The United States Treasury Department has taken decisive action against a complex money laundering network tied to North Korea, placing sanctions on six individuals and two companies. This network, responsible for generating an estimated $800 million in just one year, is believed to fund North Korea’s weapon programs through an elaborate global scheme involving fraudulent identities and sophisticated operations.
How Did the Network Operate?
Unlike known incidents of cyber theft, the network leveraged the skills of thousands of North Korean IT professionals, who posed as legitimate remote contractors for companies worldwide. By using fake identities and official documents, they successfully infiltrated major sectors, even penetrating the US tech industry, thereby securing high-paying positions.
What Were the Strategic Roles?
The illicit funds were swiftly converted to cryptocurrency to bypass international sanctions and rerouted to North Korea. Investigators also found that some workers covertly implanted harmful software into companies’ systems to steal sensitive information or create security gaps for future threats. Key to this investigation, the Treasury froze 21 digital wallets operating on Ethereum, Tron, and Bitcoin networks.
Sanctioned parties include entities from Vietnam, Laos, Spain, and North Korea. The Amnokgang Technology Development Company was instrumental in dispatching North Korean IT workers abroad, while Vietnam’s Quangvietdnbg International Services Co. played a fundamental role in laundering approximately $2.5 million in cryptocurrency under Nguyen Quang Viet’s leadership.
Yun Song Guk organized freelance workers in Laos, Do Phi Khanh and Hoang Van Nguyen managed banking operations, and in Spain, York Louis Celestino Herrera handled fake contracts, with Hoang Minh Quang controlling crucial financial transactions.
Cryptocurrency was pivotal in funneling money back to North Korea, with the Tron network’s USDT transactions proving especially salient. However, officials noted the use of advanced wallet structures to obscure transactions, making detection and prevention challenging.
- Sanctions target the broader network, not just digital wallets.
- The crackdown aims to disrupt the financial and operational backbones of the network.
- Combating these systems involves dismantling recruitment and finance networks as well.
- Similar strategies are expected to inflate the costs and risks of reconstruction.
Yet, questions about the long-term effectiveness of these measures persist, as previous sanctions have sometimes fallen short of their goals. The Treasury remains committed to impeding North Korea’s misuse of digital assets.



