North Korea's illicit IT worker scheme, a critical component of its foreign currency generation, is facing unprecedented international pressure. A recent report by the **U.S.-led Multilateral Sanctions Monitoring Team (MSMT)**, tasked with enforcing **UN** sanctions against the **Democratic People's Republic of Korea (DPRK)**, details how nations are responding to Pyongyang's global operation. The **MSMT** report expands on an October **UN** study that highlighted thousands of North Korean nationals exploiting stolen or purchased IDs to secure high-paying IT roles in approximately 40 countries, generating up to $800 million annually. ### International Responses Gather Pace Since the October report, several countries have taken significant steps: * **Argentina** has launched an investigation into **Antonia Doroganova**, accused of laundering funds for North Korean IT workers, and has frozen related assets. * **Pakistan** has initiated a legal case against **Syeda Aliya Batool Zaidi**, an alleged forger providing fraudulent identification documents to North Korean IT workers. The **Pakistani Federal Investigation Agency** is also investigating **Syed Sohail Mehdi** and **Syed Kazim** for aiding these activities. * **Vietnam** and **Laos** saw companies and individuals sanctioned by the **U.S.** in March for assisting North Koreans in opening bank accounts and laundering earnings. Laos has confirmed the presence of 19 North Koreans identified in the October report, stating they have since departed or will by 2025. ### China's Shifting Stance and Surveillance **China**, a primary host for North Korean IT workers, is reportedly increasing surveillance and restrictions. The **MSMT** notes “stricter and increased surveillance by Chinese authorities” following incidents, including the alleged arrest of a North Korean IT worker in April 2025 for stealing Chinese military secrets. These heightened security measures have made it difficult for new batches of North Korean IT workers to enter China, forcing a North Korean company to establish a facility in the border city of Sinuiju, allowing workers to access Chinese internet without physical entry. Attempts to disguise IT workers as trading company or garment factory employees to secure residency permits have also been reported. Similar surveillance challenges have been noted in **Laos**, where North Korean IT workers were relocated from Vientiane to Vang Vieng due to official monitoring. Laos has formed a national committee to investigate the scheme and enforce **UN** regulations. ### Global Reach of Exploitation Despite **UN** resolutions mandating the repatriation of all North Korean nationals by 2019 and prohibiting them from earning income in member states, the **MSMT** estimates that at least 17 countries continue to host approximately 100,000 North Koreans. The vast majority are in **China** (20,000 to 70,000) and **Russia** (up to 30,000), working in sectors like manufacturing, farming, and military industrial production. Up to 90% of their earnings are reportedly confiscated by North Korean officials. Beyond these two nations, North Korean laborers have been identified in **Cambodia**, **Mongolia**, **Kyrgyzstan**, **Cameroon**, **Equatorial Guinea**, **Guinea**, **Mozambique**, **Niger**, **Nigeria**, **Senegal**, **Tanzania**, **Uganda**, and **Zimbabwe**. A complex network of local facilitators and North Korean officials manages these workers, handles translations, and ensures funds are repatriated to Pyongyang. **Lara Strangways**, spokesperson for **Global Rights Compliance**, emphasized the severity of the issue, stating, “This is a problem which must be urgently confronted as the scale and breadth of state-sponsored forced labor expands due to the **DPRK**'s intensifying need for foreign currency.” She urged the identification and sanctioning of labor brokers and companies profiting from this exploitation.