Skip to content
← Back to newsDOJ Seeks $7.7 Million Crypto Forfeiture from North Korean IT Imposters
Crime

DOJ Seeks $7.7 Million Crypto Forfeiture from North Korean IT Imposters

By DarshitaNewcomer0 rep· 6/8/2025

U.S. authorities are moving to seize $7.7 million in cryptocurrency linked to North Korean IT workers who allegedly used stolen U.S. identities to secure remote jobs. This forfeiture action is part of a broader effort by the Department of Justice (DOJ) to dismantle North Korea's sophisticated sanctions-evasion network, which funnels illicit funds to support its weapons development programs.

 

DOJ Targets North Korean Crypto Scheme

The Department of Justice has filed a civil forfeiture complaint in the District of Columbia, seeking to confiscate $7.74 million in cryptocurrency. These funds were allegedly earned by North Korean nationals posing as remote IT contractors for companies in the United States and other countries. The scheme involved using fake or fraudulently obtained U.S. identities to gain employment, primarily in blockchain development firms.

  • The workers operated from various countries, including China, Russia, and Laos.

  • They used VPNs and U.S.-based "laptop farms" to conceal their true locations.

  • Payments were often received in stablecoins like USDC and USDT.

 

Sophisticated Laundering Techniques Uncovered

The investigation, led by the FBI, revealed that the North Korean operatives employed complex money laundering techniques to obscure the origins of their illicit gains. These methods included:

  • Using fictitious identities to set up exchange accounts.

  • "Chain hopping" between different blockchains.

  • Performing token swaps.

  • Purchasing NFTs to disguise value transfers.

  • Making multiple small transfers to avoid detection.

Once laundered, the cryptocurrency was rerouted through intermediaries, including Sim Hyon Sop, an alleged Foreign Trade Bank representative, and Kim Sang Man, CEO of Chinyong, a North Korean IT company linked to the military. Sim Hyon Sop was indicted in April 2023 for his role in coordinating money flows between the workers and the North Korean government.

 

A Growing Threat to the Cryptocurrency Ecosystem

Officials emphasize that this forfeiture action underscores the North Korean government's exploitation of the cryptocurrency ecosystem to fund its illicit priorities. Matthew R. Galeotti, Head of the Justice Department's Criminal Division, stated that the department would use every legal tool to safeguard the cryptocurrency ecosystem and deny North Korea its ill-gotten gains.

Security experts, including Andrew Fierman of Chainalysis and Michael Barnhart of DTEX Systems, highlight the increasing sophistication of these North Korean operations. They note that these operatives are leveraging advanced tactics such as:

Barnhart estimates that North Korea could be generating hundreds of millions of dollars annually from fraudulent IT work, with many figures likely underestimated due to the obfuscation techniques used. Google's Threat Intelligence Group also reported in April that North Korean actors have expanded their reach beyond the U.S., infiltrating cryptocurrency projects in the UK, Germany, Portugal, and Serbia.

 

Sources

Discussion (0)

Sign in to join the discussion.

No comments yet. Be the first.

DOJ Seeks $7.7 Million Crypto Forfeiture from North Korean IT Imposters | BlockzHub