Not All Overseas Income Is Alike: DPRK Medical Workers and the Limits of Sanctions Equivalence
The international community should not treat every form of overseas Democratic People’s Republic of Korea (DPRK) income generation as analytically equivalent. United Nations sanctions law requires Member States to repatriate DPRK nationals earning income abroad, and there are strong reasons for that: overseas workers can generate foreign currency for Pyongyang that may support its weapons programs, may be subject to coercive labor practices, and can form part of the DPRK’s systematic sanctions evasion efforts. The question is not whether this legal obligation exists. It is whether future sanctions design should distinguish more carefully between revenue streams that are socially destructive and those that, while still problematic, deliver real public benefit.
DPRK medical workers present this dilemma sharply. A doctor in a hospital in Kufra, Pemba or another fragile setting is not the same policy problem as a cyber unit stealing cryptocurrency, an arms procurement facilitator, or a front company helping move prohibited goods. The former may generate revenue for the DPRK, but it can also fill a health gap in places where the host state cannot easily provide specialist care and where international medical personnel may be scarce, difficult to recruit and retain, or unable to operate consistently. This suggests that policymakers and sanctions experts need an analytical framework that does not automatically treat all income generated by the DPRK as the same kind of sanctions problem.
The Sanctions Logic
Resolution 2397 required Member States to repatriate DPRK nationals earning income in their jurisdictions, together with DPRK government safety oversight attaches monitoring DPRK workers abroad, no later than 24 months after the resolution’s adoption. The deadline expired in December 2019. Yet DPRK nationals continued to work overseas after that date, including in the medical, restaurant and construction fields. Host states that continue to allow such employment do so in violation of Security Council sanctions.
The rationale behind these sanctions stems from the fact that DPRK overseas workers are not ordinary migrant laborers operating in a free labor market. Official advisories and specialist research have described systems of wage capture, surveillance, restricted movement and state control. The US government’s 2022 advisory on DPRK information technology workers stated that many overseas DPRK workers in various industries face excessive hours, close surveillance, unsafe living conditions, restricted movement and wage withholding of up to 90 percent. Pyongyang uses overseas workers to generate hard currency while exposing them to practices that may indicate forced labor.
Once income is routed back to Pyongyang, it may be difficult to distinguish the salary of a hospital worker from that of other DPRK overseas workers. Socially useful work can therefore become part of a coercive revenue system. But the policy analysis does not end there.
The Medical Cases Are Different
DPRK medical workers have often been deployed in places with genuine health sector shortages. Overseas medical work is therefore a distinct policy problem within the broader DPRK overseas worker typology. While relevant in sanctions evasion investigations and likely exploitative, it is not merely illicit revenue generation.
Mozambique is a revealing case. In its 2020 implementation report to the 1718 Committee, Mozambique stated that, except for medical doctors working under a specific health sector protocol, no DPRK citizen had been hired since 2015. The DPRK Panel of Experts also reported that 97 DPRK doctors of various specialties were working under a bilateral health cooperation protocol, mainly providing primary health care to help address the country’s doctor-to-population constraints. In May 2021, the World Health Organization reported that more than 1.2 million people urgently needed health assistance in Cabo Delgado after armed attacks deepened an already protracted humanitarian crisis. Mozambique later suspended the protocol and decided not renew contracts expiring in 2020 and 2021 after receiving further clarification regarding resolution 2397. Maputo’s own report nevertheless shows why the issue warrants attention: the doctors were embedded in the health system and not easy to replace.
Libya presents a similar dilemma. In January 2023, Libyan reporting stated that a 38 person North Korean medical team had arrived in Kufra to work at Martyr Atiya Al-Kashef Teaching Hospital. The team included 26 doctors and 12 nurses covering general surgery, anesthesiology, gynecology and childbirth, pediatrics, orthopedics, dentistry and other specialties. The same report noted that North Korean medical staff had previously worked in Kufra before leaving in 2015 because of security conditions. This indicates the reactivation of a previously interrupted medical cooperation channel rather than an entirely new relationship.
