción federal estadounidense directa. El esquema está diseñado por ingeniería financiera, no por azar. Cada cobrador recibe un máximo de cinco mil dólares al mes para quedar por debajo del umbral de reporte del Bank Secrecy Act. Multiplicado por ochocientos collectors por doce meses: cuarenta y ocho millones de dólares anuales invisibles.

Move the parameters. The calculation updates live.

Calculator · 31 U.S.C. § 5324
BSA Evasion Model · Banco Azteca / Coppel / Western Union
Active collectors800
USD per collector / month$5,000
Months of operation12
Estimated Invisible Flow
$48,000,000
USD channeled below the BSA threshold, without triggering automated SARs at U.S. financial institutions or their correspondents.
Per month
$4.0M
Per day
$133K
Transactions / month
800
% below BSA threshold
50%
"

Each person can only receive five thousand dollars monthly. Then they are blocked. Released only the following month. They simulate family remittances. The money is nearly impossible to trace.

· Operational description · Consolidated internal file

Money flow · Tegucigalpa to Medellín de Bravo

01 · ORIGIN
Family in U.S.
Receives extortion call with audio of beatings. Deposits via Western Union or U.S. banks.
$10K – $50K USD
02 · MX ENTRY
Banco Azteca / Coppel
Collector picks up at branch. Maximum $5K per name per month. Physical delivery to supervisor.
BSA Structuring
03 · CONSOLIDATION
ADO Villahermosa-Veracruz
Cash transported daily via bus lines to central house in Veracruz.
$1-5M USD / day
04 · LAUNDERING
Medellín de Bravo Notary
Cash property purchases. Registered to family members without verifiable income.
10+ properties/month
05 · EXIT
Canada Plan
Documented plan: residency by investment. Operate the network from Vancouver or Toronto.
Planned phase

The network that buys one hundred plane tickets per day.

Airports are the central infrastructure. The operator's brother controls the operation from Monterrey and scaled it across the country. A Viva Aerobus employee in Veracruz, identified as "I.", buys between one hundred and two hundred tickets daily by phone, paid weekly. The tickets are left open for any date. Migrants travel with INE IDs and forged migration forms produced at the Hacienda Sotavento workshop.

100-200
Tickets bought / day
$8-16M
MXN monthly air spend
$1M MXN
Weekly bribe / location
$100 USD
INM payment / migrant

Airports by documented degree of penetration

The case file states the brother "is currently the only one who operates all Mexico airports and can send drugs to the United States for various cartels." This dashboard classifies according to direct documentary evidence.

MTY
Mariano Escobedo · Monterrey
Full Control

Original operating base during Federal Police era. Starting point of the system.

VER
Heriberto Jara · Veracruz
Full Control

Main departure hub. Viva Aerobus Veracruz-Monterrey route. Employee on payroll.

VSA
Carlos Rovirosa · Villahermosa
Full Control

Post-Chiapas consolidation. Local safehouses. Daily cash via ADO to Veracruz.

MEX
Benito Juárez · Mexico City
Penetrated

Brother's historic address in Iztapalapa. Secondary transit node.

GDL
Miguel Hidalgo · Guadalajara
Penetrated

Secondary location. Connection with CJNG structure documented in case file.

TIJ
Tijuana
Penetrated

Alternative northern route. Air crossing before border.

TAP
Tapachula
Penetrated

Gateway from Central America. First contact with victims.

CUN
Cancún
Penetrated

Secondary international route. Documented use for family operator transit.

"

He is currently the only one who operates all Mexico airports and can send drugs to the United States for various cartels. He is on the Cártel Jalisco Nueva Generación payroll.

· Brother description · Internal file

Thirteen documents. Five minutes each. Twenty-four hours a day.

This is the piece that holds up everything else. Without the Hacienda Sotavento factory, there are no Viva Aerobus flights, no bus crossings, no safehouse rentals, no trafficked minors, no parallel bank accounts. And none of this was detected by the National Intelligence Center under Audomaro Martínez Zapata during six years of continuous operation.

