Wired reports:

As the Trump administration publicly cast Venezuela’s Tren de Aragua (TdA) as a unified terrorist force tied to President Nicolás Maduro and operating inside the United States, hundreds of internal US government records obtained by WIRED tell a far less certain story. Intelligence taskings, law-enforcement bulletins, and drug-task-force assessments show that agencies spent much of 2025 struggling to determine whether TdA even functioned as an organized entity in the US at all—let alone as a coordinated national security threat.

While senior administration officials portrayed TdA as a centrally directed terrorist network active across American cities, internal tasking directives and threat assessments repeatedly cite “intelligence gaps” in understanding how the group operated on US soil: Whether it had identifiable leadership, whether its domestic activity reflecting any coordination beyond small local crews, and whether US-based incidents pointed to foreign direction or were simply the work of autonomous, profit-driven criminals.

The documents, marked sensitive and not intended for public disclosure, circulated widely across intelligence offices, law-enforcement agencies, and federal drug task forces throughout the year. Again and again, they flag unresolved questions about TdA’s US footprint, including its size, financing, and weapons access, warning that key estimates—such as the number of members operating in the US—were often inferred or extrapolated by analysts due to a lack of corroborated facts.

Together, the documents show a wide gap between policy-level rhetoric and on-the-ground intelligence at the time. While senior administration officials spoke of “invasion,” “irregular warfare,” and “narco-terrorism,” field-level reporting consistently portrayed Tren de Aragua in the US as a fragmented, profit-driven criminal group, with no indication of centralized command, strategic coordination, or underlying political motive. The criminal activity described is largely opportunistic—if not mundane—ranging from smash-and-grab burglaries and ATM “jackpotting” to delivery-app fraud and low-level narcotics sales. [Continue reading…]