UNITED STATES IMPOSES NEW SANCTIONS ON NORTH KOREA, TARGETING 10 INDIVIDUALS AND ONE ORGANISATION

The United States has imposed sanctions on 10 individuals and the First Financial and Technical Development Center over alleged North Korean government-run IT-worker schemes. The U.S. Treasury says the networks use false identities, cryptocurrency and overseas workers to generate money that supports Pyongyang’s weapons programs. Six of the sanctioned North Korean nationals are linked directly to FFTDC, while two Russian nationals were also designated for allegedly facilitating North Korean financial transactions.
The United States has imposed a new round of sanctions on 10 individuals and one organization accused of helping North Korea generate money through overseas information-technology workers, cryptocurrency transactions and financial networks that Washington says ultimately support Pyongyang’s nuclear weapons and ballistic-missile programs.
The U.S. Treasury Department’s Office of Foreign Assets Control announced the measures on Wednesday, October 28, identifying the First Financial and Technical Development Center, known as FFTDC, as the organization at the center of part of the latest action. Treasury described FFTDC as a North Korean-controlled entity operating in Russia and accused it of deploying highly trained North Korean IT workers who have generated millions of dollars for the government in Pyongyang.
Six of the sanctioned North Korean nationals were directly linked to FFTDC. Treasury identified them as Kim Kyong Ju, Ri Thae Chol, So Hyon Jin, Han Yu Song, Kim Sung Gwan and Hyon Se Il. According to the department, the six have collectively generated more than $750,000 for the organization since 2025 while operating from Russia.
The sanctions also target two other North Korean nationals, Kim Ki Hyok and Kim Hyo Dong, who Treasury says were involved in separate Russia-based IT-worker networks connected to previously sanctioned North Korean companies. Two Russian nationals, Vitold Viktorovich Obertas and Ilya Aleksandrovich Boykov, were also designated over accusations that they helped move, exchange or convert money and cryptocurrency for North Korean-linked operations.
Treasury says Obertas acted as a Russian intermediary for illicit North Korean financial transactions and, since January 2025, handled nearly $2 million in cryptocurrency conversions in addition to at least $1.25 million in other currency transactions for North Korean officials. Boykov, according to the department, supported a North Korean-linked company known as Alis and was involved in cryptocurrency transactions worth the equivalent of about $3.5 million beginning in 2024.
The allegations form part of a wider U.S. campaign against North Korea’s use of overseas technology workers, who American authorities say conceal their identities and nationalities to obtain remote employment with legitimate businesses in the United States and other countries. Treasury says workers in these networks use false documentation, stolen identities and fabricated professional personas to secure jobs and then transfer substantial portions of their earnings to North Korean state-controlled organizations.
Washington alleges that these schemes have generated hundreds of millions of dollars for the North Korean government and that the proceeds help finance programs involving weapons of mass destruction and ballistic missiles. North Korea has long rejected U.S. accusations surrounding its nuclear program and sanctions evasion and argues that its weapons development is necessary for national defense.
The latest sanctions are notable because they focus not simply on military officials or weapons manufacturers but on the financial and commercial systems Washington says allow North Korea to obtain revenue despite extensive international restrictions.
Treasury Secretary Scott Bessent said the North Korean government continues to target American businesses through fraudulent overseas IT operations and accused the networks of exploiting corporate access, sensitive information and financial systems. Treasury says some North Korean IT workers have gone beyond earning salaries under false identities by using their access to company systems to deploy malware, steal proprietary information or attempt to extort businesses.
The department also alleges that cryptocurrency has become an increasingly important tool for moving money through these networks. Digital assets can be transferred across borders without using conventional banking systems in the same manner as traditional payments, although blockchain transactions can also be traced by investigators and specialist firms.
According to Treasury, the sanctioned networks have used cryptocurrency conversions, complex transfers and money-laundering techniques to move proceeds generated by overseas workers. The department also said some North Korean operations have used emerging technologies, including artificial-intelligence tools, as part of their revenue-generating activities.
