Ukrainian National Sentenced to 5 Years in North Korea IT Worker Fraud Case
Ukrainian National Sentenced to 5 Years in Prison for Facilitating IT Worker Fraud Scheme Linked to North Korea
A 29-year-old Ukrainian national has been sentenced to five years in prison for his role in facilitating a large-scale IT worker fraud scheme linked to North Korea.
Background of the Scheme
Oleksandr “Alexander” Didenko pleaded guilty to wire fraud conspiracy and aggravated identity theft in November 2025, after being extradited to the United States from Poland.
How the Scheme Worked
Didenko’s scheme involved stealing the identities of U.S. citizens and selling them to IT workers, who used the stolen identities to secure jobs at 40 U.S. companies.
The IT workers, who were actually located in countries such as China, would then funnel their salaries back to the North Korean regime, which used the funds to support its weapons programs.
Didenko’s Role in the Scheme
As part of the scheme, Didenko operated a website called Upworksell[.]com, which allowed IT workers to purchase or rent stolen or borrowed identities.
He also paid individuals in the U.S. to host laptops at their residences, creating the illusion that the IT workers were located in the country.
Scope of the Scheme
Didenko managed as many as 871 proxy identities and facilitated the operation of at least three U.S.-based laptop farms.
One of the laptops was linked to a laptop farm run by Christina Marie Chapman, who was arrested in May 2024 and sentenced to 102 months in prison in July 2025.
Consequences of the Scheme
The scheme also involved the use of Money Service Transmitters to access the U.S. financial system, allowing Didenko’s clients to transfer employment income to foreign bank accounts.
According to officials, the clients were paid hundreds of thousands of dollars for their work.
“Defendant Didenko’s scheme funneled money from Americans and U.S. businesses into the coffers of North Korea, a hostile regime.” – U.S. Attorney Jeanine Ferris Pirro
“By using stolen and fraudulent identities, North Korean actors are infiltrating American companies, stealing information, licensing, and data that is harmful to any business.” – U.S. Attorney Jeanine Ferris Pirro
Evolution of the Scheme
Despite law enforcement efforts, the North Korean conspiracy continues to evolve, with new tactics and techniques being used to evade detection.
According to a recent report, the IT workers have begun to apply for remote positions using real accounts of individuals they’re impersonating, in an attempt to make their fraudulent applications appear authentic.
Sentence and Restitution
In addition to his prison sentence, Didenko has been ordered to serve 12 months of supervised release and to pay $46,547.28 in restitution.
He had previously agreed to forfeit more than $1.4 million, including $181,438 in U.S. dollars and cryptocurrency seized from him and his co-conspirators.
About Author
English