The U. S. Treasury Department's Office of Foreign Assets Control (OFAC) announced sanctions against six individuals and two entities allegedly tied to North Korea's overseas IT worker schemes. According to the Treasury, these schemes defrauded U. S. businesses and generated nearly $800 million in 2024 for North Korea's weapons programs. The sanctioned network reportedly used stolen identities, fake personas, and fraudulent documents to place North Korean IT workers in legitimate companies, including those in the United States and allied countries. In some instances, these workers also introduced malware to steal sensitive data.
The Treasury Department framed the sanctions as part of a broader effort to cut off revenue streams linked to Pyongyang's weapons of mass destruction (WMD) financing. A report by the Treasury explicitly named North Korea as a "major threat actor targeting digital assets". The report highlighted that North Korean hacking groups, such as the "Lazarus Group," generate billions of dollars through digital asset theft. Between January 2024 and September 2025, North Korea stole at least $2.8 billion in digital assets.
The individuals and entities sanctioned operated across North Korea, Vietnam, Laos, and Spain. Nguyen Quang Viet, CEO of Vietnam-based Quangvietdnbg International Services Company, is accused of converting approximately $2.5 million into cryptocurrency for North Korean operatives between mid-2023 and mid-2025. The Treasury also flagged 21 cryptocurrency addresses across multiple blockchains used by North Korean operatives to move and conceal funds.
This enforcement action underscores the challenges blockchain companies face in vetting remote workers and preventing illicit use of digital assets. With the rise of remote workforces, companies are facing increased scrutiny regarding identity verification and sanctions compliance. The U. S. continues to tighten regulations and enforcement against illicit crypto activity, demonstrated by the GENIUS Act signed into law in 2025, requiring compliance with U. S. anti-money laundering laws and sanctions.
