Mexican authorities have dismantled a concealed cryptocurrency mining operation in Puebla state, seizing about 300 graphics processing units and equipment that investigators believe may have been powered by stolen electricity from a nearby hydroelectric facility. The raid in the mountain municipality of Tlaola is also examining whether cryptocurrency mined at the site was used to conceal proceeds from illicit activity, according to a Sept. 6 statement from the Puebla state government.
Federal prosecutors, Mexican navy personnel and state security officers took control of the property in a remote community near a dam, Reuters reported. Alongside the GPUs, authorities removed a transformer and reported finding about 80 medium-voltage electrical terminals and eight satellite internet antennas.
The combination of high-capacity power equipment, large numbers of GPUs and satellite connections points to an operation designed to run beyond the visibility of ordinary commercial networks. Mining hardware consumes substantial electricity, making unauthorized access to industrial-scale power infrastructure a central focus of the investigation.
Fourth suspected mining site found near Tlaola
The Puebla site was the fourth cryptocurrency mining facility uncovered in the same vicinity since early 2025, Reuters reported. Authorities had found three similar operations in the area before the latest raid, suggesting that investigators are looking beyond a single property and examining whether the facilities shared operators, suppliers, power connections or financial channels.
Tlaola’s location near hydroelectric infrastructure appears central to that inquiry. Hydroelectric power can provide a large and relatively steady supply of electricity, while remote terrain can make it easier to conceal equipment, wiring and communications infrastructure. The reported seizure of a transformer and dozens of medium-voltage terminals indicates investigators are assessing whether the operation had access to electricity beyond what a normal local connection would support.
Officials have not publicly detailed the amount of cryptocurrency mined at the property, the blockchain addresses involved, or whether any arrests were made during the operation. Their stated focus includes suspected electricity theft and money laundering, two allegations that can overlap where mining equipment is used to convert unlawfully obtained power into a transferable digital asset.
A mining operation does not automatically demonstrate money laundering. In this case, prosecutors are examining whether the cryptocurrency generated through the machines was part of a mechanism for disguising criminal proceeds, Reuters reported. That would require investigators to establish links between the site, the source of the equipment and electricity, the wallets receiving mining rewards, and any subsequent transfers or cash conversions.
Mining can complicate financial tracing
Mining creates a different transaction trail from a straightforward purchase of cryptocurrency with cash. Rather than sending funds directly into a cryptocurrency platform, an operator receives mining rewards through blockchain addresses connected to computing work. Those rewards can then be moved, swapped or converted through subsequent transactions.
That structure does not erase the blockchain record, but it can add layers to a financial investigation. Authorities would need to identify the wallet addresses used by the mining pool or operators, follow transfers from those addresses and connect them to individuals or businesses. Physical evidence seized in a raid — including computers, networking devices and satellite equipment — can be as valuable as the mining hardware itself in making those connections.
The Puebla operation also illustrates why electricity-theft allegations are often central to illicit mining cases. A mining business operating at market electricity rates must cover significant energy costs. Unauthorized power access would sharply reduce those costs, allowing an operator to retain more of the cryptocurrency produced and potentially operate equipment that would otherwise be unprofitable.
U.S. sanctions case shows cross-border crypto scrutiny
The investigation comes amid continuing efforts by Mexican and U.S. authorities to trace cryptocurrency allegedly connected to drug trafficking and cross-border financial crime. In May, the U.S. Treasury Department sanctioned a network it alleged was operated by Armando de Jesus Ojeda Aviles.
Treasury said the network collected proceeds from drug sales in the United States, converted cash into cryptocurrency and transferred value to Mexico’s Sinaloa Cartel. The case involved alleged cash-to-crypto conversion rather than cryptocurrency mining, but it shows the range of methods authorities examine when they suspect digital assets have been used to move criminal proceeds across borders.
Blockchain analytics firm Chainalysis estimated that addresses it had identified as illicit received at least $154 billion in cryptocurrency during 2025. The company said the activity represented less than 1% of the total transaction volume it tracked. Its estimates generally exclude ordinary payments to drug traffickers unless it has additional information connecting a transfer to criminal origin, since blockchain data alone cannot always distinguish a lawful payment from an illicit one.
That limitation is relevant to the Puebla case. Public blockchain records can show where cryptocurrency moved, but they cannot independently establish why a payment occurred or who controlled every address. Investigators typically combine transaction analysis with evidence obtained from property searches, communication records, power-use data and financial documents.
Investigation shifts toward infrastructure and wallets
The seizure in Tlaola places physical infrastructure at the center of the case: hundreds of GPUs, power-conversion equipment, electrical terminals and satellite antennas. Those items could help prosecutors determine the facility’s scale, how long it operated, how it connected to the grid and whether several sites in the region were coordinated.
The presence of multiple alleged mining farms near the same hydroelectric area may also lead authorities to examine local supply chains for specialized hardware, electrical installation work and internet connectivity. Running hundreds of GPUs requires ventilation, maintenance, replacement components and sustained network access, leaving operational traces beyond the blockchain.
For legitimate mining operators and cryptocurrency businesses, the raid reinforces the importance of documented power contracts, equipment ownership records and compliance procedures around wallet activity. For investigators, the Puebla seizures offer a potential map from physical energy infrastructure to digital asset flows — a route that could determine whether the suspected sites were isolated electricity-theft operations or part of a larger laundering network.
Learn how 2025 crypto crime trends and key tips for traders can help you spot and avoid illicit blockchain activity.
Disclaimer: The content on this page is provided for general informational purposes only and does not represent the views or financial advice of Toobit. We make no guarantees regarding the accuracy or completeness of this information and shall not be held liable for any errors, omissions, or outcomes resulting from its use. Investing in digital assets involves risk; users should independently evaluate their financial situation and the risks involved. For further details, please consult our Terms of Service and Risk Disclosure.
