Is Crypto Legal in North Korea?
Overview
North Korea operates no legitimate domestic crypto regulatory framework — no VASP licensing regime, no dedicated legislation, and no authorized private exchanges, custodians, or payment processors exist; all virtual asset activity is either directly state-controlled or conducted by state-sponsored actors such as the Lazarus Group for sanctions evasion, theft, and money laundering. The UN Security Council's 1718 Sanctions Committee and OFAC are the operative external authorities, and North Korea's FATF "Call for Action" blacklist status obligates all counterparty jurisdictions to apply enhanced due diligence and counter-measures to any DPRK-linked transactions. Any firm with exposure to North Korean addresses, counterparties, or IT contractors faces asset freezes and transaction prohibitions under OFAC designations, as demonstrated by enforcement actions targeting cryptocurrency mixers facilitating Lazarus Group proceeds. (home.treasury.gov, fbi.gov, justice.gov)
Regulatory Bodies
Example (indirect, reports often cite this): Various UN Panel of Experts reports to the DPRK Sanctions Committee.
United Nations Security Council (UNSC) Panel of Experts Reports on the DPRK: These annual reports frequently detail North Korea's use of cyber means, including virtual asset theft and exploitation, for sanctions evasion.
Operating Models
9/9 verdictsCan specific business models operate in North Korea? Each card answers the operational question for one kind of operator. Curated cells reflect counsel-grade review; AI-generated cells should be confirmed before relying on them.
Not permitted.
AI · UnreviewedNot permitted.
AI · UnreviewedNot permitted.
AI · UnreviewedNot permitted.
AI · UnreviewedNot permitted.
AI · UnreviewedNot permitted.
AI · UnreviewedNot permitted.
AI · UnreviewedNot permitted.
AI · UnreviewedNot permitted.
AI · UnreviewedLicensing Requirements
Sanctions Evasion: Bypassing international sanctions to fund the regime's weapons programs and luxury goods for the elite.
Money Laundering: Obscuring the origin of illicit funds.
Cyberattacks and Theft: Stealing virtual assets from exchanges and financial institutions globally to generate revenue.
Exchanges, Custody Providers, Payment Processors: There are no publicly known or established licensing regimes or requirements for these types of entities to operate legally and openly within North Korea for a domestic market. Any virtual asset activity occurring within the DPRK is either:
Directly managed by state-affiliated entities (e.g., intelligence agencies, state-owned banks, research institutions).
Carried out by state-sponsored hacking groups (like the Lazarus Group).
Highly controlled and isolated, serving specific state objectives rather than a private market.
Registration vs. Licensing Regime: The distinction between registration and licensing regimes, as understood in conventional financial regulation, does not apply to virtual asset service providers (VASPs) within North Korea. There is no public body for registration or licensing of private crypto businesses.
Capital Requirements: Any "capital" involved in North Korea's virtual asset activities is state-provided or stolen. It's not about private companies meeting a capital threshold but the state allocating resources (human and financial) to its cyber operations and sanctions evasion efforts.
AML/KYC (Anti-Money Laundering/Know Your Customer): North Korea actively works to circumvent AML/KYC procedures globally. Its primary goal is to hide the origin and destination of funds, making it impossible to identify the ultimate beneficial owner. They exploit weaknesses in VASP AML/KYC processes internationally. Within North Korea, there are no requirements for domestic actors to adhere to AML/KYC in the conventional sense, as their operations are designed to bypass such measures.
Local Presence: For state-sponsored activities, the "local presence" is the DPRK government itself and its various affiliated entities operating both domestically and through proxies internationally. There is no requirement for a foreign VASP to establish a licensed local presence in North Korea for private operations.
State employees or affiliated personnel.
Members of state-sponsored hacking groups.
Individuals compelled or coerced by the regime.
United Nations Security Council (UNSC) Panel of Experts Reports on the DPRK: These annual reports frequently detail North Korea's use of cyber means, including virtual asset theft and exploitation, for sanctions evasion.
Example (look for the most recent reports): UN Security Council - Reports of the Panels of Experts on DPRK
Note: You will need to browse specific reports for detailed findings on virtual assets.
Financial Action Task Force (FATF) Statements and Reports: The FATF has repeatedly flagged North Korea as a high-risk jurisdiction for money laundering and terrorist financing, highlighting its severe deficiencies in AML/CFT.
Example (Public Statement on High-Risk Jurisdictions subject to a Call for Action): FATF Public Statements
Note: North Korea is consistently listed here as a jurisdiction with significant strategic deficiencies for which countermeasures are called for.
U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) Advisories: OFAC frequently issues advisories and sanctions related to North Korean cyber activities, including those involving virtual assets.
