North Korea Scams: Travel Risk & Cyber Threat Guide
North Korea is a unique case: independent tourism operates only through tightly state-controlled tour packages, and the country is also globally known as a state actor in cryptocurrency theft and cyber fraud.
Last reviewed: 5 July 2026
North Korea is fundamentally different from other destinations in this guide: there is no independent tourism, no free press, and no consumer-protection or private banking system that visitors or residents can appeal to. All travel is arranged through government-approved tour operators, and travelers should be aware that tour costs, itineraries and any additional 'fees' demanded during a trip are effectively non-negotiable and unregulated. Separately, and much more significantly for a global audience, North Korean state-sponsored hacking groups (widely tracked under names like Lazarus Group) are documented by international authorities as major perpetrators of cryptocurrency theft, exchange hacks and fraudulent IT-worker schemes that infiltrate companies worldwide using stolen or fake identities.
Common scams
- State-sponsored cryptocurrency exchange hacks and theft, documented by US Treasury and FBI advisories
- Fraudulent remote IT-worker schemes in which individuals hide North Korean nationality to gain employment at foreign companies, sending wages back to the state
- Unregulated additional fees or 'donations' demanded of tourists during state-organized tours
- Global phishing and malware campaigns attributed to North Korean state-linked hacking groups
Tourist-specific scams
- All tourism is via approved state tour operators; independent negotiation or off-itinerary activity is not possible
- Additional unplanned charges sometimes added during a tour with no recourse or independent complaint mechanism
Online shopping scams
- State-linked hacking groups targeting cryptocurrency exchanges and DeFi platforms globally
- Fake remote-work job applicants using stolen identities to gain IT contractor positions at Western companies
- Malware distributed via fake job interview coding tests, documented as a North Korean state tactic against software developers worldwide
Job scams
- Companies unknowingly hiring North Korean state-linked IT workers using false identities and stolen documents
- Fake recruiter outreach on LinkedIn used to deliver malware to software engineers as part of documented state campaigns
Romance scams
- Not a typically documented risk originating from within North Korea given lack of internet access for ordinary citizens
Investment scams
- Cryptocurrency theft via exchange hacks attributed to North Korean state-linked groups, rather than retail investment scams originating domestically
How to report a scam here
- If traveling, all logistics go through your approved tour operator; there is no independent consumer protection body to appeal to inside the country
- If you suspect a job applicant may be using a false identity linked to North Korean IT-worker schemes, report to the FBI (US) or your national cybercrime authority
- Companies suspecting a compromised hire should consult the FBI, CISA, or their national cybersecurity agency's published guidance on DPRK IT worker fraud
- Cryptocurrency theft victims should report to their exchange, local police and national cybercrime reporting body immediately
Local reporting & protection links
- FBI IC3 (for DPRK-linked cyber fraud reports) — US-based victims of North Korean state-linked cyber fraud can file at ic3.gov
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
There is no independent local banking dispute process accessible to foreigners; report card or account fraud connected to North Korea-linked schemes to your home bank and national cybercrime authority.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
Can tourists travel independently in North Korea?
No. All foreign tourism is arranged through state-approved tour operators with fixed itineraries and government-assigned guides; independent travel is not permitted.
What is the North Korean IT-worker scheme?
US and allied government agencies have documented schemes where individuals conceal their North Korean nationality to obtain remote IT jobs at foreign companies, funneling wages to the North Korean state; companies are advised to rigorously verify remote hires' identities.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance