Payroll notes can look disposable. Investigators often treat them as leads. The sheets seized in Tapalpa, allegedly tied to CJNG leadership, read like routine budgeting. They list weekly pay, nicknames, fuel, rent, and entries labeled for security forces. If the records hold up, they can connect roles to people and money trails. If they do not, they still show how a cell planned to operate. The next steps are procedural: preservation, verification, and cross-checks with phones, receipts, and other files.
From paperwork to evidence
Investigators say the sheets were recovered during searches at Cabañas La Loma in Tapalpa, Jalisco, after a February 22 federal operation. On their own, the pages are not a conviction. Their value depends on the process. Mexican criminal procedure requires a documented chain of custody, meaning evidence is logged from discovery through storage and analysis. That includes who handled it, when it moved, and how it was preserved. For paper records, that usually means photographing in place, bagging and sealing, cataloging, and creating digital copies for analysts. Any gap can weaken a case in court. That is why authorities tend to treat ledgers like these as starting points. They are compared against seized phones, contact lists, vehicle movements, and financial records. They are also checked for internal consistency, including dates, handwriting, and recurring aliases. In practice, the question is simple: can the same facts be proved without the paper? If yes, the paper becomes an investigative guide.
How analysts read a narconómina
Authorities describe the packet as a narconómina, a working payroll and expense log linked to CJNG activity. One list breaks out weekly pay by role. In the Tapalpa entries, about 30 to 32 halcones are listed at roughly 2,500 to 3,000 pesos a week. The same pages list about 26 armed operatives, described as pistoleros or “muchachos de choke,” at about 4,000 pesos a week. A commander role appears at higher amounts, up to about 7,000 pesos weekly. Investigators treat those figures as operational assumptions, not guarantees. A ledger can reflect planned payments, partial payments, or numbers used to justify withdrawals. What matters is whether names, nicknames, or team labels match other evidence. Analysts look for repeated aliases across towns and weeks. They also look for spending that supports staffing, such as fuel, repairs, food runs, and rent. When those patterns align, a payroll sheet can help place people at a location and time.
Testing the numbers outside the notebook
Other pages extend beyond wages into monthly accounting. One December 2025 note lists revenue totals for Tapalpa and nearby areas, plus a separate total for another municipality. In that month, the papers describe 8,781,353 pesos in income for Tapalpa. They list 7,846,421 pesos for Cocula and about 500,000 pesos tied to slot machines. The combined total is 17,127,774 pesos. The same bundle includes weekly operating costs, such as gasoline, mechanical work, and food supplies. For investigators, those numbers matter because they can be tested. A gas receipt, a shop invoice, or a rental payment can confirm a location. The property itself is also part of the lead. US Treasury records have listed Cabañas La Loma under the Kingpin sanctions program, naming it alongside related aliases and a Tapalpa address. That does not prove criminal use in any specific week. It does show authorities have tracked the business structure for years. Matching the seized notes to that paper trail can help map facilitators and fronts.
What labeled payments can and cannot prove
Some lines are not about salaries. They are entries labeled as payments to municipal police and other security bodies. In the Tapalpa pages, one figure is 138,000 pesos tied to the local police. Other amounts are labeled for nearby towns, and some lines mention federal forces and prosecutors. Those labels are not proof of corruption on their own. They can, however, direct investigators to specific units, dates, and possible intermediaries. To move from suspicion to a case, prosecutors typically look for supporting evidence. That can include communications, meeting records, unexplained cash, or testimony from insiders. It can also include mismatches between income and spending in financial reviews. For expats and other residents, the near-term relevance is practical. Financial leads can drive arrests, interviews, and checkpoint activity in affected corridors. They can also prompt internal reviews in local agencies. The sheets provide an example of how a criminal group budgets for surveillance and influence. The court test will be whether those budgets match reality.
