US Sanctions North Korean IT Worker Network Operating in Russia
The US Treasury targets a scheme involving Russian intermediaries converting crypto for North Korean IT workers.
The US Treasury targets a scheme involving Russian intermediaries converting crypto for North Korean IT workers. This is an original Token Times brief synthesising 2 outlets (Cryptopolitan, Decrypt), plus live market data, as of Thu, 29 Oct 2026 13:00:01 UTC.
This action disrupts a significant financial pipeline for North Korea, highlighting the use of crypto by sanctioned entities and the US's focus on cutting off these channels.
- US sanctions 10 individuals and one company linked to North Korean IT worker scheme.
- Russian nationals converted over $5M in crypto for North Korean networks.
- Scheme aimed to funnel crypto wages into cash for Pyongyang.
Multiple outlets, including Cryptopolitan and Decrypt, report that the US Treasury's OFAC has sanctioned 10 individuals and one company involved in a scheme to place North Korean IT workers in American companies. The scheme involved Russian intermediaries converting crypto earnings into cash for Pyongyang. While Cryptopolitan emphasizes the broader network and the sanctions' scope, Decrypt specifically highlights that over $5 million in crypto was converted by two Russian nationals, whose wallets were listed by OFAC. No discrepancies in the core facts were found between the outlets.
The US Treasury's Office of Foreign Assets Control (OFAC) has imposed sanctions on a network of individuals and entities involved in a scheme to place North Korean IT workers in American companies. The October 28 action, as reported by Cryptopolitan and Decrypt, targets 10 people and one company, focusing on Russian intermediaries who facilitated the conversion of crypto wages into cash for Pyongyang.
According to OFAC, as detailed by Decrypt, two Russian nationals played a significant role in the operation, converting more than $5 million in cryptocurrency for North Korean networks. Their wallets were listed by OFAC as part of the sanctions.
The sanctions highlight a sophisticated network where North Korean IT workers, placed in various companies, earned crypto that was then funneled through Russian intermediaries. This scheme underscores the evolving methods used by sanctioned entities to circumvent financial restrictions.
The broader context involves ongoing efforts by the US and its allies to cut off financial avenues for North Korea, particularly those involving cryptocurrency. The use of crypto by North Korea has been a growing concern, with previous actions targeting similar networks and crypto exchanges.
In the current market context, with the total crypto market cap at $2.75 trillion and 
Bitcoin down 1.32% in the last 24 hours, this development may contribute to increased regulatory scrutiny of crypto transactions. The Fear & Greed Index stands at 51, indicating a neutral market sentiment.
Figures and sectors in this story, checked live against on-chain aggregators · October 29, 2026.
Token Times reads these figures directly from on-chain aggregators (DeFiLlama, mempool.space) at build time — independent of what any outlet reported. Sector totals aggregate every protocol DeFiLlama tracks in that category. Values are live and will change.
US Sanctions North Korean IT Worker Network Operating in Rus — questions & answers
What was the total amount of crypto converted by the Russian nationals?
Over $5 million in cryptocurrency was converted by two Russian nationals, according to OFAC.
How many individuals and entities were sanctioned by the US Treasury?
The US Treasury sanctioned 10 individuals and one company.
What was the purpose of the sanctions?
The sanctions aimed to disrupt the financial pipeline for North Korean IT workers, particularly the conversion of crypto wages into cash.
Which outlets reported this story?
This is an original Token Times brief that synthesises reporting from Cryptopolitan, Decrypt, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.