Amazon Thwarts 1800 North Korean Job Scams

Amazon has successfully blocked over 1800 fraudulent recruitment apps — job applications submitted by North Korean operatives posing as IT professionals. 

All this was as clearly outlined by the chief information security officer of the company, Stephen Schmidt, when he narrated in a scathing LinkedIn message that the security measures of Amazon had managed to detect and thwart these fraudsters, who used stolen biometrics and professional identities to obtain remote jobs. 

Amazon's chief security officer, Stephen Schmidt said in a LinkedIn post.

"Their objective is typically straightforward: get hired, get paid, and funnel wages back to fund the regime's weapons programs,"

Rising Threat Exposed 

According to chief security officer (CSO) Stephen Schmidt, the company has prevented more than 1,800 suspected DPRK operatives from joining since April 2024, and has detected 27% more DPRK-affiliated applications quarter over quarter this year.

“Over the past few years, North Korean (DPRK) nationals have been attempting to secure remote IT jobs with companies worldwide, particularly in the U.S.”

Attackers use compromised accounts that are kept inactive with the help of breaches of LinkedIn credentials that illegally gain access to the service and pose as authentic software engineers and organize themselves in so-called laptop farms where the U.S. based machines are remotely brought under their control in other countries. 

Amazon combines automated intelligence-based screening systems with human vetting, so as to attract anomalies in the form of unusual telephone number format as well as fake educational qualifications.

Government Cracks Down Hard

The U.S. agencies have also worked hard in enhancing their countermeasures. 

Later, in June 2025, the Department of Justice commenced an arrest, searches of 29 known or suspected “laptop farms” across 16 states, and the seizure of 29 financial accounts used to launder illicit funds and 21 fraudulent websites. 

Accusing them of brokerages that helped the technical labor of Pyongyang to obtain jobs through fake American IDs. 

An Arizona resident was jailed more than eight years after being adjudged in July because she took part in a scheme that earned North Korean interests in excess of $17 million in over 300 businesses. 

Experts Warning

The successes of Amazon are empirically valid examples that multi-layered validation systems work, but persistent industry assimilation is not prevalent. There will be an increase projected. 

Business organizations that fail to follow AI-based authentication procedures and regulatory alerts are vulnerable to the risk of imposing fines, infringement of intellectual property, and financial penalties. 

Even though, a report stated:

“They use generative AI across all stages of their operation,” Meyers said. The insider threat group used generative AI to draft resumes, create false identities, build tools for job research, mask their identity during video interviews and answer questions or complete technical coding assignments

Future Outlook

The scams of information technology in North Korea are expected to rise in 2026 due to growth in the employment of remote technology in the U.S., as well as the implementation of generative artificial-intelligence operations that create perfectly engineered curricula vitae and fake qualified interviews. 

Early cooperation across the industry — sharing threat intelligence and requiring stronger identity checks — is the main lever companies have to blunt these hiring operations, thus limiting weapon-building efforts by the Pyongyang regime before it makes others.