.png)
Remote Hiring: Sanctions Risk
🔓 North Korean IT worker schemes expose sanctions risks in remote recruitment. Learn why contractor identity checks matter.
What Happened?
On 28 October 2026, the US Treasury sanctioned 10 individuals and one Russia-based entity involved in North Korean IT worker schemes.
According to the US Treasury, these networks use fraudulent identities to place North Korean IT workers in remote jobs at Western companies. The income generated helps fund North Korea's weapons programmes.
The development highlights an important point for businesses: sanctions risks may arise not only through customers, suppliers and shipments, but also through remote employees, freelancers and outsourced technical services.
Who Is Affected?
Businesses that hire remote IT workers, engage freelance developers or outsource technical services should understand how their recruitment and contractor management procedures identify potential risks.
HR teams may focus on qualifications and experience. Procurement may assess the supplier, while finance processes the payments. However, these checks may not provide a complete picture if the identity of the person performing the work or receiving payment has not been adequately verified.
The challenge is knowing who is really behind the service being purchased.
Why Does It Matter?
A seemingly legitimate contractor relationship can create sanctions exposure if the parties involved are subject to applicable restrictions.
The latest OFAC action reinforces the importance of identity verification, contractor due diligence, sanctions screening and payment controls. It also demonstrates why sanctions compliance should involve more than the traditional trade compliance function.
Businesses should review whether their existing procedures provide sufficient visibility over remote workers and the arrangements through which they are recruited, managed and paid.
What Should Businesses Consider?
Identity: Can you verify that the person recruited is the person performing the work?
Contractors: Do you understand who is delivering services through your outsourcing providers?
Screening: Do your procedures address relevant sanctions risks involving remote workers and contractors?
Payments: Can you verify the recipient and investigate unexplained changes to payment arrangements?
These questions provide a starting point, but the appropriate controls depend on the organisation's activities and applicable legal obligations.
🔐 Go further with Customs Manager PRO. Access the full playbook to assess potential gaps, coordinate responsibilities across departments and strengthen your approach to remote-hiring sanctions risks.
Our North Korean IT Worker Playbook provides a practical six-phase framework covering identity verification, contractor due diligence, sanctions screening, financial controls, IT access and incident response.
Information → Understanding → Action.
🎃 Ready to Test Your Customs Compliance Skills?
Think importing is easy? Enter The Haunted Import and put your customs knowledge to the test! 👻 Take on the challenge of importing plastic pumpkin decorations for a Halloween party, make the right customs decisions, and see whether you can avoid declaration nightmares and survive the customs compliance labyrinth.
🕸️ Will you master the import, or will the customs compliance ghost catch you?
Related Topics
#NorthKoreanITWorkers #SanctionsRiskManagement #SanctionsCompliance #ContractorDueDiligence #IdentityVerification #PaymentControls #ExportControls #CustomsManager
Author
Ann Karen | Head of Growth
Updated: October 2026
Disclaimer:
This article is provided for general informational purposes only and does not constitute legal, customs or tax advice. Businesses should seek professional advice based on their individual trading arrangements and compliance obligations.
Comments