FATF Keeps North Korea on High-Risk List
The Financial Action Task Force kept North Korea on its call for action list for the 16th consecutive year, with Iran the only other country under countermeasures.
Updated on Nov. 5, 2026 in Financial Crime
Live Poll
Should the U.S. government take a harder line on North Korean cyber and financial schemes?
The Financial Action Task Force kept North Korea on its high-risk list for the 16th consecutive year and urged countries to apply countermeasures. The decision was announced in a statement dated October 30 following a plenary meeting in Paris.
Why it matters
The designation reflects continued concern over North Korea's efforts to finance its weapons programs and its limited integration with the international financial system. Countries are urged to apply countermeasures to address these financial risks.
North Korea remains under the FATF call for action designation as of the October 30 statement, the same status it has held for 16 straight years. Iran is the only other country subject to the countermeasures designation.
The players
Financial Action Task Force
The intergovernmental body that sets international standards to combat money laundering and terrorist financing, and that maintains lists of high-risk jurisdictions.
U.S. Department of Justice
The federal department responsible for prosecuting federal crimes in the United States, which disclosed the scheme involving North Korean IT workers.
The details
North Korean IT workers used stolen or fabricated identities to obtain remote jobs at more than 70 U.S. companies, generating approximately $3 million in revenue. U.S.-based facilitators hosted company-issued computers at their residences, and the earnings were believed to have been transferred to North Korean-controlled entities subject to U.S. sanctions.
Timeline
2024: Russia vetoed a resolution to extend the mandate of the Panel of Experts on North Korea, leading to its termination.
October 30, 2026: The FATF announced its decision to keep North Korea on the high-risk list.
October 2026: The U.S. Justice Department issued a statement on the North Korean IT worker scheme.
Legal Context
North Korea's continuous listing for 16 years by the Financial Action Task Force shows that international pressure on its financial system has been sustained rather than episodic. The IT worker scheme exposed by U.S. prosecutors illustrates how sanctioned networks continue to move funds despite that long-running designation.
Companies that hire remote workers face heightened risk of unknowingly employing individuals using stolen or fabricated identities. Organizations should verify candidate identities and monitor where company-issued devices are used.
The takeaway
Employers hiring remote staff should verify identities thoroughly and track company devices, since sanctioned networks have used exactly these gaps to earn revenue. The continued FATF listing signals that financial safeguards around North Korea remain a priority for global regulators.
Further reading
Explore more on Financial Crime to see how sanctions evasion schemes like this one are tracked and prosecuted.
Source note: This article includes information reported by Voice of America.
Live Poll
Should the U.S. government take a harder line on North Korean cyber and financial schemes?