13
Document types
5 min
per piece
24/7
continuous operation
288
docs/day/operator
~105K
estimated docs/year
0
CNI alerts issued
Intelligence apparatus failure
Audomaro Martínez Zapata
Director of the National Intelligence Center · 2018-2024
failed to detect
· 13 types of documents mass-produced
· Identifiable physical address of the printing operation
· Operator with email address and active cellphone
· Wife collector of remittances integrated into the system
· Uninterrupted production throughout the entire administration
Location
Papaloapan Poniente 295 · Hacienda Sotavento · Veracruz · CP 91698
Third floor · two units · 24/7 operation
Identified operator
Arturo Ignacio Moreno Cantellán
Alias: "El Rey del Fusil" · Reports to Erika Lizbeth Uscanga Cueto

Production catalog · classified by operational use

Identity
2 docs · use: airport and bus
INE Voter ID
Driver's license
Migration
2 docs · use: Mexico transit
INM resident card
FMM migration form
Passport
1 doc · multiple nationalities
Multi-country passport
Minors
3 docs · use: child trafficking
Minor's CURP
Birth certificate
School ID
Evasion
1 doc · evades X-ray
Pregnancy certificate
Vehicles
2 docs · avoids seizure
Forged auto invoice
Forged trailer invoice
Property
1 doc · safehouse rentals
Rental identity
Banking
1 doc · 500+ active accounts
Banking identity

Without the factory, none of this works

FÁBRICA →
100-200 Viva Aerobus tickets/day
FÁBRICA →
ADO crossing without checkpoints
FÁBRICA →
100+ safehouse rentals
FÁBRICA →
500+ bank accounts below UIF threshold
FÁBRICA →
Child trafficking with identity
FÁBRICA →
Women with forged pregnancy evading X-ray
FÁBRICA →
Vehicle seizures neutralized
FÁBRICA →
Aeropuertos operados por National Guard
"

Having a forgery workshop open twenty-four hours a day has allowed them to consolidate as the only criminal organization selling passage through all of Mexico.

· Verbatim quote from case file

The gap between reported and operated.

The Mexican government reports approximately 115,000 missing persons cumulatively in the national historical database. This network is documented to process ten thousand people daily through its safehouses. The simulator quantifies the delta between documented operation and the official figure.

Historic volume simulator
Years of continuous operation × documented volume
Years of operation10
People in safehouses / day10,000
Total processed
36.5M
Minimum victims (5%)
1.8M
Total extortion revenue
$27.4B
Gap vs. official Mexican figures
16×
Times greater than the official figure of 115,000 cumulative disappeared in the Mexican national database. Conservative model: 5% confirmed victims of total processed through safehouses.

Turn this reading into a formal complaint. Two minutes.

This tool generates structured text ready to send to U.S. agencies with jurisdiction over the case. Fill in the fields, the text generates live, copy and send. Your individual complaint adds to the collective record and multiplies institutional pressure.

Complaint Generator · Public Tool
HSI Tips / FinCEN Whistleblower / OFAC Sanctions
Generated complaint text
Fill in the fields and the text will generate here.
HSI TIPS
1-866-347-2423
Homeland Security Investigations · 24/7
HSI ONLINE
ice.gov/webform/hsi-tip-form
Web form · Multilingual
FINCEN
fincen.gov/report-fraud
Financial Crimes · Whistleblower
OFAC SANCTIONS
ofac_feedback@treasury.gov
Kingpin / Magnitsky designations

Read the full report. Forty-two hundred words.

The institutional article accompanies this micro-site. Reuters/WSJ-grade version with all full names, exact dates, addresses, and the five-step operational sequence proposed to Homeland Security Investigations. Eight sections. Approximately twenty-four minutes of reading.

This investigation continues.

La denuncia formal ante Homeland Security Investigations fue presentada con el expediente consolidado completo. Las piezas siguientes incluyen la documentación de la red de collectors, el mapa de propiedades adquiridas en efectivo, y la identificación de funcionarios federales adicionales implicados. Todo el material se publica en Patreon Es Posible.