NarcoWatch - 19 March 2026
Following the death of Cártel Jalisco Nueva Generación (CJNG) leader "El Mencho," his U.S.-born stepson has reportedly assumed control, ushering in a period of strategic recalibration for the cartel amid heightened U.S. scrutiny and threats against American military personnel [6, 7, 17]. Concurrently, law enforcement operations have inflicted significant damage on the Sinaloa Cartel's "Los Mayos" faction through high-value target arrests and the dismantling of key infrastructure [2, 3]. This pressure has exacerbated fragmentation within the Sinaloa Cartel, sparking new alliances and violent territorial clashes, most notably a large-scale confrontation in Nayarit between "Los Mayos" and a coalition of "Los Chapitos" and the CJNG [4].
Significant Incidents and Articles of Interest
CJNG Enters New Era After Death of "El Mencho": Following the killing of Nemesio Oseguera Cervantes, "El Mencho," in a February 2026 operation in Tapalpa, Jalisco, his U.S.-born stepson, Juan Carlos Valencia González ("El Tres"), has reportedly consolidated control over the CJNG [6, 7]. Valencia González, a 41-year-old native of California, faces a $5 million U.S. reward for his arrest [7]. His American citizenship presents significant legal and procedural hurdles for U.S. surveillance and intelligence operations. Initial intelligence suggests González is attempting to moderate the cartel's violent profile to avoid becoming a priority U.S. target, reportedly reigning in aggressive lieutenants like Audias Flores, "El Jardinero." This follows the arrest of key CJNG logistic operator José "N" ("Pepe") on 15 March, who was instrumental in moving "El Mencho's" partner before the leader was killed [5, 6].
Sustained Law Enforcement Pressure Decimates "Los Mayos" Faction: State and federal authorities have delivered a series of consecutive blows to the Sinaloa Cartel's "Los Mayos" faction, also known as "La Mayiza." On 18 March, César Gabriel Zepeda Guzmán ("La Barquita"), the group's chief of assassins in Colima, was killed during a shootout with SEMAR and state police in Manzanillo [3]. A day prior, on 17 March, SEMAR dismantled a major synthetic drug lab operated by the faction in Culiacán, Sinaloa, seizing 800 kilograms of methamphetamine and large quantities of precursor chemicals [2]. These actions compound previous losses, including the January 2026 arrests of Sinaloa leader Israel Vizcarra Beltrán ("Palillo") and his brother, and the November 2025 capture of "La Barquita's" predecessor in Manzanillo, Julio Alejandro “N” ("El Placas") [3].
Sinaloa Cartel Infighting Escalates into Major Battle in Nayarit: On 17 March, a massive firefight erupted in Huajicori, Nayarit, between members of the "Los Mayos" faction and a rival coalition of CJNG and "Los Chapitos" sicarios [4]. The hours-long gun battle, which trapped civilians and students in a local school, prompted a large-scale military and police response supported by a helicopter gunship. The operation resulted in the arrest of 20 sicarios and the seizure of a significant arsenal, including 12 long guns, over 3,500 rounds of ammunition, 75 magazines, and eight improvised explosive devices [4, 13]. State authorities confirmed the violence is a direct result of the fragmentation of the Sinaloa Cartel following "El Mayo's" capture, with the CJNG/"Los Chapitos" alliance seeking to wrest control of the strategic corridor bordering Sinaloa from "Los Mayos" [4].
International Cooperation Leads to Capture of Ecuadorian Assassin in Mexico City: In a significant blow to transnational organized crime, Mexican authorities, acting on intelligence from Colombia and Ecuador, arrested Ángel Esteban Aguilar Morales ("Lobo Menor") in the affluent Polanco district of Mexico City on 18 March [1]. Aguilar Morales, leader of the Ecuadorian gang Los Lobos, is identified as the intellectual author of the August 2023 assassination of Ecuadorian presidential candidate Fernando Villavicencio. He was evading an Interpol red notice using a false Colombian identity and was tracked from Medellín, Colombia, to Mexico. The capture highlights the effectiveness of trilateral intelligence sharing and underscores Mexico's role as a refuge for high-level international fugitives with ties to Mexican cartels [1].
U.S. Military Reports Increased Threats and Harassment from Cartels: The head of U.S. Northern Command, General Gregory Guillot, confirmed on 17 March that U.S. military personnel deployed on the southern border are facing increased threats following the death of "El Mencho" [17]. The harassment includes direct threats and the hacking of soldiers' phones. In response, the U.S. has increased drone and unmanned aircraft patrols to mitigate risks. This escalation coincides with reports that Sinaloa Cartel factions, increasingly paranoid about a potential U.S. military incursion, are actively acquiring advanced weaponry, including rocket-propelled grenades and anti-drone systems costing up to $40,000 each, to counter surveillance and potential attacks [17].
