US Sanctions DPRK Facilitators Behind $800M Scheme

The US Treasury just sanctioned 6 individuals and 2 entities for laundering cryptocurrency tied to North Korean (DPRK) IT worker schemes.

The numbers are staggering. Nearly $800 million was generated in 2024 alone. All of it funneled directly into Pyongyang’s weapons programs. The network was operating from Vietnam, Laos, and Spain. North Korean operatives are using stolen identities to land remote jobs at US companies. Real salaries. Real access. All feeding a weapons budget on the other side of the world. Treasury is cutting the financial arteries that make it possible.

DISCOVER: The Next 1000x Crypto Gem Before It Lists on Binance

The “Remote Worker” Laundering Machine

This is not a hack. It is a massive-scale labor fraud operation.

North Korean IT workers use stolen identities to land remote contracts at Western tech companies. They earn real salaries. Those salaries then need to be laundered past international sanctions before the money reaches Pyongyang.

CASE UPDATE from @NewYorkFBI: Ukrainian National Sentenced in ‘Laptop Farm’ Scheme That Generated Income for North Korean IT Workers https://t.co/l7fShFA7PV pic.twitter.com/tkloBA3R2u

— FBI (@FBI) February 20, 2026

That is where the facilitators come in.

Nguyen Quang Viet, CEO of a Vietnam-based services company, allegedly converted around $2.5 million into crypto for North Korean workers between mid-2023 and mid-2025. Another facilitator, Hoang Van Nguyen, was designated for opening bank accounts and managing crypto transactions for known DPRK procurement agents.

The operation mixed traditional bank transfers with crypto rails to obscure the money trail at every step.

Real jobs. Real paychecks. Real weapons funding.

DISCOVER: The 3 Best Crypto Presales to Watch This Month

How OFAC Sanctions Actually Work And Its Affects

When OFAC adds someone to the SDN list, it is essentially a financial death sentence. Assets frozen. Every US person and entity is prohibited from touching them. And because of secondary sanctions, foreign exchanges that want access to US markets usually comply too. The dragnet goes global fast.

For crypto users, the downstream effects are already visible. Longer withdrawal times. More questions about the source of funds. Stricter KYC at every compliant exchange. This is not bureaucratic overreach. It is the direct result of regulators trying to make sure exchanges are not accidentally processing payroll for a nuclear weapons program.

The U.S. Treasury’s Office of Foreign Asset Control (OFAC) has released a new Russia-related General License Issuance “Authorizing the Delivery and Sale of Crude Oil and Petroleum Products of Russian Federation Origin Loaded on Vessels as of March 12, 2026.” The sale, delivery,… pic.twitter.com/Swow6ibCCO

— OSINTdefender (@sentdefender) March 13, 2026

The scale of the broader problem makes it urgent. Chainalysis tracked over $2.17 billion stolen by DPRK-linked hackers in just the first half of 2025. More than their total for the entire previous year. The $1.5 billion Bybit breach in February was part of the same operation. The $800 million from IT worker fraud feeds the same state coffer.

North Korea has effectively industrialized crypto theft and fraud as a funding mechanism for weapons development.

Exchanges are already scrambling to blacklist the newly designated wallet addresses. The harder problem is tracking funds once they hit mixers or move through OTC desks. Regulators are getting better at mapping these networks. But the facilitators spin up new infrastructure fast.

Expect tighter scrutiny on freelance crypto payments and more aggressive enforcement against non-compliant OTC desks going forward. The pressure is not easing. It is building.

DISCOVER: Best Meme Coin ICOs to Invest in 2026

Follow 99Bitcoins on X (Twitter) For the Latest Market Updates and Subscribe on YouTube For Daily Expert Market Analysis.