Is crypto legal in North Korea? Rules & regulation (2026)

Legal framework

No published domestic crypto-specific legislation; effective prohibition enforced through DPRK's command economy and total state information control; externally governed by UN Security Council Sanctions Regime (UNSCR 1718/2006 and successors 2270/2321/2371/2375/2397) and U.S. OFAC North Korea Sanctions Regulations (31 C.F.R. Part 510)

Status by sub-area

• Stablecoins

  None

  No domestic stablecoin issuance regime exists or has been published by DPRK authorities. The state covertly exploits third-party unfreezable stablecoins (e.g., those issued by Huione-linked entities) solely for sanctions-evasion laundering, not as a regulated domestic payment instrument.

• Exchanges / VASP

  None

  No domestic virtual-asset exchange licensing or VASP registration regime has been published. North Korean citizens do not have access to domestic or foreign exchanges; all DPRK crypto exchange activity is covert and sanctions-violating.

• Token Offerings

  None

  No domestic ICO, STO, or token-offering framework exists. DPRK has not published securities laws applicable to digital tokens, prospectus requirements, or investor-protection rules. All token-related activity is covert and conducted in violation of international sanctions.

• Custody

  None

  No domestic crypto custody rules — segregation, qualified-custodian standards, proof of reserves, or insurance — have been published by DPRK. State-controlled custody of stolen crypto is managed covertly through overseas shell entities and self-custody wallets.

• DeFi

  None

  No domestic DeFi regulatory framework exists. Ironically, DPRK state actors are among the most active exploiters of DeFi infrastructure globally — using bridges, DEXs, and liquidity pools to launder stolen crypto — but this is covert criminal activity, not regulated domestic use.

• Tax

  None

  No published domestic tax framework for cryptocurrency exists in North Korea. There is no capital-gains, income, VAT, or reporting regime for crypto assets applicable to citizens; the state does not publicly account for illicitly obtained crypto proceeds.

Key points: crypto & digital assets in North Korea

1. 01No domestic legal framework

   No publicly available DPRK statute, decree, or regulatory guidance establishes a domestic legal basis for private cryptocurrency use, exchange licensing, token issuance, or custody. Citizens lack open internet access, making a domestic retail crypto market structurally impossible.

   freemanlaw.com complyadvantage.com

2. 02Comprehensive UN sanctions prohibit crypto transactions

   UNSCR 1718 (2006) and successors (2270, 2321, 2371, 2375, 2397) impose asset freezes, financial-services bans, and transaction prohibitions on DPRK entities. The UN Security Council 1718 Sanctions Committee oversees implementation; the Panel of Experts that monitored compliance had its mandate lapse in April 2024 after Russia vetoed renewal.

   main.un.org press.un.org

3. 03OFAC sanctions DPRK cyber actors and crypto addresses

   U.S. Treasury OFAC has sanctioned Lazarus Group and subordinate units (September 2019), mixers (Blender.io 2022, Sinbad 2023) used for DPRK laundering, and as recently as March 2026 sanctioned six individuals and two entities for IT-worker crypto fraud, designating 21 cryptocurrency wallet addresses across multiple blockchains.

   home.treasury.gov chainalysis.com home.treasury.gov

4. 04Record-scale state-sponsored crypto theft in 2025

   North Korean state-linked hackers stole USD 1.5 billion in ETH from Bybit in February 2025 (Operation TraderTraitor, per FBI attribution), the largest single crypto theft ever recorded. Total DPRK-linked theft for 2025 reached USD 2.1-2.17 billion, roughly 60% of all global crypto losses that year per CertiK and Chainalysis.

   theblock.co 2021-2025.state.gov

5. 05DeFi and mixers used for laundering stolen funds

   DPRK operatives systematically exploit DeFi protocols, cross-chain bridges, and crypto mixers to launder stolen assets. RUSI (March 2024) documented the use of CoinJoin and mixer services to obfuscate Lazarus Group flows; the Huione Group was found to have laundered USD 37.6 million in DPRK-linked crypto between 2021 and 2025 via unfreezable stablecoins.

   static.rusi.org home.treasury.gov

6. 06Multilateral Sanctions Monitoring Team formed (Oct 2024)

   Following the lapse of the UN Panel of Experts, 11 nations including the U.S., UK, South Korea, and Germany established the Multilateral Sanctions Monitoring Team (MSMT) in October 2024 to continue monitoring and publicly reporting on DPRK sanctions violations, including crypto-theft proceeds.

   csis.org

Timeline of decisions

1. 25 Jul 2026Incident
   North Korea arrests hackers accused of laundering stolen funds from country's bank via crypto

   CoinDesk Policy

Sources

1. 1.main.un.org/securitycouncil/en/sanctions/1718
2. 2.press.un.org/en/2024/sc15648.doc.htm
3. 3.home.treasury.gov/news/press-releases/sm774
4. 4.home.treasury.gov/news/press-releases/jy1933
5. 5.home.treasury.gov/news/press-releases/jy2752
6. 6.chainalysis.com/blog/ofac-targets-north-korean-it-workers-crypto-march-2026/
7. 7.2021-2025.state.gov/office-of-the-spokesperson/releases/2025/01/joint-statement-on-crypto
8. 8.static.rusi.org/north-korea-sanctions-and-cryptomixers-op-march-2024.pdf
9. 9.csis.org/analysis/cross-border-law-enforcement-collaboration-countering-north-
10. 10.ofac.treasury.gov/sanctions-programs-and-country-information
11. 11.freemanlaw.com/cryptocurrency/north-korea/
12. 12.complyadvantage.com/insights/north-korea-cryptocurrency-sanctions/
13. 13.theblock.co/post/381841/north-korean-crypto-hacks-escalate-2025