Mexican Authorities Dismantle Clandestine 300-GPU Crypto Farm Powered by Stolen Electricity

Mexican security forces have dismantled a sophisticated, clandestine cryptocurrency mining installation operating in the rugged mountains of Puebla, uncovering a 300-GPU facility suspected of drawing entirely on stolen hydroelectric power.

The clandestine operation had been functioning near Tlaola, a mountainous municipality of roughly 20,000 residents situated in Puebla’s Sierra Norte region. Long before law enforcement intervened, the facility had signaled its presence to nearby communities, where residents could hear the continuous, mechanical drone of industrial transformers and cooling units from up to a kilometer away.

In early September 2026, an inter-agency security raid moved in to shut down the source of the noise. The coordinated operation brought together investigators from the federal Attorney General’s Office (FGR), personnel from the Mexican Navy (SEMAR), and regional officers from the Puebla state security ministry (SSP) to secure the property and confiscate the equipment.

Inside the facility, authorities uncovered a sizable computational setup. The inventory included 300 graphics processing units categorized in official records as specialized GPU computers, along with 80 medium-voltage electrical terminals, eight satellite communication antennas, and a pedestal-mounted transformer designed to handle industrial-grade electricity loads.

Investigators are examining whether the facility siphoned its massive power supply directly from the nearby Nuevo Necaxa hydroelectric complex. Although Mexican authorities have officially classified the installation as suspected organized crime infrastructure, no specific cartel has yet been formally identified as the operator, and attribution remains under active investigation.

The raid represents a recurring issue in the region rather than an isolated occurrence. According to reporting from Reuters, this marks the fourth clandestine cryptocurrency farm discovered in the vicinity of the Nuevo Necaxa hydroelectric system since early 2025, underscoring an established pattern of illicit exploitation targeting regional energy infrastructure.

Mexican officials have increasingly applied the term "huachicoleo"—a word historically reserved for the illicit tapping of fuel from state pipelines—to describe large-scale electricity theft. Criminal enterprises are progressively targeting utility infrastructure to convert siphoned electrical power directly into digital financial assets.

The hardware discovered at the site illustrates the practical mechanics of illicit mid-tier mining. While a 300-GPU setup is far smaller than legitimate commercial facilities housing thousands of units, it greatly exceeds any standard residential arrangement. Following Ethereum’s 2022 transition away from proof-of-work validation, secondary markets were saturated with used mid-range graphics cards, allowing illicit actors to acquire RTX 30-series-class hardware at reduced costs.

Because modern Bitcoin mining relies almost exclusively on specialized ASIC equipment, GPU-based operations typically mine alternative digital assets or privacy-focused tokens such as Monero. To maintain these operations without detection from local internet service providers, the facility relied on eight satellite dishes, which provided the low-latency connectivity required for mining pools while shielding network traffic from domestic monitoring.

The reliance on digital assets reflects a broader trend among Mexican criminal organizations. Cybersecurity firm SILIKN reported a 55.8 percent year-on-year increase in cryptocurrency use for money laundering in Mexico during 2025, noting that prominent cartels, including the Sinaloa Cartel and the Jalisco New Generation Cartel (CJNG), regularly utilize Bitcoin, Monero, and Tether to move illicit capital.

The global and regional financial scale of these activities is significant. UN and DEA estimates cited by SILIKN indicate that cartel-related cryptocurrency laundering reaches up to $25 billion annually. On a broader scale, Chainalysis reported in its 2026 Crypto Crime Report that total illicit cryptocurrency transaction volume globally reached $154 billion in 2025, marking a 162 percent surge over the previous year.

Within this framework, cartel-linked crypto mining fulfills two distinct strategic objectives. First, it generates direct revenue by transforming siphoned electricity into digital tokens at virtually zero energy cost. Second, it serves as an effective laundering mechanism, blending newly mined assets with illicit narcotics proceeds through privacy-centric coins and exchanges operating with minimal customer-verification requirements.

Despite the scale of these operations, enforcement remains legally complex. Cryptocurrency mining is not inherently illegal under Mexican law. Consequently, securing convictions requires prosecutors to prove secondary offenses, such as utility theft, money laundering, or direct participation in organized crime, each of which carries stringent evidentiary requirements.

The physical portability of the technology also poses ongoing challenges for law enforcement. Compact GPU rigs and satellite terminals can be dismantled and relocated rapidly, enabling criminal networks to re-establish seized infrastructure elsewhere. At the same time, expanding demand from artificial intelligence data centers continues to absorb top-tier hardware supplies, incentivizing illicit mining operations to rely on older, affordable GPUs run on stolen energy.