← Back to Crime & Security

Two U.S. Nationals Sentenced for North Korean IT Fraud Scheme

Crime & SecurityAI-Generated & Algorithmically Scored·

AI-generated from multiple sources. Verify before acting on this reporting.

WASHINGTON (AP) — Two U.S. nationals were sentenced to prison Wednesday for orchestrating a scheme that allowed North Korean IT workers to use stolen identities to labor for more than 100 American companies, funneling illicit revenue to the Democratic People's Republic of Korea government.

Kejia Wang and Zhenxing Wang, both citizens of the United States, were convicted on charges including conspiracy to commit wire fraud and money laundering. The court found that the pair facilitated a fraudulent employment network designed to bypass international sanctions and generate funds for the North Korean regime.

The operation, which spanned several years, involved the recruitment of North Korean programmers who were provided with falsified documentation and stolen identities. These workers were then placed with U.S. technology firms, where they performed software development and other IT services. The wages earned by the workers were largely siphoned off by the defendants and the North Korean government, leaving the companies unaware they were employing sanctioned nationals.

Oleksandr Didenko, a Ukrainian national, was also sentenced in connection with the case. He was found to have assisted in the logistics of the operation, including the procurement of fraudulent documents and the management of financial transfers. Several other unnamed defendants remain at large or are awaiting trial.

Prosecutors stated that the scheme was a sophisticated effort to circumvent United Nations and U.S. sanctions prohibiting trade with North Korea. By masking the true nationality of the workers, the defendants enabled the regime to earn millions of dollars in hard currency while evading international scrutiny.

The sentencing took place in a federal court in the United States. Judge presiding over the case emphasized the severity of the sanctions violations and the threat posed by state-sponsored cyber operations. The defendants were ordered to serve significant prison terms and were required to forfeit assets linked to the fraudulent scheme.

The case highlights the ongoing challenges faced by U.S. authorities in monitoring digital labor markets and preventing sanctioned entities from accessing the global economy. Federal investigators have warned that similar networks may still be operating, utilizing remote work arrangements to obscure the origins of employees.

Questions remain regarding the full extent of the financial damage caused to the affected U.S. companies and whether other foreign entities were involved in the network. Authorities have not yet disclosed the total amount of money generated by the scheme or the specific identities of all the North Korean workers involved.

The Department of Justice continues to monitor the situation and has urged businesses to verify the identities of remote workers to prevent future exploitation of such vulnerabilities. The case is expected to serve as a precedent for future prosecutions involving sanctions evasion through digital labor.