New Sanctions Target North Korean IT Fraud Scheme
The Trump administration announced new sanctions on Wednesday aimed at a North Korean government initiative. This scheme, as outlined by the Treasury Department, allegedly employs fraudulent identities to place information technology workers in legitimate U.S. companies, diverting their earnings towards North Korea’s weapons of mass destruction and ballistic missile programs.
As a result, ten individuals and one organization associated with facilitating or financing these schemes have been sanctioned by the Treasury Department’s Office of Foreign Assets Control (OFAC).
Reports suggest that these workers utilized stolen identities, fake documents, and misleading personas to land real technology jobs in the U.S. and allied nations. Treasury Secretary Scott Bessent emphasized the ongoing risk posed by the North Korean regime, stating that these operatives exploit U.S. businesses and compromise sensitive data for financial gain.
Bessent stated, “Under President Trump’s leadership, Treasury will continue to use all available tools to protect U.S. businesses from these malicious activities and hold those responsible accountable.”
The individuals involved in the scheme reportedly hid their identities and nationalities to secure employment, allowing the North Korean government to collect most of their wages. Treasury estimates this generated hundreds of millions of dollars, significantly supporting the regime’s weapons programs.
The recent sanctions specifically target individuals and an entity that are believed to sustain these fraudulent operations on behalf of the North Korean government.
In addition to financial activities, North Korean IT workers have been accused of deploying malware, stealing sensitive data, and extorting companies, creating risks for various businesses across the globe. Treasury highlighted the use of cryptocurrency, advanced money-laundering techniques, and artificial intelligence tools to facilitate and transfer funds for the regime.
Among those sanctioned is Russian intermediary Vitold Viktorovich Obertas, who allegedly managed nearly $2 million in cryptocurrency conversions and facilitated at least $1.25 million in transactions for North Korean officials since January 2025. Another named individual, Russian national Ilya Aleksandrovich Boykov, is accused of aiding a previously sanctioned North Korean entity through cryptocurrency transactions totaling about $3.5 million since 2024.
The First Financial and Technical Development Center, a North Korean-controlled organization in Russia, is noted for deploying highly skilled North Korean IT professionals who supposedly utilized sophisticated tools and complex laundering methods. This included intricate cryptocurrency transfers.
The Treasury had previously enacted separate sanctions against another North Korean IT network back in March. The current sanctions block any property or interests held by the designated individuals and the entity that fall under U.S. jurisdiction, preventing U.S. persons from engaging in transactions involving them unless expressly authorized by OFAC.