FFTDC was specifically designated under a U.S. executive order covering the export of North Korean workers for revenue generation. Treasury says the organization has deployed North Korean IT specialists to Russia and used sophisticated financial methods to transfer money to entities linked to Pyongyang.
The six North Korean nationals connected to FFTDC were designated for allegedly providing material, financial or technological support to the organization.
Separate portions of the sanctions package focus on networks connected to Chinyong Information Technology Cooperation Company, which the United States designated in 2023, and Alis, a Russia-based company sanctioned in 2024 over its relationship with Chinyong.
Treasury says Kim Ki Hyok leads a Russia-based delegation of North Korean technology workers operating under Alis and has transferred cryptocurrency valued at nearly $500,000 since 2024. Kim Hyo Dong is accused of leading another Russia-based delegation connected to Chinyong and facilitating more than $100,000 in financial transfers while helping the group evade sanctions.
The inclusion of two Russian nationals highlights the international dimension of the financial networks Washington is attempting to disrupt. U.S. authorities have repeatedly accused North Korea of placing workers and intermediaries in Russia, China and other countries to generate income and gain access to foreign financial systems.
The measures announced Wednesday generally freeze any property or interests in property belonging to the sanctioned individuals or organization that are in the United States or under the control of U.S. persons. American individuals and companies are generally prohibited from conducting transactions involving those designated unless specifically authorized.
Companies owned 50% or more, directly or indirectly, by sanctioned persons can also be treated as blocked under U.S. rules. Foreign individuals, financial institutions and businesses can face additional risks if they knowingly participate in prohibited transactions or help sanctioned parties evade restrictions.
The new action expands an already extensive sanctions regime against North Korea. Pyongyang has been subject to United Nations and unilateral U.S. restrictions for years because of its nuclear tests, missile launches and weapons-development programs.
International sanctions have sought to restrict North Korea’s access to foreign currency, banking services, luxury goods, weapons-related materials and technology. Enforcement has become increasingly difficult as North Korean networks have shifted toward cyber operations, cryptocurrency theft, overseas workers, front companies and other methods that can operate outside conventional trade channels.
The United States and its partners have repeatedly warned companies to strengthen checks on remote workers because North Korean nationals can present themselves as developers or other technology professionals from different countries. In some cases, American authorities have alleged that intermediaries outside North Korea helped the workers create convincing identities, receive company equipment and access corporate networks.
The October 28 action follows an earlier Treasury designation in March targeting a separate North Korean IT-worker network. Treasury said Australia and the European Union have also taken measures this month against individuals and entities accused of supporting North Korean revenue generation or military activities.
The sanctions arrive at a complicated moment in Washington’s broader policy toward Pyongyang. President Donald Trump has continued to express interest in renewed talks with North Korean leader Kim Jong Un, reviving attention on the personal diplomacy that characterized Trump’s first presidency.
Trump became the first sitting U.S. president to meet a North Korean leader when he held a series of high-profile meetings with Kim in 2018 and 2019. Their first summit in Singapore produced broad commitments toward improving relations and denuclearization, but subsequent negotiations failed to produce an agreement on dismantling North Korea’s nuclear arsenal or significantly easing sanctions.
A second summit in Hanoi in February 2019 ended without a deal after disagreements over the extent of sanctions relief Pyongyang sought and the nuclear facilities it was prepared to dismantle. Trump and Kim later met briefly at the Korean Demilitarized Zone, but working-level negotiations subsequently stalled.
The diplomatic environment has changed considerably since those meetings. North Korea has expanded and diversified its missile capabilities and now describes its nuclear status as irreversible. Pyongyang has continued testing ballistic missiles, including systems it says are capable of carrying nuclear weapons.
Earlier in October, Kim supervised a test involving an intermediate-range hypersonic missile, according to North Korean state media. The country has also displayed the Hwasong-20 intercontinental ballistic missile, a system North Korean media presents as part of its expanding strategic deterrent.
