Today, Wed Oct 28, the US Treasury's OFAC sanctioned 10 individuals and one entity for running or financing North Korea's fake IT worker schemes, and put eight crypto addresses on the SDN list.
What happened:
Targets: Russia-based facilitators and North Korean IT workers, plus the First Financial and Technical Development Center (FFTDC), a North Korea-controlled entity in Vladivostok, Russia.
Russian national Ilya Boykov is accused of exchanging and converting about $3.5M in crypto for Alis, a North Korean IT worker company.
Russian intermediary Vitold Obertas: nearly $2M in crypto conversions for North Korean officials since Jan 2025, plus at least $1.25M in other currency.
Two delegation leads moved about $500K and over $100K. Six FFTDC workers generated over $750K since 2025.
The SDN entries list eight distinct addresses: three on Ethereum and five on Tron.
Treasury says the workers use fake identities to get hired by US and allied companies, the regime keeps most of the wages, and some workers used their access to plant malware and steal data.
Why it matters for crypto:
Any US person, exchange or service touching those addresses now has a blocking and reporting duty. Exchanges and stablecoin issuers usually add new SDN addresses to their screening lists fast.
Five of the eight addresses are on Tron, the chain where a lot of USDT moves. Ethereum has the other three.
It builds on a Mar 12 action against a separate IT worker network, and Australia and the EU also added North Korea sanctions this month.
My take: the dollar amounts are small next to North Korea's big exchange hacks. The real point is the paper trail. Once an address is on the SDN list, every compliant venue has to treat funds that pass through it as radioactive. Remote-hiring crypto teams should take the reminder seriously.
Do you check who you hire, or only where your coins sit?
Market check, Binance spot 16:40 UTC: $BTC 80,514 (-0.2% 24h), $ETH 2,332 (-0.8%), $TRX 0.3305 (+0.8%). No visible market reaction to the sanctions. The Fed decision comes later today.
Source: https://tradeassi.com/en/news/d00ea21a-6d25-495e-ae03-9d17e58d07cd
Not financial advice. DYOR.
