Mexican cartels have hacked the app’s security and found a way to request unlimited appointments for anyone in the world — far beyond the app’s “northern Mexico” geofence.

Cartels have been selling immigrants a service that provides them with an Internet connection through a virtual private network (VPN) that is able to override a server so that the app cannot tell if the individual is in Northern Mexico.