Example: OFAC - North Korea Sanctions Advisories
Example: Advisory on Potential Sanctions Risks for Facilitating Illicit Ransomware Payments (Often relevant as DPRK groups are involved in such activities).
Cybersecurity and Blockchain Analytics Firm Reports: Companies like Chainalysis, Mandiant (formerly FireEye), and CrowdStrike regularly publish reports detailing North Korean hacking groups (e.g., Lazarus Group, Kimsuky, Andariel) and their methods of virtual asset theft and laundering.
Example: Chainalysis - The 2024 Crypto Crime Report (and previous years)
Note: These reports often feature dedicated sections on North Korean activities.
Violation of Foreign Exchange Laws: Strict controls on foreign currency.
Anti-State Economic Activity: Undermining state control over finance.
Sanctions Evasion: A constant concern for the regime itself, but also a charge against citizens found using unauthorized foreign assets.
Prohibited asset: Violating state control over finance and foreign exchange.
Evidence of illicit activity: Leading to severe penalties.
Utility tokens: Tokens meant for access to a service.
Security tokens: Tokens representing ownership or rights in an asset (if such a concept could even exist privately in NK).
Payment tokens/Cryptocurrencies: Bitcoin, Ethereum, stablecoins, etc.
NFTs: Any digital asset that could be traded.
Private issuance of tokens (or any financial instruments) is strictly forbidden. No individual or non-state entity is permitted to issue financial assets outside of state control.
Any attempt to "issue" a token would likely be viewed as a grave economic crime or an act of subversion against the state's financial monopoly, leading to immediate arrest and severe punishment.
Illegal: Violating foreign exchange laws and prohibitions on private financial dealings.
Covert: Conducted entirely underground, risking severe punishment if discovered.
Unregulated: By definition, as the state seeks to prevent it entirely.
Arrest and Imprisonment: Individuals caught possessing or transacting in unauthorized foreign currency (which crypto would fall under) face long prison sentences, often in forced labor camps.
Asset Seizure: Any discovered cryptocurrency or assets derived from it would be confiscated by the state.
"Anti-Socialist" or "Anti-State" Activities: Engaging in economic activities outside state control can be broadened to include these charges, which carry even harsher penalties, potentially including execution in extreme cases, especially if deemed to be aiding external forces.
Public Shaming and Re-education: Less severe cases might involve public denunciation and forced re-education.
North Korean state-affiliated hacking groups (e.g., Lazarus Group) are notorious for stealing vast sums of cryptocurrency from exchanges and DeFi protocols globally. This is done to fund the regime's weapons programs and circumvent international sanctions.
These state actors operate outside of international law and any "classification" framework, using cryptocurrency as a tool for illicit finance, not as a regulated asset class.
Reports from international bodies: Such as the UN Panel of Experts reports on DPRK sanctions, which detail North Korea's illicit use of cryptocurrency.
Example: UN Security Council Resolution 1718 (2006) Sanctions Committee (General sanctions framework, detailed reports often mention crypto activities).
Example (indirect, reports often cite this): Various UN Panel of Experts reports to the DPRK Sanctions Committee. These are typically published as UN documents. Search "UN Panel of Experts North Korea cryptocurrency" on the UN Digital Library for specific reports.
Statements and advisories from foreign governments: Particularly the U.S. Treasury Department (OFAC) and cybersecurity agencies, warning about North Korean cyber threats and cryptocurrency theft.
Example: U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) Advisories (Often contain details on North Korean illicit finance, including crypto).
Example: CISA and FBI Advisories on North Korean Malicious Cyber Activity (Contain information on state-sponsored crypto hacking).
Academic research and analyses from NGOs: Based on defector testimonies, satellite imagery, and intercepted communications.
AML/KYC Requirements
Reference: FATF High-Risk Jurisdictions (updated regularly): https://www.fatf-gafi.org/countries/#high-risk-jurisdictions
Reference: FATF Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers (March 2023 update): https://www.fatf-gafi.org/content/fatf-gafi/en/publications/Fatfrecommendations/Guidance-rba-virtual-assets-vasps-2023.html
UN Sanctions: North Korea is subject to extensive sanctions imposed by the United Nations Security Council (UNSC) due to its nuclear and ballistic missile programs. These sanctions severely restrict its access to the international financial system.
Reference: UNSC 1718 Sanctions Committee (DPRK): https://www.un.org/securitycouncil/sanctions/1718
National Sanctions: Countries like the United States (through OFAC), the European Union, and others implement their own robust sanctions regimes against North Korea, targeting individuals, entities, and financial institutions involved in supporting the DPRK regime's illicit activities.
Reference: U.S. Department of the Treasury (OFAC) - North Korea Sanctions: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-country-information/north-korea-dprk-sanctions
Financial Exclusion: Due to these sanctions and the high-risk designation, North Korea is largely cut off from the legitimate global financial system. Any entities attempting to transact with North Korea, especially concerning virtual assets, face significant risks of violating sanctions and being subject to severe penalties themselves in other jurisdictions.
