Hidden in Plain Sight
¿Hablas Emoji? Decoding Signals of Support for a Mexican Cartel on TikTok

Cartel Jalisco Nueva Generación (CJNG) is one of Mexico’s most prominent and operationally significant criminal organizations, drawing sustained public and policy attention. In the context of evolving security dynamics and upcoming international events, such as the 2026 FIFA World Cup, it’s increasingly relevant to understand the cartel’s online presence.
We identified a cluster of TikTok accounts displaying textual and audiovisual characteristics commonly associated with CJNG, such as coded usernames, symbols, references to cartel factions, and recurring themes. Open sources did not provide evidence that CJNG members operate these accounts, but the consistent, obfuscated references to the cartel indicate there may be a link between these accounts and CJNG. The recurring features, found in profiles and posts, signify at least support for CJNG – if not direct association – and help boost the cartel's profile, disseminate its messaging, and attract other supporters.
This report summarizes a sample of 100 TikTok accounts reviewed between April 5 and April 15, 2026. We collected this sample from seed accounts identified through organizational markers — such as initials, numeric references, and cartel faction-linked names. We then expanded the set based on recurring signals, follower relationships, and thematic consistency.
The results of our analysis reflect identity indicators and content patterns, together forming a structured but decentralized content environment. We have highlighted observable patterns within the sample, although not establishing direct account affiliation with the CJNG or providing a comprehensive view of CJNG-related activity across platforms.
Key Findings
- Certain terms, visuals, and audio content allude to CJNG affiliation.
The accounts are likely conveying support for CJNG by consistently using certain abbreviations, visual symbols, and audio signifiers without explicitly naming the cartel.
- Visual cues are the strongest indicator of identity.
A military or combat-style aesthetic, death symbols, and hand gesture imagery are contributing to a strong and recognizable visual identity across the TikTok accounts.
- Audio content and mutual followers enable content circulation.
Narcocorrido songs and follower visibility are likely helping CJNG-supporting TikTok users find each other and share content without indicating coordination.
- Obfuscation lets accounts avoid platform moderation.
Characteristics of known CJNG content appear subtly, in overlaid text, visuals, and format features that enable recognition while maintaining ambiguity about the accounts’ owner.
- Public-facing content includes recruitment efforts.
Some accounts post employment-framed calls to action, along with references to compensation and specific locations, indicating pathways to participate in CJNG.

Graphika is the most trusted provider of actionable open-source intelligence to help organizations stay ahead of emerging online events and make decisions on how to navigate them. Led by prominent innovators and technologists in the field of online discourse analysis, Graphika supports global enterprises and public sector customers across trust & safety, cyber threat intelligence, and strategic communications, spanning industries including intelligence, technology, media and entertainment, and global banking.
Download the complete PDF
The full report includes the complete network graph maps, raw attribution indicators, cross-platform topology analysis, and the full takedown timeline with platform-level data.
- Full network graph visualizations
- Attribution indicators with confidence scores
- Raw behavioral modeling data
- Takedown coordination timeline
Related Reports

Close to the Edge
How The Edgesphere Uses AI-Generated Visual Content to Glorify, Promote, and Humanize Violence
Read the Report
Jumping Off Platform
Examining How The Com and Related Networks Spread Content on Mainstream Social Media Platforms and Direct Users to Off-Platform Spaces
Read the Report
Chinese State Influence: Tariffs to Tension
Selected Insights from Graphika’s Intelligence Reporting on Chinese State Influence Actors and Adjacent Communities
Read the ReportSee How Graphika Can Help Your Team Act on This Intelligence
This report is one of 600+ investigations Graphika’s team has published. Our platform gives your analysts continuous access to the same intelligence — plus the tools to apply it to your specific threat environment.