Treasury Sanctions Facilitators of DPRK IT Worker Fraud Targeting U.S. Businesses
2026-03-12 • USTreasury •
OFAC sanctioned six individuals and two entities involved in DPRK government-orchestrated IT worker schemes that defrauded U.S. businesses and generated revenue for North Korea’s WMD programs, including nearly $800 million in 2024. The workers used fraudulent documents, stolen identities, and fabricated personas to obtain jobs at legitimate companies, and some DPRK-affiliated workers allegedly introduced malware to steal proprietary and sensitive data. The action named Amnokgang Technology Development Company, Nguyen Quang Viet and Quangvietdnbg in Vietnam, facilitators linked to Kim Se Un, and a Laos-based worker network led by Yun Song Guk with financial and contract support from other individuals. The sanctions matter because they target both the employment-fraud infrastructure and the financial facilitators that move proceeds through bank accounts, currency conversion, and cryptocurrency transactions.