DPRK IT-worker fraud: identities and crypto salary flows
Chainalysis reports that OFAC sanctioned ten people and one entity on October 28 over DPRK IT-worker operations. The network uses false identities to obtain jobs and intermediaries to convert crypto earnings.
Its onchain analysis describes salary-like stablecoin receipts passing through conversions and consolidation toward cash-out services.
Delivering working code does not establish identity, device control or the recipient of payment. These cases expose gaps between hiring, access and payment records; investigation must follow the workflow, not just a wallet.