TL;DR:
- The Office of Foreign Assets Control (OFAC) sanctioned 10 individuals and the entity First Financial and Technical Development Center (FFTDC) on October 28, 2026.
- Financial facilitators managed cryptocurrency conversions worth approximately $2 million and independent transfers of $3.5 million for North Korean channels.
- The government action identified employment impersonation schemes that generated over $750,000 funneled into ballistic missile programs.
Ten individuals and one entity linked to the illicit financing of weapons through tech labor schemes and cryptocurrency transfers were sanctioned by the U.S. Department of the Treasury this Wednesday, October 28.
The measure was executed by the Office of Foreign Assets Control (OFAC). The official resolution asserts that those involved coordinated the placement of IT specialists into foreign corporations to generate foreign currency and digital assets for the Pyongyang regime.
The Department of the Treasury’s press office reported that the proceeds were funneled directly into weapons of mass destruction programs and ballistic missile development. Authorities noted that the network resorted to money laundering to bypass existing financial controls.
Those sanctioned include technology project managers, operators who provided remote services from the Russian Federation, and key financial facilitators. Government documentation details that facilitators within Russian territory processed nearly $2 million through crypto-asset conversions. Concurrently, these same channels moved at least $1.25 million via conventional fiat currency transactions.
For his part, one of the identified financial facilitators, named in the filings as Boykov, executed operations equivalent to $3.5 million in virtual assets since 2024, according to OFAC records. The agency’s report emphasizes that the cited amounts represent independent operational transactions and should not be construed as a unified or consolidated volume.
The sanctioned corporate entity was registered as First Financial and Technical Development Center (FFTDC). According to the government ruling, this firm served as the instrumental platform for recruiting and deploying personnel outside North Korean territory. In this specific group, six tech workers received individual sanctions after it was determined that they collectively generated more than $750,000 through covert international hiring schemes.
Labor Fraud and Corporate Infiltration Mechanisms
Reports from U.S. federal agencies indicate that the IT specialists utilized falsified identity documents and fabricated profiles to pass human resources screenings at Western firms.
Once hired, the individuals routed their salaries into cryptocurrency wallets controlled by state supervisors. Findings from the investigation suggest that the unlawful activities were not limited to collecting paychecks. The regulatory agency’s report warned that several operators leveraged their access to corporate networks to deploy malicious software and exfiltrate proprietary commercial and technical intelligence.
Treasury Secretary Scott Bessent stated that federal agencies will continue to utilize economic blocking mechanisms to protect domestic businesses against these operational security breaches. The current enforcement action builds upon previous administrative measures enacted in August, which had targeted digital asset exchanges.
