The secret scheme where North Koreans work in disguise - BBC Trending podcast, BBC World Service

BBC World ServiceAbout 3 min readSep 11, 2025Watch original
THE SUMMARYAI-generated

Key Concepts

  • AI-disguised candidates in remote job interviews
  • North Korean IT workers scheme
  • Cybercrime as a source of income for North Korea
  • Identity laundering and fake personas
  • Sanctions evasion
  • Cybersecurity threats and awareness

AI-Disguised Candidates and Suspicious Applications

Dawid, a recruiter, encountered a job candidate with a "weird" avatar during a remote interview, suspecting the use of software to alter the camera view. This incident was recorded after a similar experience with another candidate who appeared to use AI to disguise themselves. Dawid's company has received over 20 suspicious applications from candidates with new LinkedIn profiles and limited online presence, raising concerns about identity concealment.

North Korean IT Worker Scheme

Experts believe these incidents may be related to North Korea's cyber activities. Jin-Su, a former North Korean IT worker, revealed a state-run scheme where North Koreans work online for Western companies, with most of their wages funding the regime. Workers have monthly quotas (e.g., $5000), keeping only a small portion (e.g., $750). This is seen as preferable to life in North Korea despite being considered "robbery."

Operations and Logistics

North Korean IT workers are often deployed abroad, primarily to China, Russia, and Southeast Asian countries, due to limited internet access within North Korea. They live and work in cramped conditions but are generally satisfied due to the improved living standards compared to North Korea. They are allowed some leisure activities like watching Korean dramas or European soccer.

Identity Laundering and Sanctions Evasion

To circumvent sanctions, North Korean IT workers conceal their identities by acquiring and laundering identities from individuals in countries like Hungary, Ukraine, Turkey, and the UK. They spend 60-70% of their time researching and contacting people to create fake identities, essentially "buying people's IDs."

Evidence and Verification

Jin-Su's testimony is supported by accounts from other defectors gathered by PSCORE. Hyun-Seung Lee, a former businessman for the North Korean regime, confirmed meeting North Korean IT workers in China.

Financial Impact and Security Measures

A United Nations Security Council report estimates that the IT worker scheme generates $250 to $600 million annually for North Korea, primarily from US companies. The regime maintains control over the workers by holding their families hostage in North Korea, ensuring their compliance. Escape attempts are quickly thwarted by Chinese police.

European Vulnerability

Europe is identified as having lower awareness of this issue, making it easier for North Korean IT workers to infiltrate. Security leaders in Europe are often surprised by the extent of the problem.

Conclusion

The video exposes a sophisticated scheme by North Korea to generate revenue through cybercrime, using IT workers who conceal their identities to secure remote jobs in Western companies. The funds generated support the North Korean regime, highlighting the need for increased cybersecurity awareness and vigilance, particularly in Europe. Jin-Su, now living outside North Korea, uses his IT skills legally, demonstrating the potential for these individuals to contribute positively when freed from the regime's control.

AI summaries can miss context or contain errors. Check important details against the original video.

Go a little deeper.

Have a question about this video? Load its transcript to open the video chat.