DOJ Disrupts North Korean Fake-Call Crypto Theft Scheme

The U.S. Department of Justice has disrupted FaceStealer, a North Korean state-linked scheme that used recorded calls and deepfakes to impersonate trusted contacts and stole more than $400 million over 18 months. The operation targeted crypto users by convincing victims to approve transactions or hand over credentials after seeing or hearing a familiar face. The takedown matters because it strikes at social-engineering fraud, one of the largest drains on retail crypto holders, rather than at smart-contract exploits. Watch for whether recovered funds are returned to victims and whether other state-backed clusters adopt similar impersonation tactics.