Travel Rule
United States: OFAC imposes fines and can issue cease-and-desist orders for non-compliance, with recent penalties averaging $1 million per violation. OFAC Enforcement Notice, 2023
European Union: Member states enforce penalties under the 5AMLD, with fines ranging from €100,000 to €5 million, depending on the severity of the breach. 5AMLD Enforcement, EU
Japan: The FSA can impose fines up to ¥100 million (approximately $750,000) for violations, with additional penalties for repeated offenses. Japan FSA Enforcement, 2024
South Korea: The FSC can levy fines of up to KRW 500 million (approximately $380,000) for non-compliance, reflecting the country's stringent enforcement approach. Korea FSC Enforcement, 2024
IRS Guidance on Virtual Currency, 2024
Chainalysis Travel Rule Report, 2023
Understanding the Travel Rule & Why It Matters
What Is the Travel Rule? Definition, Thresholds & ...
Crypto Travel Rule Explained: FATF Requirements for VASPs
Travel Rule & AML: How Financial Institutions Can ...
Travel Rule - Anti-Money Laundering
Tax Reporting
Tax reporting data collection in progress.
Custody Requirements
State-Controlled and Illicit Activity: North Korea operates as a highly isolated, centrally controlled state where the government itself is the primary, if not sole, actor in the cryptocurrency space. Its documented activities in digital assets are almost exclusively related to illicit financing, cybercrime (e.g., ransomware, hacking exchanges), and sanction evasion, often conducted by state-sponsored hacking groups like the Lazarus Group.
No Public Market for Private Services: There is no known legitimate or public market for private cryptocurrency custodial services, exchanges, or investment funds within North Korea. The concept of "client assets" or "private custodians" as distinct from the state's own operations is fundamentally alien to its economic and political structure.
Lack of Transparency: North Korea is one of the most opaque countries in the world. Its laws, especially those concerning financial activities and technology, are rarely, if ever, made public or accessible to the international community. Any internal directives or operational guidelines for state-controlled entities dealing with cryptocurrency would be highly classified.
Custodial License Requirements: There are no publicly known licensing requirements for private entities because such private entities operating legitimate crypto custody services likely do not exist or are not permitted. Any crypto activities are either directly run by the state or under its strict, clandestine control.
Segregation of Client Assets Rules: This concept presupposes clients and service providers. Since there's no public market for private custody, there are no rules for segregating client assets. The state would not distinguish between its own assets and "client" assets in the way a regulated financial institution would.
Insurance/Bonding Requirements: These are market-based protections for customers against loss or insolvency. Given the absence of a public market and private service providers, such requirements do not exist.
Cold Storage Mandates: While state-sponsored hacking groups involved in illicit crypto activities undoubtedly use secure storage methods, including cold storage, for their stolen or illicitly acquired funds, these are operational security practices, not publicly mandated regulations for custodians.
Qualified Custodian Definitions: There are no publicly defined "qualified custodians" as the framework for private, regulated financial services does not exist in this domain.
Pending Custody Legislation: There is no publicly available information or credible indication of any pending legislation concerning cryptocurrency custody in North Korea.
Such laws, if they exist internally for state operations, are highly classified.
There is no public regulatory framework for private digital asset custody services.
UN Security Council Reports: These often detail North Korea's illicit financial activities, including the use of cryptocurrency for sanctions evasion and funding WMD programs. These reports describe the actions of the DPRK, not its internal regulations.
Example of a UN Panel of Experts report on DPRK sanctions, often mentioning crypto (search for the latest reports annually)
U.S. Department of the Treasury (OFAC) Advisories: These documents warn the private sector about North Korea's illicit financial activities, including cyber-enabled theft and money laundering using virtual currencies. They highlight the risks of engaging with North Korean entities.
OFAC Advisory on Potential Sanctions Risks for Facilitating Illicit Houthi and DPRK Shipping (often references crypto)
U.S. Treasury Guidance for the Virtual Currency Industry regarding sanctions compliance (This is US guidance about handling crypto, which would include dealing with sanctioned entities like NK).
Cybersecurity Firm Reports: Many cybersecurity firms track and report on North Korean state-sponsored hacking groups (like Lazarus Group) and their cryptocurrency exploits. These illustrate the methods of crypto use by the DPRK, not its internal regulations.
Chainalysis Reports on North Korea's crypto activities
Stablecoin Regulation
Stablecoins face heightened scrutiny as regulators worldwide, including in the United States and Hong Kong, propose stricter licensing and oversight to mitigate financial risks and ensure stability. A Comprehensive Framework for Stablecoin Regulation ...
