Staff Reports
The Treasury Department just put a bright, illegal spotlight on a shady international hustle. On Oct. 28, 2026, the Office of Foreign Assets Control (OFAC) slapped sanctions on 10 individuals and a DPRK‑controlled entity for running information‑technology worker schemes that cheat U.S. businesses and feed North Korea’s weapons programs. This isn’t a minor cleanup — it’s a direct hit on a clever money machine that used fake résumés, stolen IDs and crypto tricks to move cash into the hands of hostile actors.
Treasury hits a key North Korean network
OFAC added 10 people and one entity, the First Financial and Technical Development Center (FFTDC), to the Specially Designated Nationals list. Secretary of the Treasury Scott Bessent made it plain: these IT operatives and their facilitators “weaponize sensitive data and extort businesses for substantial payments.” The designation blocks property and forbids transactions by U.S. persons with anyone on the list. In short: do business with these people and you risk sanctions and legal trouble.
How the scam worked — and why it mattered
The North Korean operation used stolen identities, bogus resumes and proxy laptop farms to place workers inside real companies or to manage remote access. They then exfiltrated data, extorted victims and converted funds through multi‑chain cryptocurrency maneuvers and laundering techniques. OFAC’s action builds on earlier enforcement that said DPRK IT schemes generated nearly $800 million in 2024. This is not armchair hacking — it’s organized, state‑directed revenue generation for weapons and missile programs.
What U.S. businesses must do now
Companies hiring offshore IT help can’t treat identity checks like an afterthought. The government has repeatedly warned about red flags: geolocation mismatches, shell companies, odd payment routing and remote administration tricks. Put basic controls in place — KYC, escrowed payments, strict vetting and limited admin access — and watch payment paths for crypto routing. OFAC and the FBI have made it clear: ignorance is not a defense if you transact with designated actors.
Bottom line: lean in on enforcement, but also clean your own backyard
Credit the administration and Treasury for following the money and naming names. But don’t pretend the sanctions alone fix the problem. U.S. firms must harden hiring practices and boardrooms must ask tougher questions about supply chains and vendors. If American businesses keep outsourcing trust along with code, they will keep outsourcing vulnerability. The government can point out the bad actors. It’s on business leaders to stop letting those actors in through the back door.
