
MSMT Report Tracks $800M DPRK IT Revenue as China Tightens Entry Controls
MSMT reporting links specific enforcement actions in four countries to documented DPRK IT revenue of $800 million. Evidence shows evasion tactics adapting faster than host-state responses, with China’s surveillance producing measurable deployment restrictions. Continued monitoring of border facilities and third-country facilitators is required to assess whether sanctions pressure alters revenue flows.
The MSMT July 2025 update expands the October 2024 UN Panel of Experts findings on DPRK IT worker schemes, naming specific facilitators in Argentina, Pakistan, Vietnam and Laos who enabled identity fraud, bank account opening and money laundering. Argentina opened an investigation into Antonia Doroganova for laundering operations; Pakistan charged Syeda Aliya Batool Zaidi and two associates with document forgery. Laos confirmed 19 workers entered between 2018-2019 but denied listed companies existed, revealing gaps in host-state verification. China’s April 2025 detention of a worker for alleged military espionage triggered stricter residency checks, forcing Pyongyang to lease Sinuiju buildings for Chinese IP access without physical entry. These patterns show revenue streams shifting from on-site employment to remote infrastructure while host nations selectively enforce sanctions only after multilateral naming.
MSMT: China will deny residency permits to at least 50 additional DPRK IT applicants by December 2025, measured by increased Sinuiju facility traffic.
Sources (2)
- [1]Primary Source(https://www.un.org/securitycouncil/sites/www.un.org.securitycouncil/files/240724_msmt_report.pdf)
- [2]Supporting Source(https://therecord.media/nations-take-action-on-north-korean-it-worker-schemes)