DTO Activity and Tactics
DTOs: Cártel Jalisco Nueva Generación (CJNG), Sinaloa Cartel ("Los Mayos" and "Los Chapitos" factions), Los Lobos, Los Mezcales.
New or Adapted Tactics:
Strategic De-escalation: CJNG's new leader, "El Tres," is reportedly adopting a less confrontational public posture to avoid attracting priority attention from U.S. law enforcement, a significant shift from the hyper-violent tactics under "El Mencho" [6].
Defensive Military Armament: In response to perceived threats of U.S. intervention, the Sinaloa Cartel is reportedly investing heavily in military-grade defensive hardware, specifically anti-drone systems and rocket-propelled grenades, to protect its operations in the Sierra Madre [17].
Cross-Border Digital Harassment: Mexican cartels are now directly targeting U.S. military personnel on the border through digital means, including phone hacking and direct threats, representing a new dimension of asymmetric conflict [17].
Continued Drone Proliferation: CJNG's "Grupo Delta Explosivistas" remains active in Michoacán, continuing its use of drones armed with C4 explosives in its conflict with Cárteles Unidos, despite the January 2026 extradition of its leader [8].
Geographic Trends:
Nayarit: The municipality of Huajicori has become a key battleground for control of the Sinaloa-Nayarit corridor, with the CJNG and "Los Chapitos" actively confronting the weakened "Los Mayos" faction [4].
Colima: In January 2026, "La Mayiza" announced a formal alliance with local group Los Mezcales (a CJNG splinter) to challenge the CJNG's dominance in the state, particularly around the strategic port of Manzanillo [3].
Baja California: Federal forces intercepted weapons and tactical equipment being transported through the Tijuana-Mesa de Otay border crossing, indicating continued arms trafficking from the United States into Mexico despite enhanced border security measures [14].
Michoacán: CJNG's Grupo Delta Explosivistas maintains active operations despite the January 2026 extradition of their leader ("Delta 1") to the United States. Video evidence shows armed patrols in forested terrain, indicating sustained territorial control efforts against Cárteles Unidos. The R5 cell (Cárteles Unidos) maintains presence in disputed areas like Cotija [8, 9].
Guerrero: CJNG's "Gente del Serio" cell, operating under the command of Audias Flores ("El Jardinero"), maintains active convoy operations throughout the state, demonstrating the organization's ability to project force across multiple theaters simultaneously. Additionally, video footage shows members of Los Tlacos (Cartel de la Sierra) operating in Guerrero, indicating continued presence of rival organizations in the fragmented security environment [10, 16].
Transnational Criminal Hubs: A recent analysis highlights that criminal organizations from at least 11 different countries are operating across all 32 states of Mexico. These groups, including mafias from China, Colombia, Venezuela (Tren de Aragua), and Albania, engage in precursor chemical sales, human trafficking, and money laundering, often in partnership with local cartels. The top hubs for this activity are Mexico City, Baja California, and Quintana Roo [12].
Targeting Trends:
U.S. Military Personnel: U.S. soldiers on the border are now considered direct targets for cartel intimidation and intelligence gathering operations [17].
Sports Officials and Public Events: The assault on soccer referees by a CJNG-linked mayor and his security detail at a public sporting event represents an expansion of intimidation tactics into civic spaces traditionally considered neutral. This signals cartel influence extends beyond direct criminal operations into social institutions [11].
Rival Cartels: Large-scale, direct military-style confrontations remain the primary method of resolving territorial disputes, as seen in the Nayarit conflict [4]. The ongoing violence continues to have a devastating impact on civilian populations, highlighted by the discovery of hundreds of bodies in clandestine graves near Guadalajara's Jalisco Stadium, slated to host 2026 World Cup matches, raise security concerns for the tournament [15].
Indicators to Watch
Changes in CJNG's public displays of violence, which may indicate the level of control the new leadership, Juan Carlos Valencia González, exerts over hardline lieutenants like "El Jardinero."
Increased intelligence reporting on the procurement and deployment of advanced defensive systems (e.g., anti-drone jammers, RPGs) by Sinaloa Cartel factions in their traditional strongholds.
Further expansion of the CJNG/"Los Chapitos" alliance into territories traditionally controlled by the "Los Mayos" faction, particularly in Sinaloa and Durango.
An uptick in reports of digital targeting (hacking, doxxing, information operations) against U.S. and Mexican law enforcement or military personnel near the border.
The arrest or neutralization of other high-level foreign criminal actors in Mexico, which would further confirm the country's status as a critical node for global organized crime.
Increased seizures of tactical gear, weapons, and ammunition at ports of entry
