North Koreans charged in cryptocurrency theft targeting U.S.-based firms

Four North Korean nationals have been charged in connection with a scheme involving the theft and laundering of nearly $1 million in cryptocurrency. The indictment accuses Kim Kwang Jin, Kang Tae Bok, Jong Pong Ju, and Chang Nam Il of using false identities to pose as remote IT workers, subsequently stealing and laundering virtual currency.

U.S. Attorney Theodore S. Hertzberg stated, "The defendants used fake and stolen personal identities to conceal their North Korean nationality, pose as remote IT workers, and exploit their victims’ trust to steal hundreds of thousands of dollars." He emphasized the threat posed by North Korea to companies employing remote IT workers.

John A. Eisenberg, Assistant Attorney General for the Department’s National Security Division, commented on the broader implications: "These schemes target and steal from U.S. companies and are designed to evade sanctions and fund the North Korean regime’s illicit programs, including its weapons programs."

According to information presented in court, North Korea dispatches skilled IT workers globally to infiltrate American companies. In 2019, the defendants traveled to the United Arab Emirates on North Korean documents before being hired by companies based in Atlanta and Serbia under false identities.

Paul Brown of FBI Atlanta remarked on the tactics used: "North Korean operatives used false identities to infiltrate companies and steal digital assets to fund their regime." The FBI is actively working to expose such threats.

In February 2022, Jong Pong Ju allegedly stole approximately $175,000 worth of virtual currency. The following month, Kim Kwang Jin reportedly stole around $740,000 by altering smart contract source codes at his employer's company.

To launder these funds, they utilized a virtual currency mixer before transferring them into accounts controlled by Kang Tae Bok and Chang Nam Il under aliases with fraudulent Malaysian identification documents.

The defendants were indicted by a federal grand jury in Georgia on June 24, 2025. It is important to note that an indictment contains charges only; the defendants are presumed innocent until proven guilty beyond a reasonable doubt at trial.

This case is part of an investigation led by the Federal Bureau of Investigation under the Department of Justice’s DPRK RevGen: Domestic Enabler Initiative. This initiative focuses on disrupting North Korea's illicit revenue generation efforts through strategic enforcement operations.

Assistant United States Attorneys Samir Kaushal and Alex R. Sistla along with Trial Attorney Jacques Singer-Emery are prosecuting this case.

For more information contact the U.S. Attorney’s Public Affairs Office or visit their website.