On-shore VASP in North Korea

Exchanges, Custody Providers, Payment Processors: There are no publicly known or established licensing regimes or requirements for these types of entities to operate legally and openly within North Korea for a domestic market. Any virtual asset activity occurring within the DPRK is either:

Directly managed by state-affiliated entities (e.g., intelligence agencies, state-owned banks, research institutions).

Carried out by state-sponsored hacking groups (like the Lazarus Group).

Highly controlled and isolated, serving specific state objectives rather than a private market.

Registration vs. Licensing Regime: The distinction between registration and licensing regimes, as understood in conventional financial regulation, does not apply to virtual asset service providers (VASPs) within North Korea. There is no public body for registration or licensing of private crypto businesses.

Capital Requirements: Any "capital" involved in North Korea's virtual asset activities is state-provided or stolen. It's not about private companies meeting a capital threshold but the state allocating resources (human and financial) to its cyber operations and sanctions evasion efforts.

AML/KYC (Anti-Money Laundering/Know Your Customer): North Korea actively works to circumvent AML/KYC procedures globally. Its primary goal is to hide the origin and destination of funds, making it impossible to identify the ultimate beneficial owner. They exploit weaknesses in VASP AML/KYC processes internationally. Within North Korea, there are no requirements for domestic actors to adhere to AML/KYC in the conventional sense, as their operations are designed to bypass such measures.

Local Presence: For state-sponsored activities, the "local presence" is the DPRK government itself and its various affiliated entities operating both domestically and through proxies internationally. There is no requirement for a foreign VASP to establish a licensed local presence in North Korea for private operations.

United Nations Security Council (UNSC) Panel of Experts Reports on the DPRK: These annual reports frequently detail North Korea's use of cyber means, including virtual asset theft and exploitation, for sanctions evasion.

Financial Action Task Force (FATF) Statements and Reports: The FATF has repeatedly flagged North Korea as a high-risk jurisdiction for money laundering and terrorist financing, highlighting its severe deficiencies in AML/CFT.

FATF Blacklisting: As mentioned, it remains on the FATF's "Call for Action" list, signaling to all countries to apply enhanced due diligence and counter-measures to transactions involving North Korea.

UN Sanctions: North Korea is subject to extensive sanctions imposed by the United Nations Security Council (UNSC) due to its nuclear and ballistic missile programs. These sanctions severely restrict its access to the international financial system.

National Sanctions: Countries like the United States (through OFAC), the European Union, and others implement their own robust sanctions regimes against North Korea, targeting individuals, entities, and financial institutions involved in supporting the DPRK regime's illicit activities.

Financial Exclusion: Due to these sanctions and the high-risk designation, North Korea is largely cut off from the legitimate global financial system. Any entities attempting to transact with North Korea, especially concerning virtual assets, face significant risks of violating sanctions and being subject to severe penalties themselves in other jurisdictions.

State-Controlled and Illicit Activity: North Korea operates as a highly isolated, centrally controlled state where the government itself is the primary, if not sole, actor in the cryptocurrency space. Its documented activities in digital assets are almost exclusively related to illicit financing, cybercrime (e.g., ransomware, hacking exchanges), and sanction evasion, often conducted by state-sponsored hacking groups like the Lazarus Group.

No Public Market for Private Services: There is no known legitimate or public market for private cryptocurrency custodial services, exchanges, or investment funds within North Korea. The concept of "client assets" or "private custodians" as distinct from the state's own operations is fundamentally alien to its economic and political structure.

Lack of Transparency: North Korea is one of the most opaque countries in the world. Its laws, especially those concerning financial activities and technology, are rarely, if ever, made public or accessible to the international community. Any internal directives or operational guidelines for state-controlled entities dealing with cryptocurrency would be highly classified.

Custodial License Requirements: There are no publicly known licensing requirements for private entities because such private entities operating legitimate crypto custody services likely do not exist or are not permitted. Any crypto activities are either directly run by the state or under its strict, clandestine control.

Regulator Name: U.S. Department of the Treasury (Office of Foreign Assets Control - OFAC)

Entity Targeted: Cryptocurrency Mixers (e.g., Sinbad.io). Violation Type: Facilitating money laundering for sanctioned entities, including North Korea's Lazarus Group, for proceeds from major cryptocurrency heists. Penalty Amount: Assets frozen, U.S. persons prohibited from transacting with the entity, effective shutdown of the service. (No specific fine amount against the mixer, but the economic impact is a cessation of operations).

Entity Targeted: Individuals and associated cryptocurrency addresses linked to North Korean state-sponsored hacking groups (e.g., Lazarus Group/APT38). Violation Type: Conspiracy to commit money laundering, international money laundering, conspiracy to commit computer fraud, theft of cryptocurrency. Penalty Amount: Indictment of individuals, seizure of tens of millions of dollars in stolen cryptocurrency.

Outcome: Shut down of the Sinbad mixer, seizure of its infrastructure, and disruption of a critical money laundering avenue for North Korean hackers. This followed similar actions against Tornado Cash in August 2022, which was also used by the Lazarus Group.

Outcome: Recovery of a significant portion of stolen funds, disruption of North Korea's ability to cash out illicit gains, and public identification of wallet addresses and laundering techniques used by DPRK actors. The indictments serve as a deterrent and basis for future arrests if individuals leave North Korea.