Remote VASP serving residents in North Korea

Sanctions Evasion: Bypassing international sanctions to fund the regime's weapons programs and luxury goods for the elite.

Exchanges, Custody Providers, Payment Processors: There are no publicly known or established licensing regimes or requirements for these types of entities to operate legally and openly within North Korea for a domestic market. Any virtual asset activity occurring within the DPRK is either:

Directly managed by state-affiliated entities (e.g., intelligence agencies, state-owned banks, research institutions).

Carried out by state-sponsored hacking groups (like the Lazarus Group).

Highly controlled and isolated, serving specific state objectives rather than a private market.

Registration vs. Licensing Regime: The distinction between registration and licensing regimes, as understood in conventional financial regulation, does not apply to virtual asset service providers (VASPs) within North Korea. There is no public body for registration or licensing of private crypto businesses.

United Nations Security Council (UNSC) Panel of Experts Reports on the DPRK: These annual reports frequently detail North Korea's use of cyber means, including virtual asset theft and exploitation, for sanctions evasion.

Financial Action Task Force (FATF) Statements and Reports: The FATF has repeatedly flagged North Korea as a high-risk jurisdiction for money laundering and terrorist financing, highlighting its severe deficiencies in AML/CFT.

FATF Blacklisting: As mentioned, it remains on the FATF's "Call for Action" list, signaling to all countries to apply enhanced due diligence and counter-measures to transactions involving North Korea.

UN Sanctions: North Korea is subject to extensive sanctions imposed by the United Nations Security Council (UNSC) due to its nuclear and ballistic missile programs. These sanctions severely restrict its access to the international financial system.

National Sanctions: Countries like the United States (through OFAC), the European Union, and others implement their own robust sanctions regimes against North Korea, targeting individuals, entities, and financial institutions involved in supporting the DPRK regime's illicit activities.

Financial Exclusion: Due to these sanctions and the high-risk designation, North Korea is largely cut off from the legitimate global financial system. Any entities attempting to transact with North Korea, especially concerning virtual assets, face significant risks of violating sanctions and being subject to severe penalties themselves in other jurisdictions.

No Public Market for Private Services: There is no known legitimate or public market for private cryptocurrency custodial services, exchanges, or investment funds within North Korea. The concept of "client assets" or "private custodians" as distinct from the state's own operations is fundamentally alien to its economic and political structure.

Entity Targeted: Cryptocurrency Mixers (e.g., Sinbad.io). Violation Type: Facilitating money laundering for sanctioned entities, including North Korea's Lazarus Group, for proceeds from major cryptocurrency heists. Penalty Amount: Assets frozen, U.S. persons prohibited from transacting with the entity, effective shutdown of the service. (No specific fine amount against the mixer, but the economic impact is a cessation of operations).

Entity Targeted: Individuals and associated cryptocurrency addresses linked to North Korean state-sponsored hacking groups (e.g., Lazarus Group/APT38). Violation Type: Conspiracy to commit money laundering, international money laundering, conspiracy to commit computer fraud, theft of cryptocurrency. Penalty Amount: Indictment of individuals, seizure of tens of millions of dollars in stolen cryptocurrency.