U.S. Treasury's Proposed Rules: The U.S. Treasury has outlined a proposed framework that would require stablecoin issuers to obtain a new type of license, known as Payment Services Provider (PSPI), which imposes stringent capital and reserve requirements. From Money Transmitters to PPSIs: Treasury's Proposed ...
Hong Kong Overview: Hong Kong is preparing a licensing regime for stablecoin issuers, aiming to enhance transparency and consumer protection by 2026. Stablecoin Issuer Licence Hong Kong: 2026 Overview
U.S. Licensing: The OCC plans to be ready to license stablecoin issuers in January 2027, emphasizing the need for robust risk management and compliance with federal regulations. OCC will be ready to license stablecoin issuers in January, ...
Florida Pilot Program: Florida has initiated a licensing regime for stablecoin issuers, allowing pilot programs that enable stablecoin fee payments, focusing on consumer safety and regulatory clarity. Florida creates licensing regime for stablecoin issuers, pilot ...
Global FATF Guidance: The Financial Action Task Force (FATF) has issued recommendations that stablecoin operators must implement robust anti-money laundering (AML) and know-your-customer (KYC) controls to prevent illicit financial flows. Money laundering risks from “stablecoins” and other ...
Risk-Based Controls: Reuters highlights the necessity of risk-based controls for stablecoins, advocating for continuous monitoring and stringent identity verification processes to mitigate financial crime risks. Keeping crypto clean: risk-based controls for stablecoins
U.S. Regulatory Interventions: The U.S. Department of the Treasury has indicated that non-compliant stablecoin issuers may face enforcement actions, including fines and operational restrictions. Treasury proposes rules defining stablecoin issuance, ...
Tax Implications in South Korea: KB Financial reports that pilots involving stablecoins as payment methods in South Korea are subject to specific tax treatments, emphasizing the need for issuers to comply with local tax regulations. KB Financial pilots won stablecoin payments as Korea ...
Operational Challenges: U.S. stablecoin issuers face new licensing rules that could pose operational challenges before 2027, as highlighted by recent analyses. US stablecoin issuers face new licensing rules .. ...
A Comprehensive Framework for Stablecoin Regulation ...
From Money Transmitters to PPSIs: Treasury's Proposed ...
Stablecoin Issuer Licence Hong Kong: 2026 Overview
OCC will be ready to license stablecoin issuers in January, ...
Florida creates licensing regime for stablecoin issuers, pilot ...
Money laundering risks from “stablecoins” and other ...
Keeping crypto clean: risk-based controls for stablecoins
Treasury proposes rules defining stablecoin issuance, ...
KB Financial pilots won stablecoin payments as Korea ...
US stablecoin issuers face new licensing rules .. ...
Securities Classification
Cryptocurrency and digital asset activities in North Korea are not governed by any published, transparent legal framework, and no official regulatory body has issued licensing or registration procedures for virtual asset service providers. Financial Services Commission
The Democratic People's Republic of Korea (DPRK) maintains a centralized economy under state control, and no publicly available legislation addresses digital assets, blockchain technology, or virtual currency securities as of 2025–2026. Korean Tour
No entity has ever been granted a license to operate a cryptocurrency exchange, custody service, or digital asset securities platform in North Korea, and there is no evidence of any formal application process existing. South Korea Financial Supervisory Service (FSS)
Any business considering digital asset securities activities in North Korea faces complete legal uncertainty, absence of investor protection mechanisms, and the impossibility of obtaining lawful authorization. Korean Architecture | Homepage
North Korea does not maintain a publicly accessible financial regulator with jurisdiction over virtual assets or digital securities; the state's economic governance is conducted through internal party and cabinet structures that publish no rules for foreign or private participation. Korean Tour
The primary legal instrument governing economic activity in North Korea is the Socialist Constitution, which establishes state ownership of major means of production and central planning, with no amendment or supplementary law addressing cryptocurrency or digital securities having been published. Korean Architecture | Homepage
No law, decree, or regulation has been officially gazetted in North Korea concerning virtual assets, distributed ledger technology, initial coin offerings, security tokens, or digital asset exchanges, creating a complete regulatory vacuum. EX-4.8 KOREAN SECURITIES AND EXCHANGE ACT
The Foreign Trade Law and the Foreign Investment Law of the DPRK regulate conventional trade and investment but contain no provisions extending to digital assets or virtual currency transactions. 인민보건
North Korea is not a member of the Financial Action Task Force (FATF) and does not participate in Moneyval or any other international AML/CFT peer review mechanism, and no mutual evaluation report for North Korea exists. Financial Services Commission
The United Nations Security Council has repeatedly sanctioned North Korea for weapons proliferation and related financial activities, but these resolutions do not create a domestic regulatory regime for virtual assets within the DPRK. Introduction - Financial Services Commission
North Korea's government websites, including the official tourism portal and the maritime supervisory administration, provide no reference to any financial regulator or securities authority with digital asset responsibilities. 조선민주주의인민공화국 국가해사감독국
The DPRK's legal system operates under the principle of "socialist legality," wherein laws serve state policy objectives, and no independent judicial or administrative body exists to interpret or enforce securities regulations in the Western sense. Korean Architecture | News
