The US Treasury (OFAC) has sanctioned six individuals and two entities tied to the Democratic People’s Republic of Korea (DPRK) IT‑worker schemes that allegedly generated nearly $800 million in 2024.
US Vs. DPRK Over Crypto Fraud How The North Korean Crypto Scheme WorkedAccording to the OFAC’s statement, these North Korean IT networks relied on front companies in Vietnam, Laos and Spain to move IT‑worker revenue into cryptocurrency, convert it, and route funds back to Pyongyang. As the statement claims:
DPRK-facilitated IT teams commonly rely on fraudulent documentation, stolen identities, and fabricated personas to conceal their true identities and gain employment with legitimate companies, including those in the United States and allied countries. The DPRK government reportedly appropriates the majority of the wages earned by these overseas IT workers, generating hundreds of millions of dollars to support the regime’s WMD and ballistic missile programs, in violation of U.S. and United Nations sanctions. In certain instances, DPRK-affiliated workers have also covertly introduced malware into company networks to extract proprietary and sensitive information.
Amongst the companies signaled by Washington are Amnokgang Technology Development Company, that manages overseas DPRK IT delegations and other illicit procurement and Vietnam‑based partner (Quangvietdnbg) whose CEO converted around $2.5 million into crypto for North Koreans between mid‑2023 and mid‑2025, with $800 million in 2024 alone. Other facilitators opened bank accounts, enabled crypto transactions, and laundered IT‑worker proceeds on behalf of North Korean procurement figures, like Kim Se Un.
The OFAC warns that both US and foreign financial institutions face secondary‑sanctions risk if they keep touching flows linked to the newly designated actors, which effectively isolates their remaining fiat and crypto on‑ramps.
What This Means For The Crypto MarketThe regulatory tail risk remains highest around privacy‑focused tools, offshore venues and tokens that depend on opaque liquidity paths. At the same time, every DPRK‑linked enforcement wave nudges more volume toward KYC’d exchanges and transparent stablecoin and BTC pairs, which is where long‑term liquidity and institutional flows are likely to concentrate.
Cover image from Perplexity, BTCUSD chart from Tradingview
