The United States Treasury Department has imposed sanctions on two individuals and two companies accused of laundering stolen cryptocurrency to bankroll North Korea’s weapons development efforts. The move, announced on August 27, underscores Washington’s escalating efforts to dismantle Pyongyang’s shadowy cyber-financing networks.
Treasury Targets Key Players in Fraud Network
According to the Office of Foreign Assets Control (OFAC), Russian national Vitaliy Sergeyevich Andreyev acted as a money launderer for North Korean operatives. Since December 2023, he allegedly helped move more than $600,000 in stolen cryptocurrency into U.S. dollars, channelling the funds to Chinyong Information Technology Cooperation Company, a North Korean entity already sanctioned for its ties to the Ministry of Defense.
Working alongside him was Kim Ung Sun, a North Korean trade official stationed in Russia. U.S. officials say Kim served as a diplomatic facilitator, coordinating with Andreyev to conceal the movement of stolen assets.
Chinese Shell Company Embedded North Korean IT Workers
The sanctions also hit Shenyang Geumpungri Network Technology Co., Ltd, a Chinese firm that allegedly operated as a front for Chinyong. The company reportedly generated over $1 million in profit by embedding North Korean IT operatives into foreign crypto and tech firms using false identities and forged documents.
Treasury officials warned that such front companies are central to Pyongyang’s ability to infiltrate legitimate businesses and siphon off resources for weapons development.
Another sanctioned entity, Korea Sinjin Trading Corporation, was identified as a conduit between the scam network and the North Korean Ministry of People’s Armed Forces General Political Bureau. Authorities said Sinjin not only coordinated payments but also benefited directly from the illicit earnings.
The latest sanctions follow similar actions last month, when Treasury blacklisted Song Kum Hyok, a North Korean national tied to the Reconnaissance General Bureau and its hacking unit Andariel, for helping operatives apply for remote jobs using stolen American identities.
Also Read: Crypto Kingpin “Hu Shi” Arrested in Japan Over Alleged Global Fraud Network
Crypto tracking and blockchain have become central to enforcement
The growing sanctions campaign also shows how blockchain analytics has become part of international financial enforcement.
Although North Korea uses mixers, bridges, OTC brokers, front companies and other intermediaries to obscure stolen funds, blockchain transactions remain permanently recorded. Investigators and analytics companies can therefore trace funds across addresses and identify links between stolen assets, laundering services and sanctioned entities.
Research published in 2026 manually verified illicit Bitcoin addresses connected to underground cybercrime activity, while another proposed tools for tracking complex laundering flows across multiple blockchains.
As North Korea’s crypto theft reached record levels in 2025 and remained a major concern in 2026, disrupting those conversion and laundering networks has become a central part of efforts to prevent digital assets from financing the country’s weapons programs.
Enjoyed this? Bookmark DeFi Planet, explore related topics, and follow us on Twitter, LinkedIn, Facebook, Instagram, Threads, and CoinMarketCap Community for seamless access to high-quality industry insights
Take control of your crypto portfolio with DEFI PLANET PRO, DeFi Planet’s suite of analytics tools.
