US Sanctions Network That Laundered $800 Million in Crypto for North Korea

The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has imposed sanctions on six individuals and two entities involved in a large-scale cryptocurrency laundering scheme benefiting North Korea. According to the agency, the network processed approximately $800 million in 2024, with the funds directed toward financing the DPRK's weapons of mass destruction programs.

IT fraud scheme using forged documents

The investigation revealed that North Korea systematically infiltrated legitimate technology companies worldwide. DPRK operatives used forged documents, stolen personal data, and fabricated profiles to secure positions at Western IT companies, including those in the United States.

The DPRK government appropriated the majority of wages earned by these workers, redirecting hundreds of millions of dollars to support the regime and its missile programs. The scheme had been operating since at least 2023 and spanned dozens of countries.

21 crypto wallets designated

In addition to personal sanctions, OFAC added 21 cryptocurrency addresses across multiple blockchain networks to its sanctions list. This highlights the multi-chain approach employed by DPRK operatives to move and conceal funds. The network utilized a combination of centralized exchanges, decentralized finance services, and cross-chain bridges to complicate transaction tracing.

Vietnamese intermediary converted millions

Among the key targets is Nguyen Quang Viet, CEO of Vietnam-based Quangvietdnbg International Services Company Limited. According to the Treasury Department, he provided currency conversion services for North Korean operatives. Between mid-2023 and mid-2025, Nguyen converted approximately $2.5 million into cryptocurrency for the regime, including illicit earnings from IT workers.

Implications for the crypto industry

This case serves as yet another reminder for crypto exchanges and payment services about the necessity of enhanced customer verification. The use of multi-chain schemes through DeFi protocols and cross-chain bridges complicates tracking but does not make it impossible. Chainalysis, which assisted in the investigation, noted that blockchain analytics is becoming increasingly precise in identifying such networks.

For holders of Bitcoin and other assets, it is essential to use verified platforms with proper KYC procedures to avoid inadvertent interactions with sanctioned addresses. Violating sanctions regimes can result in frozen funds and legal consequences.

Systemic threat from state-sponsored hackers

North Korea remains one of the most significant threats to the cryptocurrency ecosystem. Experts estimate that DPRK-linked groups are responsible for billions of dollars in thefts from exchanges and protocols in recent years. Beyond IT fraud, the regime actively employs hacking attacks, phishing, and exploits to replenish its budget. The latest OFAC sanctions are part of a broader pressure strategy aimed at restricting the DPRK's financial channels in the digital space.