HR-9963-119
Referred to the House Committee on Foreign Affairs.
Sponsored by Young Kim (R-CA)
What it does
This bill would authorize the Secretary of State to coordinate with allied and partner governments to detect, attribute, and disrupt North Korean schemes in which workers pose as foreign nationals to obtain remote IT jobs and funnel earnings to the North Korean regime. It would also authorize engagement with private sector entities — including cybersecurity firms, financial institutions, digital asset platforms, and online labor marketplaces — to counter these schemes. Additionally, it would allow the State Department to increase reward amounts through the Rewards for Justice Program for information about these activities, and would require the Secretary of State to submit reports to Congress on the scope of the problem and U.S. counter-efforts for two years after enactment.
Who benefits
U.S. and allied companies that unknowingly hire North Korean IT workers posing as legitimate employees, who would gain better detection tools and awareness. Cybersecurity firms and digital asset platforms engaged as private sector partners, who may gain new government coordination relationships. Countries hosting or targeted by these schemes, who would receive technical training and security assistance. Populations in countries subject to North Korean weapons proliferation threats, who would benefit from reduced regime revenue. U.S. national security interests broadly, through reduced funding for North Korea's weapons programs.
Who is hurt
North Korea's government and its weapons programs, which rely on remote IT worker revenue estimated by the U.S. government at hundreds of millions of dollars annually. Third-country nationals who may face increased scrutiny when applying for remote IT work due to heightened identity verification measures. Online labor marketplaces and digital platforms that may face compliance burdens from new coordination requirements. Countries identified as "hosting or enabling" North Korean remote workforce activity, which could face diplomatic pressure or sanctions.
Supporters argue
Supporters argue that North Korean IT workers have infiltrated hundreds of U.S. and allied companies — the DOJ and FBI have issued multiple public advisories documenting this — generating revenue that directly funds ballistic missile and weapons of mass destruction programs in violation of UN Security Council resolutions. They contend that the bill's multilateral approach, combining allied sanctions alignment, private sector engagement, and the Rewards for Justice Program, addresses a documented gap in international enforcement that unilateral U.S. action alone cannot close.
Opponents argue
Opponents argue that the bill is largely duplicative of existing executive branch authorities — the State Department already coordinates with allies on sanctions and already engages the private sector on cybersecurity threats — and that authorizing what the executive branch can already do adds little enforcement value without dedicated funding or mandatory action. They contend that the reporting requirements are limited to two years and the bill's permissive "may" and "is authorized" language gives the Secretary of State broad discretion to do nothing, making the legislation largely symbolic rather than operationally effective.