The US Department of the Treasury's Office of Foreign Assets Control (OFAC) sanctioned 10 individuals and one entity on October 28 for participating in North Korean IT worker revenue-generation schemes. Among those designated are two Russian nationals accused of converting millions of dollars in cryptocurrency and fiat currency for North Korean state networks.
Details of the Illicit Transfers
According to OFAC, Russian intermediary Vitold Viktorovich Obertas converted nearly $2 million in digital assets for North Korean officials since January 2025. In addition to cryptocurrency, Obertas allegedly handled at least $1.25 million in traditional currency transactions. Blockchain analytics firm Chainalysis revealed that Obertas' wallet received funds directly from Amnokgang, a North Korean IT worker firm sanctioned by OFAC on March 12. On-chain data indicates that Obertas deposited funds at both sanctioned platforms and unnamed mainstream cryptocurrency exchanges.
A second Russian national, Ilya Boykov, allegedly converted approximately $3.5 million in crypto since 2024 for Alis, a North Korean company. Chainalysis traced Boykov's transactions to Garantex, a Russia-based cryptocurrency exchange under US sanctions since April 2022 whose web domains were seized by US authorities in March 2025.
Key Takeaways
- Sanctions Expansion: OFAC designated 10 individuals and one entity linked to North Korea's remote IT worker network on October 28.
- $5.5 Million Converted: Vitold Viktorovich Obertas processed nearly $2 million in crypto and $1.25 million in fiat, while Ilya Boykov converted $3.5 million in digital assets.
- Exchange Traces: Funds moved through Garantex as well as mainstream exchanges, exposing non-compliant venues to secondary sanctions risk.
Enforcement and Exchange Liabilities
The Treasury reiterated that sanctions violations carry civil or criminal penalties, noting that OFAC enforces civil violations on a strict liability basis. Furthermore, non-US persons are prohibited from causing US entities to violate sanctions, whether knowingly or inadvertently. As global watchdogs intensify pressure on cross-border exchanges, compliance expectations continue to escalate across international regulatory jurisdictions, similar to enforcement shifts seen in recent global regulatory oversight initiatives.
Chainalysis confirmed that transfers involving the newly designated addresses now trigger sanctions alerts for its compliance clients. US persons holding property belonging to Obertas or Boykov are required to block and report those assets to OFAC.
Why It Matters
This enforcement action highlights how North Korean state networks rely on third-party intermediaries to move funds from illicit IT operations into mainstream cryptocurrency infrastructure. By enforcing strict liability rules, OFAC is signaling that centralized exchanges must enhance real-time wallet screening or face severe secondary sanctions penalties. Going forward, market participants should anticipate stricter compliance integration as analytics firms and regulators aggressively map off-ramps connected to sanctioned jurisdictions.
