More than $74 million in U.S. Treasury refund checks, more than 16,000 of them, allegedly moved through a single operation in the Atlanta area for nearly seven years. Federal authorities arrested three Mexican nationals on October 14, 2026, and charged them with running a tax refund fraud and money laundering scheme that began in January 2019 and continued into this year. The scale is extraordinary.
The unanswered questions about how the payments continued for so long are equally large. U.S. Attorney Theodore S. Hertzberg of the Northern District of Georgia stated that “these aliens allegedly engaged in a years’ long scheme to steal over $74 million from the American people by filing fraudulent tax returns.”
The indictment and related announcements describe a process built on Mexican identification documents obtained in other people’s names, Individual Taxpayer Identification Numbers issued by the IRS, fabricated tax returns, and bulk cash from a Georgia check cashing business.
How Prosecutors Say the Operation Worked According to the indictment and statements from the Justice Department, Gustavo Rojano Salazar, 41, Gabriel Rojano Salazar, 49, and Andres Huerta Rendon, 43, all Mexican citizens living in the Atlanta metropolitan area, obtained Mexican identification documents in the names of third parties. They used those documents to request Individual Taxpayer Identification Numbers from the IRS.
An ITIN is a legitimate tax identification number issued to people who must file a U.S. tax return but who do not have and are not eligible for a Social Security number. Prosecutors allege the defendants directed the IRS to mail the ITIN correspondence to post office boxes they controlled. Once the numbers were in hand, the defendants and others allegedly prepared and filed fraudulent federal tax returns in the names of the ITIN holders.
Those returns included fabricated Forms W-2 that reported false income and false tax withholding amounts. The IRS issued refund checks based on the fabricated information and mailed them to the post office boxes the defendants controlled. Federal authorities state that the defendants and co-conspirators received and cashed more than 16,000 U.S. Treasury refund checks worth over $74 million.
The checks were allegedly taken to a check cashing business in northern Georgia, where they were converted into bundles of bulk cash. On the day of the arrests, federal agents searched a BP gas station and convenience store in College Park that operated a check cashing service, according to local reporting. The defendants face charges of mail and wire fraud conspiracy, mail fraud, and conspiracy to commit concealment money laundering.
Gustavo Rojano Salazar and Gabriel Rojano Salazar also face charges of making false statements on immigration applications in which they allegedly claimed they had never committed a crime. A federal grand jury returned the indictment on October 6. The three men were arrested, arraigned before a magistrate judge on October 14, and ordered detained pending further proceedings. They are presumed innocent unless proven guilty.
Questions About How the Checks Kept Coming The central investigative question is how more than 16,000 refund checks could be issued and cashed over roughly seven years without earlier intervention. Tax refund fraud schemes have long been a known risk to the Treasury. The IRS maintains identity theft filters, data mining tools, and review processes for returns that show suspicious patterns, including those involving ITINs.
Returns claiming large withholdings relative to reported income, repeated use of the same mailing addresses, and high volumes of similar filings are among the characteristics that such systems are designed to flag. Yet the alleged operation continued year after year. Prosecutors say hundreds of fraudulent returns produced thousands of checks. What volume of returns linked to the same post office boxes or the same narrow set of preparers or mail drops would have been required to trigger a sustained review?
What safeguards existed to compare the Mexican identification documents submitted for ITINs against available verification tools, or to detect when large numbers of ITIN holders directed correspondence and refunds to the same limited set of addresses? These questions remain open. The Justice Department has not released the specific points at which the scheme was first detected or why earlier filters did not stop the payments. The Role of the Check Cashing Business Once the checks left the IRS, the next stage was conversion into cash.
Cashing more than 16,000 Treasury checks totaling more than $74 million through one business would generate an unmistakable paper trail of volume, frequency, and dollar amounts. Financial institutions and money services businesses are subject to Bank Secrecy Act reporting requirements for large cash transactions and suspicious activity.
Whether the northern Georgia check cashing operation filed the required reports, whether those reports were reviewed by federal regulators or law enforcement, and whether any pattern of large Treasury check cashing was flagged are among the facts that have not yet been publicly detailed. The search of the College Park BP location on October 14 indicates investigators viewed the business as relevant to the flow of funds. Local accounts described agents removing boxes of records.
The precise ownership structure of the check cashing service, the volume of Treasury checks it processed beyond those alleged in this case, and any prior regulatory actions against it have not been disclosed in the charging documents or announcements released so far. Part of a Larger Enforcement Push The Georgia case is one piece of the Justice Department’s first National Tax Enforcement Surge, announced the same day. That effort involved 35 U.S.
Attorneys’ Offices and produced prosecutorial actions against 76 defendants linked to more than $490 million in estimated intended tax losses. New charges against 31 defendants accounted for more than $350 million of that total. The surge was coordinated through the department’s National Fraud Enforcement Division, created earlier in 2026, and reflects an emphasis on prosecuting intentional false statements that divert taxpayer funds.
Assistant Attorney General Colin McDonald stated that the results send a clear message that those who intentionally lie to steal American money should expect to answer in federal court. U.S. Attorney Hertzberg described the Georgia defendants as having plundered public coffers through identity fabrication. The broader numbers show that large scale tax refund and related fraud schemes remain an active target.
The Georgia indictment is the single largest dollar figure highlighted in the surge announcements. Accountability and the Remaining Gaps Seventy four million dollars is not an abstract loss. It is money that would otherwise have remained available for federal programs or reduced the tax burden on compliant filers. The alleged use of foreign identification documents, ITINs issued on the basis of those documents, and repeated false returns raises concrete questions about the speed and rigor of existing verification and detection systems.
The additional charges that two defendants made false statements on immigration applications, claiming they had never committed a crime while the scheme was underway, add a further layer of alleged deception. Federal agents from IRS Criminal Investigation, the U.S. Postal Inspection Service, and Homeland Security Investigations built the case. Their work produced the arrests and the indictment.
What remains unanswered is why the volume of checks did not trigger earlier, more decisive action by the systems designed to protect the Treasury. How many similar patterns of repeated ITIN refunds directed to a small number of addresses are currently in the system? What changes to ITIN verification, return filters, or money services business monitoring would have interrupted this operation years earlier? Those are questions of accountability for the safeguards that are supposed to stand between fraudulent claims and public funds.
The defendants will have their day in court. The public is entitled to a clearer accounting of how more than 16,000 Treasury checks could leave the building in the first place.
