Amazon’s Bold Move: Blocking Suspected North Korean Agents

In today’s world of digital work, things are not always what they seem. Recently, the tech giant Amazon shared some very startling news that has put the whole industry on high alert. The company revealed that it has blocked over 1,800 job applications from suspected North Korean agents since April 2024. Amazon’s Bold
These individuals were not looking for a career; instead, they were part of a secret plan to fund their government. By pretending to be regular IT workers, they hoped to earn big salaries and send the money back home. This “digital invasion” is a major wake-up call for companies everywhere.
The Secret Goal of the North Korean Operatives
So, why would a country like North Korea want to work for a company like Amazon? The reason is quite simple and very focused on money. Because North Korea faces many international sanctions, it is very hard for them to get foreign currency. To solve this, the regime sends its best IT workers to apply for high-paying remote jobs in the United States and Europe.
Their goal is to get hired, earn a paycheck, and then “funnel” that money back to fund their weapons programs. Amazon’s Chief Security Officer, Stephen Schmidt, explained that this is a “scale” problem that affects the entire tech industry. It is a quiet way for a sanctioned nation to steal a piece of the global economy.
How “Laptop Farms” Hide the Truth
You might ask how someone from North Korea can pretend to live in America. They use a clever and sneaky method called a “laptop farm.” In this setup, a person based in the U.S. receives a corporate laptop from the company that is hiring. Instead of using the computer themselves, they connect it to the internet and let someone overseas control it.

This makes it look like the worker is sitting in an apartment in Arizona or New York when they are actually in Pyongyang or China. Earlier in 2025, authorities found 29 of these illegal farms across the country. One woman in Arizona was even jailed for helping these agents earn over $17 million in illicit gains.
Identifying the 110-Millisecond Clue
Amazon used some very high-tech tools to catch these “thugs” in the act. One of the most amazing ways they found a fake worker was by measuring keystroke latency. This is a fancy way of saying they timed how long it took for a person’s typing to show up on the server. For a worker in the U.S., the delay should be less than 100 milliseconds.
However, Amazon noticed a delay of 110 milliseconds on one worker’s laptop. That tiny gap of just 10 milliseconds was enough to prove the person was actually working from across the ocean. It is incredible that such a small detail could reveal such a big secret.
Using AI to Screen for “Red Flags”
Amazon does not just wait for people to start working; they try to stop them during the application phase. The company uses advanced Artificial Intelligence to scan thousands of resumes every single day. This AI looks for specific “red flags” that might suggest a fake identity.
For example, it checks if a phone number is formatted incorrectly or if a school degree seems suspicious. The AI also analyzes connections to over 200 high-risk institutions known for training North Korean hackers. By using technology to do the heavy lifting, Amazon can spot patterns that a human recruiter might miss during a busy day.
The Danger of Stolen LinkedIn Profiles
One of the newest and most dangerous parts of this scam involves stolen identities. Instead of making up a fake person, these agents are now “hijacking” real LinkedIn accounts. They look for accounts belonging to real software engineers that have been inactive for a while. Once they take over the profile, they use the person’s real history and skills to apply for jobs.
This makes them look very credible to a hiring manager who is just doing a quick check. It is a scary thought that your own professional profile could be used by a foreign agent to commit fraud. This is why keeping your online accounts secure is more important than ever.

Beyond Tech: A Multi-Industry Threat
While Amazon is a big target, these agents are not just looking at tech companies. Reports show that they are now trying to get jobs in finance, healthcare, and public administration. In these industries, they might get access to even more sensitive information like patient records or bank details.
The FBI has warned that once these workers are inside a company, they sometimes steal “proprietary source code” and try to extort the business. They might threaten to leak the company’s secrets unless they are paid a large ransom. This turns a simple hiring mistake into a massive national security risk.
How to Protect Your Own Company
If you run a business or work in HR, you might be wondering how to stay safe. Experts suggest that you should always require on-camera video interviews and ask specific questions about the applicant’s location. You can even ask the person to wave their hand in front of their face, which can sometimes make “deepfake” video tools glitch.
It is also a good idea to verify education and past jobs directly with the schools and companies listed. Simple steps like checking for “awkward English” or “unnatural speech patterns” can also be big clues. Being a little bit more careful during the hiring process can save a company millions of dollars in the long run.
The Growing Trend of Remote Work Fraud
The rise of remote work has been great for many people, but it has also opened a giant “wrinkle” for fraud. Before the pandemic, most people had to show up in person for an interview and show their ID. Now, many people get hired and start working without ever meeting their boss face-to-face. Amazon’s Bold

This “digital distance” is exactly what North Korean agents are exploiting. Amazon has seen a 33% increase in these types of applications over the past year alone. As long as remote work stays popular, these agents will likely keep trying new ways to sneak into the American workforce. Amazon’s Bold
Staying Vigilant in a Digital World Amazon’s Bold
In conclusion, the news that Amazon blocked 1,800 suspected North Korean agents is a powerful reminder of the hidden risks in the digital world. These state-backed workers are using everything from “laptop farms” to “stolen identities” to fund their government. Thanks to smart technology and a bit of “110-millisecond” detective work, Amazon was able to stop them.
However, the battle is far from over as these agents continue to target other industries across the globe. By staying curious and checking the details, we can all help protect our workplaces from these “insider threats.” The future of work is remote, but it must also be safe for everyone involved. Amazon’s Bold
Read More Articles Click Here. Read Previous Articles Click Here.