Officer Kalla learned from employees the suspects had likely opened the machine with a specific key and then the machines were tampered with and the hard drive of one of the two ITMs had been removed. The two ITMs are situated separately as the customers exit the bank’s parking lot. They are located closer to 198th Avenue than the physical bank building and are in separate drive thru lanes. Investigator Silas Reek conducted further investigation. A review of surveillance video footage revealed the following information.
On September 13, 2024, at approximately 9:13pm, a silver vehicle, that was or appeared to be a 2013 Ford Edge, drove past the GRFCU ITMs multiple times. At approximately 9:16pm, two individuals walked past the ITMs while on 198th Avenue. Just after passing, they turn around and walk past the other way. They enter the parking lot and walk towards the bank building and appear to be males. One is wearing all black, a black hat, and a black face mask. The other is wearing black pants, a blue sweatshirt, a black backpack, a black baseball hat and a black face mask.
The two males return to 198th Avenue and then approach the west ITM. At approximately 9:19pm, the male in the blue bends down out-of-view and within moments, the ITM hood opens, closing shortly thereafter. At approximately 9:21pm, the two males walk over to the east ITM, tamper with it to open it, and close it within the minute. The two individuals ran to the silver SUV and get in. The vehicle left westbound on 198th Avenue turning northbound on County Rd 43, driving across Hwy 10. Later that evening, between 11:26pm and shortly before midnight, the two males reapproach the west ITM, tamper with it, open it and close it shortly thereafter.
During the subsequent investigation, the ITM servicer provided an invoice documenting the hard drive was missing from one of the machines and the parts inside had been tampered with. The repair and replacement cost totaled $4,032.15. Based on Investigator Reek's experience on these types of cases, it was extremely likely that the two ATMs contained a total of greater than $5,000 cash. Law enforcement obtained DNA samples from several portions of the machines. Results are currently inconclusive Pursuant to search warrant, Investigator Reek obtained cell phone tower data from Verizon, T-Mobile and AT&T. Three phone numbers, all non-local, showed up multiple times during the times in question at or near the crime location.
Through administrative subpoena, Investigator Reek obtained subscriber names for the three phone numbers. One of these subscribers on the date of the offense was CARLOS ALEXANDER MARCANO GONZALEZ, [DOB REDACTED], the defendant herein. Investigator Reek learned the defendant is listed as a suspect in several of these "jackpotting" cases in the United States: (1) March 1, 2025 in Souix City, SD; (2) March 4, 2025 in Madison, SD; (3) March 7, 2025 in Wahpeton, ND; and (4) May 22, 2025 in Edwardsville, Madison County, IL. In the Edwardsville, IL case, law enforcement located and arrested the three suspects near the offense location.