While North Korea has adopted some intellectual property and business laws since the 1990s to attract foreign investment, these laws have never been amended or supplemented to include digital assets, and no official translation or English-language version of any crypto-related law exists. Korea Securities Depository Corporation
The Central Court and the Central Public Prosecutors' Office handle legal matters under the DPRK, but they have no published procedures, guidelines, or precedents relating to cryptocurrency disputes or digital asset securities. Korean Tour
No licensing regime exists in North Korea for cryptocurrency exchanges, digital asset custodians, brokers, dealers, or any other virtual asset service provider, and no government authority has been designated to issue such licenses. Financial Services Commission
There are zero entities licensed to conduct digital asset securities activities in North Korea, and no evidence suggests that any domestic or foreign company has ever applied for or received authorization for such operations. South Korea Financial Supervisory Service (FSS)
No capital requirements, application forms, filing fees, processing timelines, or approval criteria have been published for any virtual asset licensing scheme in North Korea. Korean Architecture | Homepage
The Committee for Promotion of External Economic Cooperation, a DPRK state body, promotes foreign investment in conventional sectors such as manufacturing, agriculture, and tourism but has issued no materials or guidance concerning digital asset businesses. Korean Tour
To the extent that any economic activity in North Korea requires state permission, such permission is granted through administrative discretion rather than transparent, codified licensing procedures, and this applies equally to any hypothetical crypto business with no published rules. EX-4.8 KOREAN SECURITIES AND EXCHANGE ACT
Foreign investors in North Korea are nominally required to establish joint ventures with domestic partners under the Foreign Investment Law, but this law has never been applied to digital assets, and no crypto joint venture has ever been publicly registered. Introduction - Financial Services Commission
The DPRK's Economic Development Zones, established under the Economic Development Zone Law, are designed to attract foreign capital, but none of these zones has announced any framework for fintech, blockchain, or digital asset companies. 인민보건
No structural requirements — such as local incorporation, board composition, residency of directors, or office location — have been specified for any virtual asset business in North Korea because no such requirements exist in law. Korea Securities Depository Corporation
Given the absence of any licensing mechanism, it is categorically impossible for a business to lawfully operate a cryptocurrency exchange or digital asset securities platform within North Korea's recognized legal system. 조선민주주의인민공화국 국가해사감독국
North Korea has no published anti-money laundering law that applies to virtual assets, and no customer due diligence, enhanced due diligence, or know-your-customer requirements exist for cryptocurrency businesses under DPRK law. Financial Services Commission
The DPRK is not a party to the FATF Recommendations and has not enacted legislation implementing the international AML/CFT standards applicable to virtual assets and virtual asset service providers. South Korea Financial Supervisory Service (FSS)
No suspicious transaction reporting regime exists in North Korea for any financial sector, let alone for digital assets, and no financial intelligence unit has been established or publicly identified. Korean Tour
Record retention requirements for financial transactions, including virtual asset transfers, have not been specified in any North Korean law or regulation, leaving businesses without guidance on document preservation periods. Korean Architecture | Homepage
Beneficial ownership transparency is not addressed in any North Korean statute applicable to companies or financial institutions, and no register of beneficial owners of corporate entities engaged in digital asset activities exists. EX-4.8 KOREAN SECURITIES AND EXCHANGE ACT
Politically exposed persons (PEP) screening obligations have not been introduced into North Korean law, and financial institutions within the DPRK operate under state directives rather than codified AML rules. Introduction - Financial Services Commission
The United Nations Security Council Resolution 2270 (2016) and subsequent resolutions require member states to prevent North Korea from accessing international financial systems, but these obligations bind UN member states, not North Korea itself, and create no domestic KYC duties within the DPRK. 인민보건
International sanctions and correspondent banking restrictions effectively exclude North Korean financial institutions from the global banking system, making formal AML compliance for cross-border virtual asset transactions impossible to implement through normal channels. Korea Securities Depository Corporation
No North Korean regulatory authority has issued any guidance, examination manual, or enforcement policy regarding anti-money laundering controls for digital assets, leaving a complete absence of supervisory expectations. 조선민주주의인민공화국 국가해사감독국
No North Korean court, prosecutor's office, or administrative body has publicly reported any enforcement action against individuals or entities for unlicensed virtual asset activity, money laundering through cryptocurrency, or securities violations involving digital assets. Financial Services Commission
The United States Department of the Treasury's Office of Foreign Assets Control (OFAC) has sanctioned North Korean state-sponsored hacking groups, including the Lazarus Group, for cyber-enabled theft of cryptocurrency from exchanges and financial institutions, attributing billions of dollars in stolen virtual assets to DPRK operatives. EX-4.8 KOREAN SECURITIES AND EXCHANGE ACT
