The Setup
El Mencho founded and led the Jalisco New Generation Cartel, known as CJNG, for over a decade. His death at the hands of Mexican military forces on February 22, 2026 represented the most significant decapitation strike against organized crime in the country's recent history. By the following morning, social media was flooded with images of catastrophic violence that never happened.
Among the circulating claims: the Guadalajara international airport had been seized by cartel assassins; a passenger aircraft was burning on the runway; smoke columns rose from multiple buildings across Puerto Vallarta, a city that generates substantial tourist revenue. Reuters reviewed these images and confirmed they were fabricated. Each spread tens of thousands of times before corrections circulated.
Real violence did occur. Cartel loyalists set up roadblocks, torched buses and stores, and attacked gas stations. That violence was real and documented. The propaganda operation layered over it, amplifying what was real and manufacturing what was not.
The Mechanism
The strategic logic here is precise. Decapitation of an organization's leader triggers a cascade of credibility problems: rivals sense opportunity, internal succession battles begin, and external observers reassess the organization's actual capacity. The worst outcome for the CJNG in the 72 hours after El Mencho's death was not the physical disruption caused by the military operation. It was the perception that the cartel was weakened and controllable.
Disinformation solved that problem at low cost. Real violence requires personnel, coordination, and resources. Fabricated images of violence require a social media account and a network of amplifiers. The CJNG effectively deployed a force multiplier: genuine incidents of retaliation served as a credible foundation, and manufactured images of far greater devastation were layered on top, producing a composite picture of organizational capacity the cartel did not fully possess in that moment.
Jane Esberg, an assistant professor at the University of Pennsylvania who researches how Mexican criminal groups use social media, described the strategic framing directly: the campaign was designed to demonstrate that the Mexican government does not have control over the country. The false images were not propaganda in the conventional sense of advancing a political claim. They were perception management under operational duress, designed to hold territory in the information environment when physical territory was under pressure.
"A civilian does not stay home because of what the cartel has actually done. They stay home because of what they believe the cartel is capable of doing right now, everywhere at once. Disinformation manufactures that belief at a fraction of the operational cost."
The Evidence Layer
The CJNG's information operation had several components running simultaneously. Anonymous accounts spread fabricated images. Narco influencers, social media personalities who had built established audiences around cartel culture, served as distribution nodes with built-in credibility. AI-generated content entered the mix, enabling higher volumes of fabricated material and more visually convincing composites than earlier cartel propaganda had been able to produce.
Mexican Security Secretary Omar Garcia Harfuch confirmed that authorities had already identified multiple accounts with direct connections to organized crime groups. Mexican President Claudia Sheinbaum stated that government communications teams were working to refute the false material in real time. This is precisely the dynamic the operation was designed to create: official communications forced into denial mode, spending resources correcting fabrications rather than projecting control.
The Counter-Read
The obvious read is that this was cartel propaganda. The more operationally useful read is that it was compensatory signaling at a moment of genuine organizational vulnerability.
Power that is stable and secure rarely requires this kind of aggressive manufactured amplification. The intensity of the CJNG's information operation in the 72 hours after El Mencho's death was not a sign of strength. It was a sign that the cartel understood its position was contested and needed to hold the perception of capability while its actual capability was being disrupted. The fabrications were loudest precisely when the organization's real leverage was lowest.
This inversion is the diagnostic. Coordinated amplification of power claims in the immediate aftermath of a visible setback is the signature of an actor managing the gap between perceived and actual capability.
Markers of This Tactic
- A surge of dramatic power claims circulates immediately after a confirmed setback or leadership loss
- Fabricated and real events are mixed in a way that makes accurate assessment of the situation impossible
- Official communications are forced into a cycle of denials rather than forward projection
- Established voices within the actor's network amplify unverified material without sourcing
- The messaging emphasizes chaos and omnipresence rather than specific demands or stated objectives
- The volume of claims is disproportionate to any verifiable facts on the ground
- The campaign subsides once the initial crisis window closes, without accountability for false claims
The Takeaway
Disinformation is most strategically deployed at moments of genuine weakness. Organizations that command overwhelming real power rarely need to manufacture evidence of it. The fabricated airport siege and the burning aircraft were not displays of capability. They were advertisements for a capability the CJNG needed observers to believe it still had.
That principle extends well past cartel operations. When any actor, corporate, political, institutional, floods the information environment with claims of control and presence in the immediate aftermath of a visible blow, the intensity of that messaging is itself data. The louder the assertion of omnipresence, the more carefully the underlying reality deserves scrutiny.