North Korean IT Workers Using Fake IDs to Earn Millions From Western Tech Firms
North Korean Defector Reveals Global Scam Using Fake IDs to Fund Kim Regime
A North Korean defector has come forward to the , detailing a massive, covert operation where he and thousands of others were forced to work remote IT jobs under fake identities. The purpose? To secretly earn millions of dollars for the Pyongyang regime and bypass international sanctions.
Hundreds of Fake IDs, Millions in Revenue
The defector, who goes by the pseudonym Jin-su, disclosed that he used “hundreds of fake IDs” to secure remote work with technology firms in the US, Europe, and other parts of the world. This elaborate scheme, he explained, was orchestrated by the North Korean government to generate foreign currency, a vital resource for the heavily sanctioned nation. Jin-su earned at least $5,000 per month and sometimes more, but said that a staggering 85% of his salary was confiscated by the state. “We know it’s like robbery,” he said, “but we just accept it as our fate.”
A Growing Threat Linked to Cybercrime
The defector’s testimony aligns with a United Nations Security Council report from March 2024, which estimated that this network of IT workers generates between $250 million and $600 million for the regime annually. The report also noted that the number of operatives surged during the COVID-19 pandemic as the shift to remote work made it easier to commit identity fraud.
While many of the workers are focused on earning a steady paycheck, US prosecutors and cybersecurity experts have linked some of them to more malicious activities, including ransomware attacks, data breaches, and cryptocurrency thefts. In one case, 14 North Koreans were indicted in a US court last year for earning $88 million through fraud and extortion. Another four were charged just last month for allegedly infiltrating a cryptocurrency firm using false identities.
Frequently Asked Questions (FAQs):
🔹 What is the North Korean IT worker scam?
It’s a secret operation where North Koreans use fake identities to work remotely for Western tech companies and send their earnings back to the regime.
🔹 How much money does this scheme generate?
According to the UN, the operation brings in $250 million to $600 million annually.
🔹 How do these workers get hired?
They apply for remote roles using fraudulent IDs, fake résumés, and foreign-based profiles, often impersonating citizens of other countries.
🔹 Are they involved in cyberattacks?
While most just work on regular IT projects, some operatives have been linked to more malicious activities, including ransomware attacks, data breaches, and cryptocurrency theft.
