Oct 23, 2026 · 54 min
North Korean workers infiltrate America’s remote hiring system
Is your new co-worker secretly North Korean?
The operation exposes how identity theft, weak verification, and remote-work subcontracting can turn ordinary jobs into a funding channel for North Korea.
- 1North Korean IT workers use stolen identities, AI tools, and American intermediaries to secure jobs at U.S. companies.
- 2The workers face coercion and threats against their families, complicating the assumption that arrests can dismantle the operation.
- 3Remote hiring systems remain vulnerable as the scheme shifts toward subcontracting, sophisticated impersonation, and algorithmic detection.
Don't miss
Derek Goon receives tax paperwork showing income earned under his identity, forcing him to confront what the laptop-farm arrangement really was.
The brief
Wall Street Journal reporter Sam Kessler traces how North Korea moved from cryptocurrency scams into ordinary American hiring, using remote jobs to funnel money back to the regime.
Interview recordings show applicants using ChatGPT, disguising their locations, and navigating technical tests while handlers coordinate an industrialized hiring process.
The operation depends on American facilitators who receive laptops, attend interviews, and sometimes work jobs; Derek Goon’s experience shows how participation can become complicity.
Identity theft makes the damage personal: Michael Brown discovers fraudulent employers under his name, leaving lasting consequences for his credit, housing, banking, and employment prospects.
The episode’s central warning is that arrests cannot keep pace alone; companies must strengthen identity checks, hiring practices, and information-sharing as impersonation evolves.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.