On March 12, the landscape of cryptocurrency regulation took a significant turn when Washington intensified its sanctions against North Korea. This move was spearheaded by the U.S. Treasury’s Office of Foreign Assets Control (OFAC), which highlighted the role of crypto in facilitating illicit activities. The action focused on multiple individuals and entities that are reportedly involved in schemes tied to DPRK-operated IT workforce manipulations.
New Sanctions Highlight Crypto’s Role in Illicit Activities
Recent reports indicate that these schemes have defrauded American businesses, resulting in a staggering $800 million revenue stream for North Korea’s military programs. Treasury Secretary Scott Bessent emphasized how overseas operatives utilize fraudulent identities to exploit legitimate corporate channels, thus creating a layered approach for financial manipulation. “We’re targeting American companies through complex deceptions,” he stated. “Our mission is to trace the financial trails.”
This new perspective on the sanctions is critical as it showcases a multifaceted issue, rather than merely a cybercrime angle. Both Treasury and analytics experts depicted a sophisticated blend of fraudulent employment practices, extraction of wages, and enabling financial frameworks—all utilizing cryptocurrency for conversion and transmission of funds. The operations have been dubbed “a complex and escalating threat,” with cryptocurrency being pivotal in funneling money back to North Korea while navigating around international sanctions.
A key focus of these sanctions was Nguyen Quang Viet, the CEO of Quangvietdnbg International Services. According to Treasury data, Nguyen facilitated the conversion of approximately $2.5 million into cryptocurrency for North Korean parties from mid-2023 to mid-2025. This included proceeds linked to the Amnokgang Technology Development Company, which oversees overseas labor delegations from North Korea. The designations extended their net to facilitators not just in North Korea but also across several countries including Vietnam, Laos, and Spain—illustrating the extensive geographical reach of these illicit networks.
Chainalysis revealed that the March 12 sanctions covered 21 specific crypto addresses across various blockchain platforms. These included major cryptocurrencies like Ethereum, Bitcoin, and Tron. Notably, seven addresses were associated with Amnokgang, two Ethereum addresses were linked to Yun Song Guk, and another Bitcoin address was traced back to Hoang Minh Quang. This list emphasizes the breadth of the operation’s involvement across multiple digital assets.
The Treasury’s report also clocked the IT worker conduit as expanding beyond mere tech contracts, indicating deeper financial engagement. For example, Yun had directed North Korean freelancers based in Boten, Laos, since at least 2023 and managed numerous transactions worth over $70,000 with affiliate Hoang Minh Quang related to IT services. Additionally, Treasury noted Do Phi Khanh’s and Hoang Van Nguyen’s roles in facilitating bank access and cryptocurrency transactions, which ultimately contributed to the regime’s funding efforts.
This action is set against a backdrop of escalating North Korean involvement in the crypto domain, with Chainalysis reporting that North Korea illicitly acquired over $2 billion in 2025—its most lucrative year to date. Overall, there was a staggering 694% increase in value received by sanctioned entities last year. In this light, the OFAC’s recent sanctions appear not as an isolated measure but as a comprehensive initiative to dismantle every segment of the DPRK’s crypto apparatus, from stolen assets and money laundering routes to labor exploitation methods that continue to provide new inflows of cash.
Currently, the crypto market cap is estimated at around $2.44 trillion, reflecting its vast and growing influence.
