North Korean IT Workers Using Fake IDs to Earn Millions From Western Tech Firms

North Korean Defector Reveals Global Scam Using Fake IDs to Fund Kim Regime

A North Korean defector has come forward to the , detailing a massive, covert operation where he and thousands of others were forced to work remote IT jobs under fake identities. The purpose? To secretly earn millions of dollars for the Pyongyang regime and bypass international sanctions.

Hundreds of Fake IDs, Millions in Revenue

The defector, who goes by the pseudonym Jin-su, disclosed that he used “hundreds of fake IDs” to secure remote work with technology firms in the US, Europe, and other parts of the world. This elaborate scheme, he explained, was orchestrated by the North Korean government to generate foreign currency, a vital resource for the heavily sanctioned nation. Jin-su earned at least $5,000 per month and sometimes more, but said that a staggering 85% of his salary was confiscated by the state. “We know it’s like robbery,” he said, “but we just accept it as our fate.”

A Growing Threat Linked to Cybercrime

The defector’s testimony aligns with a United Nations Security Council report from March 2024, which estimated that this network of IT workers generates between $250 million and $600 million for the regime annually. The report also noted that the number of operatives surged during the COVID-19 pandemic as the shift to remote work made it easier to commit identity fraud.

While many of the workers are focused on earning a steady paycheck, US prosecutors and cybersecurity experts have linked some of them to more malicious activities, including ransomware attacks, data breaches, and cryptocurrency thefts. In one case, 14 North Koreans were indicted in a US court last year for earning $88 million through fraud and extortion. Another four were charged just last month for allegedly infiltrating a cryptocurrency firm using false identities.