The Federal Bureau of Investigation (FBI) and other international law enforcement agencies have publicly linked specific cryptocurrency thefts, such as the 2022 Axie Infinity Ronin Bridge hack of approximately $600 million, to North Korean state-sponsored cyber actors, but these are external enforcement responses, not domestic DPRK prosecutions. South Korea Financial Supervisory Service (FSS)
Japan's Financial Services Agency and South Korea's Financial Services Commission have issued public warnings and taken supervisory actions against their own financial institutions for inadequate controls over North Korean cyber threats, but these actions do not constitute North Korean domestic enforcement. Introduction - Financial Services Commission
No records exist of any North Korean administrative penalty, fine, asset seizure, or criminal conviction related to virtual asset activities, because the state does not disclose judicial or administrative enforcement data to international audiences. Korean Tour
United Nations Panel of Experts reports on North Korea sanctions have documented the DPRK's use of cryptocurrency to evade sanctions, including theft, mining, and money laundering operations, but these reports recommend international measures rather than describing domestic enforcement within North Korea. Korean Architecture | Homepage
The absence of any published enforcement action confirms that North Korea either tolerates or coordinates virtual asset activities outside any legal framework, rather than regulating or penalizing them through transparent processes. 인민보건
No tax guidance has been issued for virtual assets in North Korea, and no law, decree, or administrative regulation addresses the taxation of cryptocurrency gains, digital asset securities, mining income, or virtual asset transactions. Financial Services Commission
The DPRK's tax system for foreign-invested enterprises and foreign individuals is governed by the Foreign Investment Tax Law and the Foreign Individual Income Tax Law, but these statutes contain no provisions on digital assets or virtual currency. EX-4.8 KOREAN SECURITIES AND EXCHANGE ACT
No capital gains tax regime exists in North Korea that addresses or excludes cryptocurrency holdings, and no value-added tax (VAT) or consumption tax rules have been published for virtual asset services. Korean Architecture | Homepage
The Central Planning Commission and the Ministry of Finance of the DPRK have not released any guidance, circular, or interpretation concerning the tax treatment of digital assets, leaving businesses without any compliance framework. Korean Tour
State-owned enterprises engaging in cryptocurrency activities — as reported by international media and UN reports — do so without any public record of tax obligations or payments, and no audited financial statements exist. 조선민주주의인민공화국 국가해사감독국
Foreign companies considering digital asset operations in North Korea would face fundamental tax uncertainty, including an inability to determine corporate income tax rates applicable to virtual asset profits or to obtain advance tax rulings. Korea Securities Depository Corporation
The complete absence of a legal framework for virtual assets in North Korea means that any business engaging in digital asset securities activities lacks legal certainty, enforceable contracts, and access to dispute resolution mechanisms. Financial Services Commission
North Korea's non-membership in FATF and its status as a jurisdiction subject to comprehensive UN sanctions create an intractable compliance risk: no legitimate international financial institution can process transactions involving North Korean counterparties without facing global sanctions exposure. South Korea Financial Supervisory Service (FSS)
While international reports indicate that North Korean state actors actively steal cryptocurrency through cyber operations, no legitimate pathway exists for private companies to enter the DPRK market with digital asset products because no government authority will acknowledge or authorize such activities. EX-4.8 KOREAN SECURITIES AND EXCHANGE ACT
Implementation gaps between any theoretical legal framework and practical reality are absolute: there is no regulatory infrastructure, no trained supervisory personnel, no licensing database, and no official publication mechanism for financial rules in North Korea. Korean Architecture | Homepage
The DPRK government's opaque decision-making means that even if a business attempted to obtain permission for digital asset activities through informal state channels, there would be no way to verify the legitimacy or durability of such authorization. Korean Tour
Businesses face a significant risk of asset confiscation, arbitrary contract termination, and personal detention in the absence of rule-of-law protections for foreign investors, a risk that is magnified in the unregulated digital asset space. Introduction - Financial Services Commission
The lack of any domestic tax legislation for virtual assets creates exposure to retroactive taxation or arbitrary fiscal demands by North Korean authorities, with no mechanism for appeal or international arbitration. 인민보건
US, EU, and UN sanctions designate North Korea as a jurisdiction of proliferation concern, and any cryptocurrency transaction involving DPRK persons or entities risks violative conduct under secondary sanctions regimes, regardless of any purported domestic authorization. Korea Securities Depository Corporation
No official source — including the DPRK's ministry websites for health, maritime affairs, tourism, or architecture — mentions cryptocurrency or digital assets, confirming that the state has not publicly addressed these topics in any accessible format. 조선민주주의인민공화국 국가해사감독국
In summary, North Korea presents a wholly unviable and hazardous jurisdiction for regulated digital asset securities activity, where no law exists, no license can be obtained, no tax rule applies, and no enforcement protection is available. Korean Architecture | News
South Korea Financial Supervisory Service (FSS)
EX-4.8 KOREAN SECURITIES AND EXCHANGE ACT
Introduction - Financial Services Commission
Sanctions & Restrictions
Sanctions data collection in progress.
