Australia sanctions North Korean 'shadow bankers' over fraudulent IT Worker Scheme

Foreign Minister Penny Wong says Canberra acting with international partners to block funds for nuclear program

By LineZotpaper

Published23 October 2026

Read Time2 min

The Australian government has imposed sanctions on two North Korean companies and two individuals accused of running a network of fraudulent IT workers that funnels money to Pyongyang's nuclear weapons program, bypassing UN sanctions.

The federal government has hit two North Korean companies and two 'shadow bankers' with sanctions for employing fraudulent online workers who help Pyongyang evade UN sanctions and earn cash for its nuclear weapons program.

Foreign Minister Penny Wong said the sanctioned companies employed North Koreans who impersonated nationals from other countries, worked on online platforms and sent their income to key North Korean government agencies. Senator Wong said this violated UN Security Council resolutions that prohibit North Korea's export of labour. Australia acted in coordination with international partners, including the European Union.

'Australian sanctions reinforce our ongoing efforts, alongside international partners, to disrupt North Korea's illicit revenue-generating networks and increase pressure on the regime to comply with its international obligations and abandon its nuclear and ballistic missile programs,' Senator Wong said.

The two individuals sanctioned, Sim Hyon Sop and Yu Py Ung, have been identified by US authorities as key financial brokers for the regime. In 2024, the US Treasury called Yu Pu Ung 'a linchpin in the DPRK's illicit financial activities'. Sim Hyon Sop has been wanted by the FBI since 2023, with a $5 million reward offered for information leading to his capture. The FBI said he 'allegedly played a pivotal role in defrauding U.S. banks by remitting U.S. dollar payments to facilitate trade on behalf of North Korea'.

North Korea has repeatedly denied setting up shadow financial networks and says the allegations against it are fabricated. However, law enforcement and financial institutions worldwide say there is a mountain of evidence supporting the accusations.

In July, the US, Australia, Japan, South Korea, the UK, Canada and several European nations warned that North Korean workers were employing increasingly sophisticated methods, including the integration of AI, to obfuscate their identities and expand their activities. They urged countries to deepen their understanding of the schemes and implement countermeasures.

New Zealand's cyber authorities also warned earlier this year that a North Korean operative posing as a remote contractor was unwittingly hired by a local business.

Senator Wong said Australia continued to call on North Korea to comply fully with UN Security Council resolutions and take concrete steps towards complete, verifiable and irreversible denuclearisation.

Analysis

Why This Matters

The sanctions directly target a revenue stream that funds North Korea's nuclear and ballistic missile programs, posing a threat to regional and global security.
Australian and international companies may unknowingly hire disguised North Korean IT workers, exposing themselves to legal and security risks.
The coordinated action demonstrates growing international resolve to enforce UN sanctions more aggressively.

Background

North Korea has been accused of deploying thousands of IT workers overseas under false identities to earn foreign currency, in violation of UN sanctions that prohibit the export of labour. These workers often operate remotely, impersonating nationals from other countries. The US and allies say the scheme has generated hundreds of millions of dollars for Pyongyang's weapons programs.

Key Perspectives

Australian Government: The sanctions are part of a broader effort to pressure North Korea to denuclearise. 'We are acting in close coordination with international partners,' Senator Wong said. North Korea: The regime dismisses the allegations as fabricated and denies operating shadow financial networks. International Law Enforcement: Agencies including the FBI and US Treasury have built a case against the individuals and companies, describing them as critical enablers of North Korea's illicit financial activities.

What to Watch

Whether the sanctioned individuals are apprehended or face extradition.
Adoption of stronger vetting procedures for remote contractors by global companies.
Possible expansion of sanctions by the United Nations or additional countries.

Sources

Australia targets fraudulent North Korean workers propping up nuclear program · Just In

Checked

12 claims in this story checked against 1 source: 9 supported.

Show each claim

SupportedAustralia sanctioned North Korean “shadow bankers” over a fraudulent IT-worker scheme.Just In: “The federal government has hit two North Korean companies and "shadow bankers" with sanctions for employing fraudulent online workers”
Partly supportedWong said Canberra was acting with international partners to block funds for North Korea’s nuclear program.Just In: “Australia was acting "in coordination with international partners, including the European Union"”
SupportedThe government imposed sanctions on two North Korean companies and two individuals.Just In: “The federal government has hit two North Korean companies and "shadow bankers" with sanctions”
Partly supportedThe two sanctioned individuals were accused of running a network of fraudulent IT workers.Just In: “The two men sanctioned by Australia — Sim Hyon Sop and Yu Py Ung — have been identified by US authorities as key financial brokers for the regime.”
Partly supportedThe fraudulent-worker network funnels money to Pyongyang’s nuclear weapons program while bypassing UN sanctions.Just In: “fraudulent online workers who help Pyongyang evade UN sanctions and earn cash for its nuclear weapons program.”
SupportedWong said the sanctioned companies employed North Koreans who impersonated other nationalities, worked on online platforms and sent their income to North Korean government agencies.Just In: “the sanctioned companies employed North Koreans who impersonated nationals from other countries, worked on online platforms and sent their income to key North Korean government agencies.”
SupportedWong said the workers’ activity violated UN Security Council resolutions prohibiting North Korea’s export of labour.Just In: “Senator Wong said that was "a violation of UN Security Council resolutions that prohibit North Korea's export of labour"”
SupportedAustralia acted in coordination with international partners, including the European Union.Just In: “Australia was acting "in coordination with international partners, including the European Union"”
SupportedWong said Australian sanctions aimed to disrupt North Korea’s illicit revenue networks and pressure it to meet its obligations and abandon its nuclear and ballistic missile programs.Just In: “Australian sanctions reinforce our ongoing efforts, alongside international partners, to disrupt North Korea's illicit revenue-generating networks and increase pressure on the regime to comply with its international obligations and abandon its nuclear and ballistic missile programs,”
SupportedUS authorities identified Sim Hyon Sop and Yu Py Ung as key financial brokers for the regime.Just In: “The two men sanctioned by Australia — Sim Hyon Sop and Yu Py Ung — have been identified by US authorities as key financial brokers for the regime.”
SupportedIn 2024, the US Treasury called Yu Pu Ung “a linchpin in the DPRK’s illicit financial activities”.Just In: “In 2024 the US Treasury called Yu Pu Ung "a linchpin in the DPRK's illicit financial activities [who] is skilled at employing various schemes to avoid detection".”
SupportedThe FBI said Sim Hyon Sop “allegedly played a pivotal role in defrauding U.S. banks by remitting U.S. dollar payments to facilitate trade on behalf of North Korea”.Just In: “He "allegedly played a pivotal role in defrauding U.S. banks by remitting U.S. dollar payments to facilitate trade on behalf of North Korea," the FBI said.”