The United States Department of Treasury has announced new sanctions against several individuals and entities accused of being part of a network that helped North Korea secretly generate money through overseas IT jobs and cryptocurrency transactions.
According to U.S. officials, in this scam, North Koreans were reportedly presenting themselves as freelance tech workers, which helped them land jobs in other countries.
Through the use of stolen or fake identities, these individuals were able to apply for jobs in software development, blockchain engineering, and other tech-related fields, especially in businesses located in the United States and other nations.
Modus operandi of the network
In many cases, the workers appeared to be legitimate contractors on hiring platforms or remote job marketplaces.
Once hired, they carried out real technical work but quietly sent a portion of their earnings back to North Korea. Officials believe these payments were coordinated through intermediaries linked to the government in Pyongyang.
Authorities say the money generated through this scheme was not just personal income. Instead, it was allegedly funneled into programs tied to the country’s weapons development efforts, including nuclear and ballistic missile projects.
According to reports, cryptocurrency played a significant role in the movement of the funds. The investigators claim the cryptocurrency helped to move the funds while obscuring the source of the money. This helped to move the money around the globe without the need to use traditional banking systems. Cryptocurrency transactions are often fast. This is the reason they have been used to get around sanctions.
Involved individuals see assets being frozen
The sanctions were issued through the Treasury’s Office of Foreign Assets Control, which is responsible for enforcing U.S. economic restrictions.
As a result, any assets the sanctioned individuals or companies hold within U.S. jurisdiction can be frozen, and American businesses and citizens are generally barred from conducting transactions with them.
Officials say the action is part of a broader effort to disrupt financial networks that help North Korea earn money while under international sanctions.
In recent years, authorities have warned that the country has expanded its use of cyber operations, remote work arrangements and cryptocurrency to generate revenue outside the traditional financial system.

