U.S. sanctions North Korea IT worker scheme

The U.S. Treasury Department sanctioned ten individuals and one entity for their alleged involvement in a North Korean scheme that used fraudulent identities to place IT workers in U.S. and allied companies.

The scheme, according to Treasury, involved North Korean workers concealing their identities and nationalities to secure legitimate technology jobs, with the regime allegedly collecting most of their wages.

Treasury stated that the workers' earnings, amounting to hundreds of millions of dollars, were used to fund North Korea's weapons of mass destruction and ballistic missile programs.

The sanctions target individuals and an entity accused of sustaining the schemes on behalf of the North Korean government, blocking their assets and transactions in the U.S. or under U.S. control.

Among the sanctioned individuals is Vitold Viktorovich Obertas, a Russian intermediary who allegedly handled nearly $2 million in cryptocurrency conversions for North Korean officials since January 2025.

Another Russian national, Ilya Aleksandrovich Boykov, allegedly facilitated cryptocurrency transactions worth $3.5 million since 2024 for a previously sanctioned North Korean entity.

The First Financial and Technical Development Center, a North Korean-controlled entity in Russia, deployed IT workers who allegedly used advanced money-laundering methods and cryptocurrency transfers to support the regime.