Treasury Sanctions Facilitators of DPRK IT Worker Fraud Targeting U.S. Businesses | U.S. Department of the Treasury

https://home.treasury.gov/news/press-releases/sb0416
Success
Service Enforcement - Payments Institution 65% Crypto-Assets 58%
Specialism Sanctions 92% Fraud & Security 75%
2026-03-12 18:07:11 · pdonofrio@vixio.com
ID
2961451
GUID
d87a600bb3527641e8672ec7c2ae1e4b

Classification

Service
Enforcement - Payments Institution (65%)

The update involves sanctions enforcement against entities facilitating financial transactions and cryptocurrency conversion, which relates to payments infrastructure oversight, though the primary focus is sanctions/AML rather than payments regulation.

Crypto-Assets (58%)

Cryptocurrency conversion services are mentioned as a key facilitation method, making crypto-asset payment services relevant, though this is secondary to the enforcement action itself.

Specialism
Sanctions (92%)

The update explicitly designates individuals and entities under OFAC sanctions authority, imposing asset freezes and transaction prohibitions, which is core sanctions regulation.

Fraud & Security (75%)

The schemes involve fraud and malware deployment targeting U.S. businesses, and the sanctions action addresses both financial fraud and cybersecurity threats, though the primary regulatory mechanism is sanctions-based.

Pipeline Progress

🔄 Pipeline Journey

Queued 18:06:58
+0s
Metadata 18:06:58
+0s
S3 Content 18:06:58
+0s
Extracted 18:06:58
+7s
LLM Gen 18:07:05
+6s
Stored 18:07:11
TITLE: United States Treasury Sanctions Facilitators of Democratic People's Republic of Korea IT Worker Fraud Schemes BODY: On March 12, 2026, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) designated six individuals and two entities for facilitating Democratic People's Republic of Korea (DPRK) government-orchestrated information technology (IT) worker schemes targeting U.S. businesses. These schemes systematically defraud American companies and generate revenue for the DPRK's weapons of mass destruction (WMD) and ballistic missile programs, with approximately $800 million generated in 2024. The designated individuals and entities operate across the DPRK, Vietnam, Laos, and Spain. Key designations include Amnokgang Technology Development Company, a DPRK IT company managing overseas IT worker delegations; Nguyen Quang Viet, CEO of Quangvietdnbg International Services Company Limited in Vietnam, who converted approximately $2.5 million into cryptocurrency for North Koreans between mid-2023 and mid-2025; and DPRK national Yun Song Guk, who led IT workers operating from Boten, Laos. Additional designees include Do Phi Khanh, Hoang Van Nguyen, Hoang Minh Quang, and York Louis Celestino Herrera, all facilitating financial transactions and currency conversion services. The DPRK schemes employ fraudulent documentation, stolen identities, and fabricated personas to conceal workers' true identities and gain employment with legitimate companies. In certain instances, DPRK-affiliated workers have covertly introduced malware into company networks to extract proprietary and sensitive information. All property and interests in property of the designated persons within the United States or in U.S. persons' possession or control are blocked. U.S. persons are prohibited from engaging in transactions with designated individuals or entities unless authorized by OFAC. Violations may result in civil or criminal penalties. Non-U.S. persons are also prohibited from causing U.S. persons to violate sanctions or engaging in conduct that evades U.S. sanctions. Foreign financial institutions knowingly conducting transactions on behalf of designated persons risk secondary sanctions. REFERENCES: U.S. Department of the Treasury, Office of Foreign Assets Control. "Treasury Sanctions Facilitators of DPRK IT Worker Fraud Targeting U.S. Businesses." March 12, 2026. https://home.treasury.gov/news/press-releases/jy2331
  • Scraped:2026-03-12 18:07:11
  • Created:2026-03-12 18:07:11
  • By:pdonofrio@vixio.com (38)