Enforcement Actions
Regulator Name: U.S. Department of the Treasury (Office of Foreign Assets Control - OFAC)
Entity Targeted: Cryptocurrency Mixers (e.g., Sinbad.io). Violation Type: Facilitating money laundering for sanctioned entities, including North Korea's Lazarus Group, for proceeds from major cryptocurrency heists. Penalty Amount: Assets frozen, U.S. persons prohibited from transacting with the entity, effective shutdown of the service. (No specific fine amount against the mixer, but the economic impact is a cessation of operations).
Date: November 29, 2023 (Sinbad.io)
Outcome: Shut down of the Sinbad mixer, seizure of its infrastructure, and disruption of a critical money laundering avenue for North Korean hackers. This followed similar actions against Tornado Cash in August 2022, which was also used by the Lazarus Group.
Source URL (Tornado Cash - relevant for NK links): https://home.treasury.gov/news/press-releases/tn1645
Entity Targeted: Individuals and associated cryptocurrency addresses linked to North Korean state-sponsored hacking groups (e.g., Lazarus Group/APT38). Violation Type: Conspiracy to commit money laundering, international money laundering, conspiracy to commit computer fraud, theft of cryptocurrency. Penalty Amount: Indictment of individuals, seizure of tens of millions of dollars in stolen cryptocurrency.
March 2023: Seizure of $63 million in cryptocurrency related to the March 2022 Axie Infinity's Ronin Bridge hack (where over $625 million was stolen by Lazarus Group).
January 2023: Seizure of over $100 million in cryptocurrency related to multiple hacks, including the Harmony Bridge (June 2022) and the Axie Infinity hack, both attributed to Lazarus Group.
Date: January 2023, March 2023 (and ongoing throughout 2022-2024 for various recovery efforts).
Outcome: Recovery of a significant portion of stolen funds, disruption of North Korea's ability to cash out illicit gains, and public identification of wallet addresses and laundering techniques used by DPRK actors. The indictments serve as a deterrent and basis for future arrests if individuals leave North Korea.
Source URL (Axie/Harmony Seizures - March 2023 Update): https://www.fbi.gov/news/press-releases/fbi-identifies-north-korean-hackers-responsible-for-600m-theft-of-cryptocurrency-from-axie-infinitys-ronin-bridge
Source URL (Harmony Seizures - January 2023): https://www.justice.gov/opa/pr/justice-department-announces-largest-cryptocurrency-seizure-ever-affiliated-north-korean
Entity Targeted: North Korean IT workers masquerading as non-DPRK nationals to gain employment in remote IT jobs, including those in the cryptocurrency and blockchain sectors. Violation Type: Generating revenue for the DPRK regime, including its WMD programs, by defrauding companies, stealing funds, and gaining access to sensitive networks. This also includes sanctions evasion. Penalty Amount: Identification and blacklisting of specific individuals/companies, public warnings to industry, and increased scrutiny of remote hires. (No direct "penalty amount" levied against the workers themselves in the form of a fine, but the objective is to cut off their revenue streams).
Date: May 16, 2022 (initial advisory), updated and reiterated through 2023-2024.
Outcome: Increased awareness among companies about the risks of inadvertently hiring North Korean IT workers, leading to stricter vetting processes and disruption of these illicit revenue-generating schemes.
Source URL (Joint Advisory): https://www.fbi.gov/news/press-releases/north-korean-it-workers-exploiting-the-global-freelance-market
Source URL (OFAC on Individuals/Entities): https://home.treasury.gov/news/press-releases/jy1923 (This example from Nov 2023 includes an individual facilitating funds for Lazarus, though not strictly an IT worker, it highlights the broader enforcement against facilitators)
Research & Articles
Regulatory Forecast
high confidenceLikely enforcement action expected around 2026-09-30
Based on 57 historical regulatory events for North Korea, averaging every 68 days, with increasing regulatory activity.
Recent Updates
Basis: UN Security Council Resolutions are legally binding on all UN member states, including Côte d'Ivoire. Thes...
