Skip page header and navigation

FBI arrests staffing firm owners in North Korean IT worker scheme

FBI arrests staffing firm owners in North Korean IT worker scheme

Craig Johnson
| January 24, 2025
North Korea Worker`s Party Monument

Main article

Two staffing firm owners and three others were indicted for helping North Korean IT workers obtain remote employment at US companies, the US Department of Justice announced Jan. 24.

The FBI arrested Erick Ntekereze Prince, owner of staffing firm Taggcar, and Emanuel Ashtor, owner of IT staffing firm Vali Tech.

Ashtor’s home in North Carolina was also searched, according to the announcement. Ashtor had operated a “laptop farm” there.

North Korea has sent out thousands of IT workers to live in countries such as China and Russia to operate as freelance IT workers, according to the Justice Department. Using fake documents, they seek work at US firms. They also work with people in the US to obtain stateside addresses where employers can send laptops, which are then loaded with remote access software.

North Korean IT workers could earn more than $300,000 in some cases, and teams of IT workers could collectively earn more than $3 million annually, the Justice Department said. The North Korean government withholds up to 90% of wages.

Workers through the scheme for which Ntekereze and Ashtor were arrested obtained work from at least 64 US firms between April 2018 and August 2024, according to the Justice Department.

“Ntekereze and Ashtor received laptops from US company employers at their residences, downloading and installing remote access software on them, without authorization, to facilitate IT worker access and to perpetuate the deception of US companies,” the Justice Department stated. “The defendants further conspired to launder payments for the remote IT work through a variety of accounts designed to promote the scheme and conceal its proceeds.”

Others indicted in this case include:

  • Jin Sung-Il, a North Korean IT worker residing in Liaoning Province, China
  • Pak Jin-Song, a North Korean IT worker residing in Liaoning Province, China
  • Pedro Ernesto Alonso de los Reyes, a Mexican citizen living in Sweden

Alonso was arrested on Jan. 10 in the Netherlands.

All five defendants are charged with conspiracy to cause damage to a protected computer, conspiracy to commit wire fraud and mail fraud, conspiracy to commit money laundering, and conspiracy to transfer false identification documents. Jin and Pak are charged with conspiracy to violate the International Emergency Economic Powers Act. If convicted, the defendants face a maximum penalty of 20 years in prison.

Attorneys for Prince and Ashtor were contacted for comment. However, attorneys could not be located for de los Reyes, Jin or Pak.