OFAC Sanctions North Korean IT Worker Network and Russian Crypto Launderers, Lists ETH and Tron Wallets

31 Oct 2026

31 Oct 2026, 15:07 UTC+01:00

Regulation TradeReviewed News Desk

OFAC sanctions on North Korea’s IT worker network now reach the crypto rails that move the money. On October 28 the US Treasury’s Office of Foreign Assets Control designated 10 individuals and one entity for their roles in government-run IT worker schemes that, according to the Treasury press release, defraud US businesses and fund North Korea’s weapons of mass destruction and ballistic missile programs.

Who was sanctioned

• Vitold Obertas, a Russian intermediary, has conducted nearly $2 million in cryptocurrency conversions and at least $1.25 million in other currency transactions for North Korean officials since January 2025, Treasury says.
• Ilya Boykov, also Russian, exchanged and converted the equivalent of about $3.5 million in crypto since 2024 for Alis, a Vladivostok company OFAC describes as part of a North Korean IT worker structure.
• Kim Ki Hyok leads Alis’s Russia-based delegation and has transferred nearly $500,000 in crypto for it since 2024, according to TRM Labs.
• The First Financial and Technical Development Center, a North Korea-controlled entity in Vladivostok, was also designated. Journal du Coin reports that six North Korean developers there generated more than $750,000 since 2025.

Why the wallet list matters

The SDN list entries include several Ethereum and Tron addresses linked to Boykov, Obertas and Kim Ki Hyok. US persons are barred from dealing with them, and any property of the designated people under US jurisdiction is blocked. In practice, compliance teams at exchanges, stablecoin issuers and analytics firms add these addresses to screening tools, which can freeze funds that touch them.

The action extends an earlier March 12, 2026 designation of a separate IT worker network. It also lands in a week dominated by the $6.3 billion Binance hack, which investigators have linked to North Korean groups, as covered in our report on the Binance hack and TraderTraitor and our look at North Korea’s share of 2026 crypto hack losses.

What it means for traders

• Tron is in focus. Several listed addresses are on Tron, the main network for USDT transfers, so stablecoin freezes on those wallets are likely.
• Counterparty checks matter. If you trade OTC or peer to peer, a payment from a sanctioned address can get your own account frozen.
• Use regulated venues. Large exchanges screen deposits against OFAC lists. Compare security and compliance in our exchange comparison, where BingX ranks first and OKX second, or start with our guide on where to buy your first Bitcoin.

This article is for information only and is not financial advice.

Follow TradeReviewed on X and our Telegram channel: you hear crypto and trading news here first.

Related reviews

• Bingx review
• Okx review

Sources

• US Treasury: Treasury Sanctions Facilitators of DPRK IT Worker Fraud Targeting U.S. Businesses
• OFAC: North Korea Designations (Oct 28, 2026)
• TRM Labs: OFAC Designates Facilitators of North Korean IT Worker Schemes
• Journal du Coin: L'OFAC sanctionne 11 relais du réseau d'informaticiens nord-coréens

News is for information only and is not financial advice. More crypto news