Basis: UN Security Council Resolutions are legally binding on all UN member states, including Côte d'Ivoire. These resolutions typically impose asset freezes, travel bans, and arms embargoes on individuals, entities, and countries deemed threats to international peace and security (e.g., related to terrorism, proliferation of weapons of mass destruction, specific regimes like North Korea or Iran).
Qualified Custodian Definitions: There are no publicly defined "qualified custodians" as the framework for privat...
Qualified Custodian Definitions: There are no publicly defined "qualified custodians" as the framework for private, regulated financial services does not exist in this domain.
UN Security Council Reports: These often detail North Korea's illicit financial activities, including the use of ...
UN Security Council Reports: These often detail North Korea's illicit financial activities, including the use of cryptocurrency for sanctions evasion and funding WMD programs. These reports describe the actions of the DPRK, not its internal regulations.
Exchanges, Custody Providers, Payment Processors: There are no publicly known or established licensing regimes or...
Exchanges, Custody Providers, Payment Processors: There are no publicly known or established licensing regimes or requirements for these types of entities to operate legally and openly within North Korea for a domestic market. Any virtual asset activity occurring within the DPRK is either:
Registration vs. Licensing Regime: The distinction between registration and licensing regimes, as understood in c...
Registration vs. Licensing Regime: The distinction between registration and licensing regimes, as understood in conventional financial regulation, does not apply to virtual asset service providers (VASPs) within North Korea. There is no public body for registration or licensing of private crypto businesses.
Capital Requirements: Any "capital" involved in North Korea's virtual asset activities is state-provided or stole...
Capital Requirements: Any "capital" involved in North Korea's virtual asset activities is state-provided or stolen. It's not about private companies meeting a capital threshold but the state allocating resources (human and financial) to its cyber operations and sanctions evasion efforts.
Contraband: Subject to seizure.
Contraband: Subject to seizure.
North Korean state-affiliated hacking groups (e.g., Lazarus Group) are notorious for stealing vast sums of cryptocurr...
North Korean state-affiliated hacking groups (e.g., Lazarus Group) are notorious for stealing vast sums of cryptocurrency from exchanges and DeFi protocols globally. This is done to fund the regime's weapons programs and circumvent international sanctions.
Reports from international bodies: Such as the UN Panel of Experts reports on DPRK sanctions, which detail North ...
Reports from international bodies: Such as the UN Panel of Experts reports on DPRK sanctions, which detail North Korea's illicit use of cryptocurrency.
The Bank Secrecy Act (BSA) and the Customer Due Diligence (CDD) Rule form the foundational AML requirements for U.S. ...
The Bank Secrecy Act (BSA) and the Customer Due Diligence (CDD) Rule form the foundational AML requirements for U.S. financial institutions, requiring establishment of risk-based compliance programs SEC AML Source Tool
The Financial Crimes Enforcement Network (FinCEN) requires covered institutions to file Suspicious Activity Reports (...
The Financial Crimes Enforcement Network (FinCEN) requires covered institutions to file Suspicious Activity Reports (SARs) and Currency Transaction Reports (CTRs) within specified timeframes KYC Complete Guide for US Businesses 2026
The American Gaming Association's updated 2026 AML Best Practices Guide emphasizes that regulators are increasingly i...
The American Gaming Association's updated 2026 AML Best Practices Guide emphasizes that regulators are increasingly imposing fines for program deficiencies, with recent enforcement actions exceeding $50 million for systemic failures AGA AML Best Practices
Criminal penalties for willful AML violations include imprisonment up to 10 years and fines up to $500,000 per offens...
Criminal penalties for willful AML violations include imprisonment up to 10 years and fines up to $500,000 per offense KYC Law in the US - Complete Compliance Guide
UN Security Council Resolution 1718 Sanctions Committee maintains comprehensive sanctions against North Korea with th...
UN Security Council Resolution 1718 Sanctions Committee maintains comprehensive sanctions against North Korea with the official reference at UNSC 1718 Sanctions Committee (DPRK)
Financial exclusion resulting from the combination of FATF and UN sanctions means North Korea is largely cut off from...
Financial exclusion resulting from the combination of FATF and UN sanctions means North Korea is largely cut off from legitimate global financial systems, with penalties for violating sanctions reaching up to $20 million per violation for institutions KYC Overview: Thomson Reuters
Customer identification programs must collect: full name, date of birth, residential/business address, and government...
Customer identification programs must collect: full name, date of birth, residential/business address, and government-issued identification number KYC Complete Guide for US Businesses 2026
UNSC 1718 Sanctions Committee (DPRK)
UNSC 1718 Sanctions Committee (DPRK)
U.S. Department of Treasury OFAC - North Korea Sanctions
U.S. Department of Treasury OFAC - North Korea Sanctions
This profile is maintained by AI research workers and updated regularly. Connect via MCP for programmatic access.