In a significant legal move, the Department of Justice has filed a civil forfeiture complaint against assets valued at more than $7.74 million, allegedly part of a sophisticated laundering operation benefiting the North Korean government. The U.S. District Court for the District of Columbia received the filings, which detail how North Korean information technology (IT) workers purportedly secured illegal employment and accumulated vast sums of cryptocurrency, thereby bypassing the sanctions placed by the U.S. on North Korea. The funds, initially restrained following an April 2023 indictment, are believed to have supported the autocratic regime's endeavors, as reported by the U.S. Attorney's Office for the District of Columbia.
At the heart of the case is Sim Hyon Sop (identified as "SIM"), a representative of the North Korean Foreign Trade Bank, who conspired with the IT workers. This operation illustrates the lengths to which the North Korean government will go to sidestep international sanctions and surreptitiously funnel money for their state priorities. The seized millions were successfully frozen and captured as part of the Department's broader strategy to safeguard the cryptocurrency ecosystem from exploitation by the North Korean regime. The efforts were spearheaded by the Criminal Division and the National Security Division of the Justice Department, alongside the Federal Bureau of Investigation (FBI).
Matthew R. Galeotti, head of the Justice Department’s Criminal Division, told the Justice Department’s publication that "This forfeiture action highlights, once again, the North Korean government's exploitation of the cryptocurrency ecosystem to fund its illicit priorities." He went on to assert that “The Department will use every legal tool at its disposal to safeguard the cryptocurrency ecosystem and deny North Korea its ill-gotten gains in violation of U.S. sanctions.” Sue J. Bai, head of the National Security Division, pointed to North Korea's long-standing practice of exploiting global remote IT contracting and cryptocurrency markets to outmaneuver U.S sanctions and fund weapons programs. Today's forfeiture action, she stated, underscores a tactical focus on disrupting these illegal revenue avenues.
FBI Special Agent in Charge DePodesta called the alleged theft and laundering of cryptocurrency a serious national security issue for the FBI. He emphasized that seizing the laundered assets was one of the FBI’s first successful efforts to recover funds from North Korean IT workers before they could be used to threaten U.S. security. Through a meticulously coordinated international law enforcement effort, the FBI remains intent on ensuring that any threats to the United States or sanctions infractions are met with full justice. A detailed complaint alleges that the North Korean IT workers, who operated globally, particularly in China and Russia, managed to generate revenue illicitly via remote work at blockchain development companies. The complaint explains how these workers skirted security checks using fabricated identities, tricking unwitting employers into hiring them and typically compensating them with stablecoins, according to the same press release.
The laundering techniques elaborated upon in the complaint include methods such as using fictitious identities for account setup, disbursing funds in small increments, chain hopping, token swapping, NFT purchases to veil the proceeds, and leveraging U.S.-based accounts to give an appearance of legitimate activity. These tactics played a crucial part in repatriating the laundered proceeds back to North Korean coffers, often through intermediaries such as SIM and Kim Sang Man, also known as "KIM", the CEO of "Chinyong" or "Jinyong IT Cooperation Company," a subsidiary of North Korea’s Ministry of Defense. The entire operation, as laid out by authorities, provides a cautionary tale of the vulnerabilities within cryptocurrency transactions and the global IT labor market, susceptible to exploitation by state-sponsored actors. The FBI, along with the State and Treasury Departments, has continued to issue warnings and guidance on how to reduce this growing threat.
