State-Sponsored Fraud Infiltrates US Finances

Nations including Iran, North Korea, Russia, and China are systematically conducting financial fraud operations within the United States, a tactic described as statecraft. Iran has developed a parallel financial network, leveraging front companies, nominee directors, and stolen identities to circumvent sanctions and move funds from oil sales. This network, exemplified by sanctions against the Zarringhalam brothers on June 6, 2025, helps finance Iran's nuclear and missile programs.

North Korea is directly embedding IT workers into U.S. companies using fabricated identities derived from stolen personal information. These workers draw salaries that feed into laundering pipelines, obscuring the money's origin. Russia acts as a supplier, with infostealer malware harvesting sensitive data from millions of Americans, which is then sold on dark web markets.

China's contribution includes a 2015 breach of the Office of Personnel Management, exposing sensitive data used to build and sustain false identities at scale. This identity ecosystem, created by China's actions, is now exploited by other nations. These state actors utilize the same tools and markets as ordinary criminals, but with the backing of state intelligence, making them difficult to confront.