North Korea has conducted more than 10 missile tests during 2026, with several launches occurring in recent weeks as tensions on the Korean Peninsula have risen.
South Korea and the United States have condemned the tests and maintain that North Korea’s ballistic-missile development violates United Nations Security Council resolutions. Pyongyang argues that its weapons programs are a defensive response to military pressure and joint exercises conducted by Washington and Seoul.
Trump has repeatedly suggested that he remains open to meeting Kim again, but there has been little public evidence of progress toward a renewed summit. U.S. and South Korean officials told Reuters last week that prospects for a meeting this year had diminished, with North Korea showing little response to American outreach.
A possible encounter had been discussed in connection with Trump’s planned participation in the Asia-Pacific Economic Cooperation summit in China in November. Trump has since played down expectations of a meeting, while U.S. officials have said no summit is currently scheduled.
North Korean officials have indicated that any future negotiations would take place under very different circumstances from those of 2018 and 2019. Pyongyang has insisted that Washington abandon what it describes as hostile policy and has shown little willingness to enter talks centered on giving up its nuclear arsenal.
Trump, meanwhile, has repeatedly referred to North Korea as a nuclear power, although his administration continues to officially call for denuclearization and has not formally recognized Pyongyang as a legitimate nuclear-weapons state.
The sanctions announced Wednesday illustrate the tension between the administration’s willingness to explore diplomacy and its continued use of economic pressure against North Korea. Washington is signaling that potential negotiations do not mean enforcement actions against alleged sanctions evasion or illicit revenue networks will stop.
Treasury says the objective of sanctions is to change behavior rather than simply punish designated individuals and entities. In practice, however, the effectiveness of sanctions on North Korea has remained a matter of international debate, particularly as Pyongyang has expanded economic and military cooperation with Russia and strengthened ties with China.
Relations between North Korea and Russia have deepened considerably in recent years. Western governments and South Korea have accused Pyongyang of supplying Russia with weapons and military support related to the war in Ukraine, while Moscow and Pyongyang have expanded political, economic and defense cooperation.
The presence of the newly sanctioned FFTDC and several North Korean technology workers in Russia adds another dimension to those ties. Treasury’s allegations suggest that Russia has become an important operating environment for some North Korean revenue-generating networks, although Wednesday’s announcement focuses specifically on the sanctioned individuals and does not establish responsibility by the Russian government for all of their alleged activities.
The two Russian nationals targeted by Washington are accused of directly helping North Korean-linked financial operations. Neither their designation nor Treasury’s allegations automatically constitute a criminal conviction, and the U.S. announcement did not indicate that the individuals had admitted wrongdoing.
North Korea had not immediately issued a detailed public response to the latest U.S. sanctions announcement. Pyongyang has historically condemned sanctions as hostile and has accused Washington of attempting to weaken the country economically while demanding unilateral nuclear concessions.
The immediate practical effect of the new measures will be to isolate the designated individuals and FFTDC from transactions involving U.S. persons or the American financial system and to increase the compliance risks for foreign companies and financial institutions dealing with them.
The broader significance lies in Washington’s continued effort to target the less visible financial infrastructure behind North Korea’s weapons programs. Rather than concentrating only on missile producers or senior officials, the United States is increasingly pursuing technology workers, cryptocurrency facilitators, front companies and third-country intermediaries accused of generating and moving money on Pyongyang’s behalf.
That strategy is likely to continue even if diplomatic contacts between Washington and Pyongyang resume. The Trump administration has indicated that it remains open to direct engagement with Kim, but the latest Treasury action demonstrates that sanctions enforcement and pressure on North Korean revenue networks remain active parts of U.S. policy.
Attention will now turn to whether North Korea responds to the sanctions, whether additional governments take coordinated action against the same networks and whether any progress emerges toward renewed U.S.–North Korean talks. For now, Washington is pursuing both tracks simultaneously: keeping the possibility of diplomacy open while tightening restrictions on financial networks it says help sustain North Korea’s nuclear and missile programs.


