FBI sanctions listing
FRAUDULENT REMOTE IT WORKERS FROM DPRK
FRAUDULENT REMOTE IT WORKERS FROM DPRK is an individual designated on the U.S. Federal Bureau of Investigation — Wanted (FBI) sanctions list under the Cyber's Most Wanted programme, listed on 2025-06-24. Cyber's Most Wanted. This page summarises the public designation — known aliases, identifying particulars, the stated reason for listing and linked parties — alongside an independent, transparent risk indicator.
Reason for listing
Wire Fraud Conspiracy; Wire Fraud; Money Laundering Conspiracy Kim Kwang Jin, Kang Tae Bok, Jong Pong Ju, and Chang Nam Il, are wanted for their alleged involvement with a scheme to steal virtual currency from two companies, valued at over $900,000 at the time of the theft, and to launder the proceeds of those thefts in 2022. Using fraudulent names and identification documents, the men allegedly gained employment at two companies as Remote IT Workers. With these roles, these individuals allegedly abused their access at the companies to steal virtual currency. The individuals worked and travelled together as a team. Federal arrest warrants were issued for the men on June 24, 2025, in the United States District Court, Northern District of Georgia, Atlanta, Georgia, after they were charged with Wire Fraud Conspiracy, Wire Fraud, and Money Laundering Conspiracy. The men speak English and Korean and have ties to the United Arab Emirates and Laos. Kim Kwang Jin is described as an Asian male, Date of Birth: January 24, 1998, with brown hair and brown eyes. He has an alias of “P.S.” Kang Tae Bok is described as an Asian male, Date of Birth: February 22, 1997, with brown hair and brown eyes. He has an alias of “Wong Shao Onn.” Jong Pong Ju is described as an Asian male, Date of Birth: January 25, 1997, with brown hair and brown eyes. He has an alias of “Bryan Cho.” Chang Nam IL is described as an Asian male, date of Birth: October 7, 1999, with brown hair and brown eyes. He has aliases of “Bong Chee Shen” and “Peter Xiao.” The Rewards For Justice Program, United States Department of State, is offering a reward of up to $5 million for information that leads to the disruption of financial mechanisms of persons engaged in certain activities that support North Korea (Democratic People’s Republic of Korea, DPRK), including the exportation of workers from North Korea to generate revenue, money laundering, and specified cyber-activity and actions that support North Korea’s weapons
Statement of reasons as published by US FBI. This is the issuing authority's wording, reproduced for reference.
Designation record
| List / authority | US FBI (FBI) — FBI — Cyber's Most Wanted |
|---|---|
| Entity type | Person |
| Programmes / regime | Cyber's Most Wanted |
| Date listed | 2025-06-24 |
| Source record ID | fbi:c67f1fe3ba634acfbaadde07cc238635 |
| Last updated (our copy) | 2026-06-04 |
Identity & particulars
| Position / role | Cyber's Most Wanted |
|---|
Deep-research dossier
Not yet deep-researched
The instant review above is drawn from the public lists. A deep-research dossier goes much further — an analyst-grade OSINT report: associate & co-investment network screening, structural / ownership opacity, a dated risk trajectory, an 8-factor scoring model, and numbered, source-linked evidence. See the format in the design system.
Clarifications & right of reply
Are you FRAUDULENT REMOTE IT WORKERS FROM DPRK, or an authorised representative?
You — or your counsel or agent — can file a clarification and supporting documents against this record. Filings are reviewed and verified before anything is published; submissions are never posted automatically.
File a clarification or document
Source & provenance
| Issuing authority | U.S. Federal Bureau of Investigation — Wanted |
|---|---|
| Source identifier | fbi:c67f1fe3ba634acfbaadde07cc238635 |
| Aggregated by | Sanctiometer (independent) — verify against the issuing authority's official list before acting. |