Investment
Fortune

An American who helped North Korean IT workers rake in $17.1 million faces sentencing in scheme that tricked hundreds of Fortune 500 companies

July 19, 2025
08:02 AM
7 min read
AI Enhanced
financeeconomymoneyfinancialcybersecuritycompliancemarket cyclesseasonal analysis

Key Takeaways

Arizona woman Christina Chapman carefully oversaw at least 90 laptops at her home and shipped dozens of others to China, Russia, the UAE, and Nigeria, authorities said.

Article Overview

Quick insights and key information

Reading Time

7 min read

Estimated completion

Category

investment

Article classification

Published

July 19, 2025

08:02 AM

Source

Fortune

Original publisher

Key Topics
financeeconomymoneyfinancialcybersecuritycompliancemarket cyclesseasonal analysis

What the data shows is Finance·fraudAn American who helped North Korean IT workers rake in $17. 1 million faces sentencing in scheme that tricked hundreds of Fortune 500 companiesBy Amanda GerutBy Amanda GerutNews Editor, West CoastAmanda GerutNews Editor, West CoastAmanda Gerut is the west coast editor at Fortune, overseeing publicly traded es, executive compensation, Securities and Exchange Commission regulations, and investigations, in today's market environment

SEE FULL BIO A 2023 raid of a suburban Arizona found an elaborate staging area with 90 laptops in an organized setup to track which device was meant for which worker

Additionally, AndreyPopov via Getty ImagesAn Arizona woman who claims to have unwittingly been helping North Korean IT workers get jobs at American companies is facing sentencing next week in what secutors have called one of the largest worker fraud schemes ever charged by the Department of Justice

She pleaded guilty to being part of a scheme in which IT workers sought remote jobs at 309 companies, generating $17, considering recent developments. 1 million in compensation that was sent to North Korea (something worth watching), given current economic conditions

An Arizona woman faces sentencing next week in an early test case for how U, in light of current trends

Additionally, Additionally, Authorities will mete out punishment to Americans who enmesh themselves in a global scheme in which thousands of North Korean nology workers illegally hold jobs at U

Companies under false or stolen identities (fascinating analysis)

The tactic generates up to $600 million in revenue for North Korea annually, according to UN estimates, and the funds finance authoritarian leader Kim Jong Un’s nu weapons gram (remarkable data), considering recent developments

Christina Chapman, 50, pleaded guilty to conspiracy charges in February in connection with the scheme and authorities have nine years in prison for her role, according to a sentencing memo filed last week

That’s despite her claim to the FBI she had no idea North Korea was involved

Meanwhile, Secutors are also seeking 36 months of supervised release, and a money judgment in the amount of $176,850—the same amount authorities claim Chapman made for her part in the scheme, which netted at least $17, considering recent developments. 1 million for North Korea, per the IRS. “A sentence that is too lenient would convey the wrong message to both North Koreans and current and future U. -based facilitators that this conduct is tolerated in the U

And worth the risk of being caught by U

However, Furthermore, Law enforcement,” secutors wrote in the memo, submitted by U

Additionally, Attorney Jeanine Pirro. “Rather, the Court should send the message that participation in these schemes and related violations of law have serious consequences so that future would-be facilitators will be adequately deterred, considering recent developments. ” Attempts to reach Chapman through her attorney were unsuccessful, in light of current trends

According to court documents and law enforcement, thousands of IT workers trained in elite schools in North Korea have been involved in a vast global conspiracy to weaponize the remote-work economy by obtaining jobs in IT using fake, stolen, or borrowed identities

Meanwhile, The workers, based in North Korea or locations such as China, Russia, or the UAE, use AI to manage sometimes a dozen or more personas and obtain legitimate jobs at U

And European companies, given the current landscape

Has maintained sanctions on North Korea since 2016 because of its nu efforts, banning the regime from the U

Financial system and curtailing all between U

People and companies with North Korea, given the current landscape

Additionally, Conversely, In Chapman’s case, a 2023 raid of her suburban Arizona found an elaborate staging area with 90 laptops in an organized setup to track which device was meant for which worker, secutors wrote in court records (fascinating analysis)

She labeled each device with notes identifying the associated company and the corresponding stolen identity, photos from the raid show

Authorities said she aided workers in the scheme for three years, at one point becoming so inundated with tasks that she needed to hire two assistants to help her

According to court records, Chapman helped the IT workers verify stolen identities so they could pose as real U

Citizens and installed software after the companies shipped out laptops

However, She helped the North Korean workers log in remotely, and then kept the laptops organized and safe at her so that U

Companies would believe the North Korean workers were located in the U, in today's market environment

Authorities said Chapman shipped 35 packages to Dangdong, China, a city near the North Korean border, and helped ship at least 49 laptops and other hardware to China, Pakistan, the UAE, and Nigeria

She also helped them cash their checks by accepting their payments and depositing the money in her bank account before transferring it over to the workers

She charged the North Korean workers $176,850 in fees for her services, according to the memo (an important development)

The federal push for a significant sentence for Chapman isn’t dividual punishment; it’s a strategic move to set a precedent, Andrew Borene, executive director at Flashpoint threat intelligence and former senior official in the Office of the Director of National Intelligence, told Fortune. “This secution aims to draw a line, deterring future U

On the other hand, Facilitators and sending a message to Pyongyang,” Borene said

Moreover, Nevertheless, “I would expect a ruling that underscores the gravity of aiding a sanctioned regime, marking a pivotal moment in how the U

Government confronts American complicity in these transnational criminal enterprises. ” Borene said the fallout from the IT worker scheme has intensified this year with indictments in December 2024, and a sweeping raid of 29 other laptop farms authorities announced in June

Secutors noted that even though Chapman claimed to be unaware of the involvement of a sanctioned nation, the victim impact is significant, and the case is one of the largest North Korean IT worker fraud schemes the Department of Justice has charged, in this volatile climate

Citizens had their identities stolen, and 309 U

On the other hand, Es plus two multinationals were defrauded (an important development)

Nevertheless, Those who had their identities stolen have had fake tax liabilities created in their name and are subject to monitoring from the IRS and Social Security Administration

One victim was denied unemployment because an IT worker was using their Social Security number, secutors wrote, amid market uncertainty

The IT workers also allegedly created online and social media files to aid the scheme, which has made it difficult for those who had their identities stolen to regain control of their names

The analysis reveals impact on es has also been huge, secutors wrote. “First, the fact that U

Moreover, Companies had nologically savvy North Korean insiders accessing their sensitive IT systems generally caused U

Companies to have to conduct internal and costly security reviews,” the memo states (an important development). “​​Second, some U

Companies had their data stolen by an IT worker, causing further internal security review (an important development). ” Authorities said Chapman also willfully obstructed the investigation because she deleted 10 Skype conversations with IT workers when she found out the FBI was raiding her house

Her sentencing will take place on July 24 in Arizona

Moreover, Introducing the 2025 Fortune 500, the definitive ranking of the biggest companies in America

Explore this year's list.