News Analysis · October 28, 2026

Treasury sanctions 10 over North Korean IT worker schemes

Permanent article number: 102826038   Find another article by number

A focused account of the newly announced U.S. sanctions, the alleged scheme’s methods and the financial networks Treasury says it is targeting. Confidence 3/5

Original article being examined

Published by: Just the News

Treasury Department sanctions North Korean IT worker schemes for facilitating fraud on US businesses — Read the exact original

Original reporting and source documents

Open the reporting and original documents used for this article. These include evidence sources; not every link is necessarily the original claim being examined.

Evidence and accountability

Archive transparency: this article has not yet completed the site's newer independent fact-audit process. Its source links are provided below. Do not treat allegations, commentary, or a rating as a legal finding.

Questions sent by Radical Reading Room

These requests have a recorded outbound message ID and send time. A request for comment does not establish that its recipient read the message.

U.S. Treasury Department — Public professional press contact
Question: How much money has been recovered from the proceeds of the North Korean IT worker schemes since the sanctions were imposed?
Contacted: October 29, 2026 at 1:33 AM (server time).
Status: Response pending; no substantive response recorded.

No verified accountability finding This archive item is sourced reporting, not a finding that a claim is false or misleading.
Treasury sanctions 10 over North Korean IT worker schemes

The U.S. Treasury Department’s Office of Foreign Assets Control announced Wednesday, Oct. 28, sanctions on 10 North Korean individuals for their roles in overseas information-technology worker schemes that defraud U.S. businesses. Treasury said the action targets facilitators and financial networks that help sustain the schemes and move proceeds for North Korea.

The department said operatives use fraudulent documents, stolen identities and fabricated personas to conceal their identities and secure jobs at legitimate companies, including U.S. businesses. Treasury said North Korea appropriates most of the workers’ wages, generating revenue for its weapons of mass destruction and ballistic missile programs.

Treasury said the networks use sophisticated cryptocurrency transactions, money-laundering techniques and emerging technologies to generate and transfer millions of dollars for the North Korean government. It described the sanctions as targeting key facilitators and financial channels involved in sustaining the schemes and moving illicit proceeds.

Treasury Secretary Scott Bessent said the overseas operatives target American companies, weaponize sensitive data and extort businesses for substantial payments. He said the department would continue using available tools to protect U.S. businesses and hold those responsible accountable. The announcements describe the sanctions but do not report that the schemes have ended or that the transferred proceeds have been recovered.

Reporting sources

Sources used for this report

These are the source links stored with this report when it was published. Open them directly to inspect the underlying reporting or primary document.

Comments

Read the discussion freely. Posting and voting require a verified member account. Every comment and reply is screened by AI before publication. Clear spam and abuse are blocked; only strongly cleared comments publish automatically, while uncertain drafts wait for moderator review. Civil factual disagreement alone is not grounds for rejection.

Log in to comment or join free to take part.


No comments yet. Be the first reasonably on-topic person here.