U.S. offers $5 million for tips on North Korean identity theft scheme
- The U.S. State Department has indicted 14 North Korean nationals suspected of using false identities for IT jobs.
- These workers collectively generated $88 million, which was sent back to the North Korean government.
- The indictment highlights the need for companies to be vigilant against potential fraud from fraudulent remote IT workers.
In a significant crackdown on North Korean evasion of sanctions, the United States has indicted 14 North Korean nationals for participating in a scheme that involved the use of fraudulent identities to secure employment as IT workers for U.S. companies. This conspiracy, which reportedly started at least six years ago, enabled the North Korean government to generate substantial income, amounting to approximately $88 million, by exploiting U.S. remote employment opportunities. The indictment reveals that the indicted individuals employed deceptive tactics by stealing, borrowing, or even renting identities of U.S. citizens to gain employment. These workers were primarily hired as remote employees but would send their wages back to North Korea, thereby supporting the North Korean regime financially. U.S. officials have stated that this practice also involved extortion tactics, where sensitive business information was purloined and later used to threaten U.S. employers unless payments were made. According to Deputy U.S. Attorney General Lisa Monaco, this operation exemplifies how the North Korean government directs its citizens to engage in fraudulent employment practices that enable the regime to sustain its activities. The overall implication is that companies hiring remote IT workers should be aware and on alert for possible infiltration by North Korean nationals attempting similar forms of deception. This investigation emphasizes the global reach of North Korean intelligence operations and outlines potential risks to businesses employing remote labor without thorough verification of identities. The FBI has taken measures to disrupt communication and funding between these North Korean nationals and their accomplices, underscoring the severe implications of such actions in international relations and cybersecurity.