U.S. Treasury Sanctions Individuals Tied to North Korean IT Fraud

Overview of Sanctions

The U.S. Treasury Department has imposed sanctions on 10 individuals and one entity linked to North Korean IT worker schemes that defraud American businesses and finance the regime's weapons programs. This action underscores ongoing concerns about North Korea's exploitation of global financial systems to support its military ambitions.

Details of the Sanctioned Individuals

Among those sanctioned are two Russian nationals, Ilya Boykov and Vitold Obertas, who have facilitated significant cryptocurrency transactions for North Korean networks. Boykov is reported to have converted approximately $3.5 million in crypto since 2024 for a North Korean IT firm, while Obertas has handled nearly $2 million in crypto and over $1.25 million in other currencies since early 2025.

Mechanics of the Fraud

North Korean operatives utilize fake identities and documents to place IT workers in legitimate companies, siphoning off their earnings to fund weapons programs. The Treasury noted that these operations involve sophisticated cryptocurrency transactions and advanced technology, including artificial intelligence, to launder funds effectively.

Impact of the Sanctions

Treasury Secretary Scott Bessent highlighted the threat posed by North Korean attempts to exploit American businesses through fraudulent IT schemes. The sanctions also target the First Financial and Technical Development Center, a North Korean entity based in Russia that trains IT professionals to execute these operations.

Broader Context

This latest round of sanctions follows earlier measures taken against different North Korean IT networks and aligns with similar actions by Australia and the European Union. Reports indicate that North Korean IT workers have increasingly infiltrated cryptocurrency projects across various countries, employing multiple fake identities to engage in their schemes.