A major credit card fraud has drawn international attention after a Chilean national was extradited to the United States. The man is accused of selling tens of thousands of compromised payment details through online channels. According to the U.S. Department of Justice, Alex Rodrigo Valenzuela Monje, also known as “VAL4K,” was extradited from Chile to the United States on February 25, 2026, and appeared in federal court in Salt Lake City.
The 24-year-old faces charges related to trading in stolen credit card data and illegally transferring identity information to facilitate criminal activity.
The indictment alleges that between May 2021 and August 2023, Valenzuela Monje operated an illegal online card that distributed unauthorized access devices—known in cybercrime circles as “dumps”—through Telegram channels.
See also: OnlyFake: Ukrainian confessed to selling fake AI identities
Telegram Carding Marketplace: Over 26,000 Stolen Cards
Court documents allege that the defendant operated Telegram channels under the names MacacoCC Collective and Novato Carding, offering payment card data belonging to thousands of American consumers. Investigators allege that data associated with approximately 26,528 cards (from a single credit card brand) was leaked.
The leaks allegedly included sensitive data such as account numbers, cardholder names, expiration dates and CVV codes, details that can enable fraudulent transactions and identity-based financial crimes.
Authorities say the use of Telegram reflects a broader trend in card-trading cybercrime, where threat actors rely on encrypted messaging platforms to evade detection.
This model has become increasingly common in dark web ecosystems, allowing cybercriminals to reach global buyers without maintaining traditional online infrastructure.
Stronger Pressure from Law Enforcement Authorities
The extradition process began after a sealed indictment was issued by a federal grand jury in 2023. The United States formally requested extradition, which was initially approved by the Chilean Supreme Court in April 2025. After appeals, Valenzuela Monje was arrested in January 2026 before being transferred to U.S. authorities.
See also: Predator: Intellexa founder sentenced to prison for wiretapping
The case was investigated by the Federal Bureau of Investigation (FBI) with support from international partners, highlighting the growing cooperation behind international extradition efforts for cybercrimes.
“I want to thank our federal partners for their dedication to investigating individuals in foreign countries who use the internet to commit crimes against our citizens,” said U.S. Attorney Melissa Holyoak. “Individuals may think they can hide behind foreign borders, but the United States is committed to investigating and prosecuting these cybercriminals who target Americans.”
“This release sends a clear message to cybercriminals that your location will not shield you from liability,” said FBI Special Agent Robert Bohlsin Salt Lake City. “Even when operating from abroad, those who exploit technology to target American companies and citizens will be identified, found, and brought to justice. Our international partnerships, along with our partnership with the Utah Department of Public Safety, remain among the FBI’s most powerful tools for targeting and dismantling cyberthreats.”
The Trade in Stolen Credit Card Data Is Escalating
The case of trading stolen credit card data reflects a larger cybersecurity reality: digital financial crime is no longer limited by geography. Messaging platforms, cryptocurrency payments, and automated data distribution tools have significantly lowered the barrier to cybercrime operations.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
See also: L3Harris: Former director jailed for selling zero-day exploits
While law enforcement actions show progress, the persistence of card purchases suggests that enforcement alone may not be enough. Financial institutions, technology platforms, and consumers all need to play a role in reducing the value of stolen data through stronger fraud detection and identity verification controls.
Valenzuela Monje has pleaded not guilty and the case will proceed through the U.S. court system. As investigations continue, the incident serves as a reminder that the trafficking of stolen credit cards remains one of the most active—and profitable—forms of cybercrime in today’s digital economy.
