The person at the center of this case
United States and international sanctions regime; potential victims of cybercrime and financial fraud
Cold Case · Open
58 days waiting
DPRK IT WORKERS
Justice for United States and international sanctions regime; potential victims of cybercrime and financial fraud — the trail went cold in 2026, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1How did these IT workers coordinate operations across international borders to evade detection?
🔍
evidence
Lead #2What specific revenue generation methods and money laundering techniques were employed?
📞
contact
Lead #3Are any of these individuals still actively engaged in cyber operations or financial crimes?
Fourteen North Korean IT workers are wanted for allegedly operating a sophisticated scheme to generate revenue and launder money for the North Korean regime between April 2017 and March 2023, violating U.S. and international sanctions. Federal arrest warrants were issued in December 2024 by the U.S. District Court in St. Louis, Missouri. The case remains active as authorities work to locate and apprehend these individuals involved in one of the regime's primary sources of illicit income.
Case
#1037
United States (Federal jurisdiction); North Korea (suspected origin)
Federal Bureau of Investigation (FBI); U.S. District Court, Eastern District of Missouri
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4What international financial institutions or cryptocurrency platforms were potentially exploited?
👤
person
Lead #5Do any of these individuals have connections to other known North Korean cyber espionage or criminal networks?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Caution: Jong Song Hwa , Kim Ryu Song , Ri Kyong Sik , Rim Un Chol , Kim Mu Rim , Cho Chung Pom , Hyon Chol Song , Son Un Chol , Sok Kwang Hyok , Choe Jong Yong , Ko Chung Sok , Kim Ye Won , Jong Kyong Chol , and Jang Chol Myong are wanted for their alleged involvement in a conspiracy to generate revenue and launder it for the North Korean regime from approximately April 2017 to approximately March 2023 in violation of United States and international sanctions. A federal arrest warrant was issued for them in the United States District Court, Eastern District of Missouri, Eastern Division, St.
Louis, Missouri, in December 2024.
Timeline of Events
🕵️
2017-04-01
Conspiracy period begins
Alleged revenue generation and money laundering scheme for North Korean regime begins
🕵️
2023-03-31
Conspiracy period ends
Alleged scheme concluded approximately March 2023
🕵️
2024-12-01
Federal arrest warrants issued
Warrants issued in U.S. District Court, Eastern District of Missouri, Eastern Division, St. Louis, Missouri
Case Information
Incident:April 1, 2017
Last Updated:May 12, 2026
Up to $5 Reward
For information leading to the resolution of this case
Leave a comment
Comments
Case Information
Incident:April 1, 2017
Last Updated:May 12, 2026
Up to $5 Reward
For information leading to the resolution of this case