U.S. Treasury Sanctions Network Linked to North Korean Crypto Fraud

TheNewsCryptoPublished on 2026-03-13Last updated on 2026-03-13

Abstract

The U.S. Treasury has sanctioned a network tied to North Korean IT workers involved in global cryptocurrency fraud schemes. These operatives used stolen identities and fake documents to secure remote IT jobs, then funneled their earnings to the North Korean government to fund weapons and ballistic missile programs. Many operated from countries like China and Russia while posing as legitimate employees, with companies unknowingly hiring them for software and crypto-related projects. Authorities linked the network to other cybercrimes, including hacking and identity fraud, which have generated billions in stolen crypto assets. Organizations are urged to strengthen identity checks to avoid inadvertently supporting sanctioned entities.

The United States Department of the Treasury sanctioned a network linked to North Korean IT workers. They were running cryptocurrency fraud schemes across the world. Reports indicate that the operatives secretly acquired remote IT jobs. Then, they redirected their earnings to the North Korean government through these networks. Investigators believe the program earned substantial revenues and used them to support Pyongyang’s weapons and ballistic missile programs worldwide. Reports indicate that North Korean operatives used stolen identities and fabricated documents to acquire remote IT jobs globally.

It is reported that many of these workers were operating in countries such as China and Russia. This was done while presenting themselves as legitimate workers worldwide. It is reported that many companies unknowingly recruited these workers to develop software, infrastructure, and cryptocurrency platforms globally. Michael Faulkender said that authorities will seek to block revenue channels that fund destabilizing activities in North Korea globally.

Cybercrime Network Raises Crypto Industry Security Concerns

Faulkender stated that the authorities remain committed to disrupting these cyber-enabled revenue operations in support of Pyongyang’s weapons development programs worldwide today. The investigators also associated the network with other worldwide cybercrime operations. Investigators recently revealed that operatives targeted cryptocurrency organizations and blockchain developers worldwide.

Security authorities have estimated that North Korea-sponsored cyberhackers stole billions from cryptocurrency organizations worldwide in recent years worldwide recently. Experts have revealed that these operations involve a combination of hacking activities, identity fraud schemes, and remote employment strategies. This was to raise revenue in cryptocurrencies worldwide.

Security authorities have urged organizations to heighten their identity verification when hiring remote technology workers worldwide in the global market. They have stated that this can help organizations avoid unknowingly remitting money to sanctioned networks associated with North Korea’s worldwide cyber operations and activities. The latest sanctions have revealed the ongoing efforts to restrict revenue streams associated with North Korea’s worldwide cyber activities and operations.

Highlighted Crypto News:

Kraken Announces Pi Network Listing Ahead of Pi Day, Boosting Interest in PI Coin

TagsBlockchainNorth KoreaU.SUS Treasury

Related Questions

QWhat did the U.S. Treasury sanction in relation to North Korean IT workers?

AThe U.S. Treasury sanctioned a network linked to North Korean IT workers who were running cryptocurrency fraud schemes worldwide.

QHow did the North Korean operatives acquire remote IT jobs according to the report?

AThey used stolen identities and fabricated documents to secretly obtain remote IT jobs globally.

QWhat was the primary purpose of the revenue generated by this fraudulent program?

AThe substantial revenues earned were used to support Pyongyang's weapons and ballistic missile programs.

QWhich countries were mentioned as locations where many of these operatives were working?

AMany of these workers were operating in countries such as China and Russia.

QWhat did security authorities recommend to organizations hiring remote technology workers?

AThey urged organizations to heighten their identity verification processes to avoid unknowingly sending money to sanctioned networks.

Related Reads

Within Strategy's Framework, STRC's Dividend Yield Remains at 12% as Share Price Stays Below Par Value

Michael Saylor, Executive Chairman of Strategy (MSTR), confirmed that the dividend rate for its STRC perpetual preferred shares will remain at 12.00% through August 2026. The rate has increased from 9% at its July 2025 launch to the current high via a "ratchet" mechanism, which permanently raises the rate by 0.5% whenever the share price falls below $95. This mechanism is intended to push the price back toward its $100 par value and support Strategy's "at-the-market" (ATM) program for issuing new shares to fund Bitcoin purchases. However, the mechanism has not worked as intended. STRC shares closed at $89.46 on July 31, remaining about 10-11% below par value despite the record-high dividend. Competition from rival Strive's higher-yielding SATA securities has pressured demand. The persistent discount has forced Strategy to suspend new STRC issuances via its ATM program, limiting this funding channel for Bitcoin acquisitions. STRC's struggles reflect Bitcoin's own volatility, as the preferred shares historically move in tandem. Analysts have warned the ratchet structure carries long-term, one-way risk. A law firm is investigating Strategy's ability to maintain dividend payments if Bitcoin's price stays low. Retail investors own roughly 83% of outstanding STRC shares, a group seen as prone to panic selling during downturns. In response, Strategy has established financial reserves, including a liquidity cushion covering about 26 months of dividend/interest obligations, and a $2 billion share buyback program alongside a Bitcoin monetization framework, though the company emphasized it is not obligated to sell any Bitcoin.

cryptonews.ru9m ago

Within Strategy's Framework, STRC's Dividend Yield Remains at 12% as Share Price Stays Below Par Value

cryptonews.ru9m ago

Analyst: Bitcoin's Price Will Drop to $60k in August, Then Rebound to $70k

Financial analyst Andrey Poroshin has provided a new forecast for Bitcoin's price dynamics in August. Poroshin, an analyst at the Bitbanker exchange, expects the cryptocurrency market to experience a downturn this month, with prices retesting the $60,000 level due to a lack of supportive macroeconomic catalysts. He noted that the recent US Federal Reserve decision to hold interest rates did not significantly impact the market, while inflation remains above the 2% target. Poroshin stated that Bitcoin is ending July under pressure from moderate volatility and a lack of new macroeconomic stimuli, leading to continued market caution. According to his base scenario, Bitcoin will drop to a range of $60,000 to $62,000 before recovering to $70,000. He pointed out that even $70,000 remains below the cost of mining in the US, which has prompted some miners to shift towards AI data center operations. Poroshin cited the winding down of BitMEX's operations as a potential catalyst for a price rebound, suggesting the exit of weaker players often coincides with market reversals and reduced short-term selling pressure. He believes Bitcoin is currently less susceptible to geopolitical shocks, such as the Iran-US conflict, and does not expect significant market changes in August related to the pending CLARITY Act. Looking ahead, Poroshin forecasts that September will bring more active price fluctuations driven by potential Fed rate decisions and possible discussions or approval of the CLARITY Act.

cryptonews.ru9m ago

Analyst: Bitcoin's Price Will Drop to $60k in August, Then Rebound to $70k

cryptonews.ru9m ago

Trading

Spot
活动图片