The U.S. Treasury Department (OFAC) has sanctioned six individuals and two entities linked to the Democratic People’s Republic of Korea (DPRK) for allegedly making nearly $800 million in profits in 2024.
USA vs. DPRK on crypto fraud
Crypto is once again at the center of Washington’s latest sanctions. In an official press release on March 12, the U.S. Treasury Department announced that it has blacklisted a North Korean IT operative network accused of routing approximately $800 million through digital assets to fund weapons programs in 2024. schemes carried out by overseas IT staff who weaponize sensitive data and extort substantial payments from businesses”.
Related reading
How North Korea’s crypto scheme worked
According to OFAC’s statement, these North Korean IT networks relied on front companies in Vietnam, Laos, and Spain to transfer the income of IT employees to cryptocurrency, convert it, and repatriate the funds to Pyongyang. As the statement says:
DPRK-backed IT groups typically rely on fraudulent documents, stolen identities, and fictitious personas to hide their true identities and obtain employment at legitimate companies, including those in the United States and allied countries. The DPRK government reportedly siphons off much of the wages of these overseas IT workers and receives hundreds of millions of dollars to support the regime’s nuclear weapons and ballistic missile programs in defiance of US and United Nations sanctions. In some cases, DPRK-affiliated workers have also secretly injected malware into company networks to extract private and sensitive information.
Among the companies identified by Washington, the Amnokgang Technology Development Company, which manages IT delegations abroad of the DPRK and other illegal acquisitions, and a partner in Vietnam (Quangvietdnbg), whose CEO converted about 2.5 million dollars into crypto for North Korea between mid-2023 and mid-250,220 million dollars. Other facilitators opened bank accounts, enabled crypto transactions, and laundered IT staff earnings on behalf of North Korean procurement figures such as Kim Se-un.
OFAC warns that both US and foreign financial institutions face the risk of secondary sanctions if they are exposed to flows involving newly appointed actors that effectively isolate fiat and crypto on their remaining ramps.
Related reading
What does this mean for the crypto market?
It’s just the latest chapter in a long story of North Korean cyber and IT operations that have repeatedly relied on crypto, mixers and OTC brokers to launder billions in stolen or fraudulently obtained funds that regulators now say directly support its weapons programs.
Even as the Treasury recently acknowledged that mixers and privacy tools can have legitimate uses, new indications show that they are still poised to harshly sanction any intermediaries that channel significant illicit flows of crypto to state actors like the DPRK. While episodes like this don’t usually change the price of Bitcoin on their own, they add to regulatory norms that can reduce risk appetite around privacy coins, peer-to-peer protocols, and lightly regulated offshore venues. For majors like BTC and ETH, stricter enforcement against DPRK-linked networks is often described as “cleaning the rails” that could support institutional adoption over time, even if it poses a headline risk in the near term.
Regulatory risk remains highest around privacy-focused tools, offshore locations, and tokens that depend on non-transparent liquidity pathways. At the same time, each wave of execution associated with the DPRK concentrates more volume towards KYC exchanges and transparent stablecoin and BTC pairs, where long-term liquidity and institutional flows are concentrated.
BTC’s price trends to the upside on the daily chart. Source: BTCUSD on Tradingview
Cover image from Perplexity, BTCUSD chart from Tradingview
