Financial Transactions and Reports Analysis Centre of Canada joins advisory warning of North Korean IT worker hiring risks and reiterates sanctions reporting and DPRK ministerial directive obligations

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC), alongside the Royal Canadian Mounted Police, Public Safety Canada, Global Affairs Canada and the Canadian Centre for Cyber Security, issued an advisory warning Canadians and businesses about North Korean state-affiliated information technology workers posing as overseas freelancers and the associated sanctions, financial crime and cyber risks. The advisory warns that employing or paying such workers can create legal exposure under Canadian sanctions implemented under the United Nations Act and the Special Economic Measures Act, with criminal penalties including fines and imprisonment, and it notes the risk of data theft and corporate espionage through privileged network access, malware and backdoors. It also reminds entities covered by section 5 of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) to report to FINTRAC transactions suspected to be related to money laundering, terrorist financing or sanctions evasion and to implement the Ministerial Directive on the Democratic People’s Republic of Korea, updated March 2025. The advisory provides practical red flags and mitigation steps for hiring and payments, including heightened identity verification, avoiding cryptocurrency payments or transfers to multiple accounts, and scrutiny for indicators such as multiple log-ins from different countries, inconsistent personal details, reluctance to participate in voice or video calls and possible use of AI-enabled deepfake technology.