US Sanctions Two Russians Over North Korean IT Workers’ Crypto Cash-Outs

The US Treasury's Office of Foreign Assets Control (OFAC) sanctioned two Russian nationals for facilitating the cash-out of crypto stolen by North Korean IT workers, a scheme the UN estimates generates $250 million to $600 million annually for Pyongyang. The action targets the final stage of the laundering pipeline, in which illicit proceeds from fraudulent IT worker schemes are converted from crypto into fiat. The sanctions freeze any US-linked assets and bar US persons from dealing with the two individuals, raising compliance risk for exchanges and OTC desks that touch these flows. The move signals Washington's focus on the cash-out infrastructure—exchanges, brokers, and facilitators—rather than just the initial hacks. Watch for whether additional facilitators, exchanges, or jurisdictions are designated and how the roughly $250 million to $600 million annual flow adapts to tighter off-ramps.