The continuity was visible before 2023. In April 2021, Libya’s health minister publicly sought cooperation with the DPRK Ambassador, including logistical support, air medical services, ambulances and management of hospitals in southern Libya. The DPRK’s Ambassador replied that he would oversee the return of medical staffers once security and coronavirus restrictions allowed. Libyan actors have viewed DPRK medical personnel as a practical resource for underserved southern hospitals, rather than primarily through the lens of Security Council sanctions implementation.
More recent cases include in Pointe-Noire, Republic of the Congo, the Polyclinique de la Raffinerie, which states that a public-private partnership with the “Korean state” provided four professors and three specialist doctors. The clinic confirmed that the doctors were North Korean, while local patients reportedly regarded the care as accessible and of good quality.
The Lilu Specialist Hospital in Abuja presented a different model. Investigative reporting found that it operated without registration from the relevant health authority, received patient payments through its North Korean manager’s personal bank account, and closed after publicity prompted regulatory scrutiny.
These cases raise the same sanctions implementation issues, but presented varying governance, transparency and public interest considerations.
Income, Harm and Host-Country Public Benefit
The harder policy question is whether all income generated by DPRK workers abroad should be treated alike. The answer should be no, at least in terms of host country public benefit. But socially useful income is not policy neutral in the DPRK context.
A North Korean surgeon performing operations in southern Libya may provide direct public benefit. A DPRK doctor assigned to a provincial hospital in Mozambique may help fill a real service gap. These activities differ morally and operationally from cyber theft, fraudulent IT worker schemes or proliferation smuggling. They are not equivalent in harm, visibility or host country public benefit.
At the same time, the humanitarian value of medical labor does not erase the structure through which it is organized. DPRK overseas workers may be monitored by state agents, deprived of their full wages, pressured through family members at home, and used as tools of state revenue generation. RUSI’s study of North Korean proliferation financing in southern and eastern Africa identified medical work and construction as among the most prevalent reported sectors for North Korean overseas workers in the region. The medical cases are therefore not marginal anomalies; they are part of a documented regional pattern of DPRK labor deployment.
That creates the central paradox. The work can be socially beneficial while the system remains exploitative and unlawful.
Why the Distinction Matters Now
The distinction matters even more after the end of the UN Panel of Experts mandate. Russia’s March 2024 veto ended the Panel’s formal monitoring role even though the sanctions regime itself remains in place. The creation of the Multilateral Sanctions Monitoring Team (MSMT) is an important effort to preserve investigative scrutiny and reporting, but it does not fully replace a UN-mandated expert body reporting through the 1718 Committee. This leaves Member States, coalitions and researchers with a more fragmented evidentiary environment as DPRK sanctions evasion continues to become more complex.
It also comes at a time when DPRK cyber-enabled revenue generation has become far larger and more direct in its security impact. Chainalysis reported that more than $2.17 billion was stolen from cryptocurrency services in the first half of 2025 overall, with the DPRK-linked $1.5 billion ByBit hack accounting for the majority of those service losses. The same report described the ByBit incident as the largest single hack in crypto history. The scale is both qualitatively and quantitatively different from a medical team deployed to a hospital that could not otherwise function without additional medical personnel.
This is not an argument for ignoring DPRK medical labor. Nor is it an argument that Member States may disregard existing Security Council obligations. It is an argument for proportionality and prioritization in policy analysis. Cyber theft, fraudulent IT worker schemes, arms transfers, illicit shipping, front companies and financial facilitators should remain at the center of enforcement strategy. Medical deployments in fragile health systems should still be treated as sanctions violations, but they should also be understood as a distinct problem: socially useful activity embedded in a system where, precisely because the hiring is prohibited and often opaque, the laborers themselves may face significant abuse and have few options for recourse.
Toward a More Discriminating Policy
The strongest objection to differential treatment is legally correct: under current law, Member States cannot decide that DPRK medical workers are socially useful and therefore decline to apply the repatriation requirement. That resolves the implementation question, but not the policy-design question.
The Security Council has previously recognized that employment of DPRK nationals might serve a humanitarian purpose. Paragraph 17 of Resolution 2375 allowed the 1718 Committee to approve additional work authorizations on a case-by-case basis where employment was required for humanitarian assistance, denuclearization or another purpose consistent with the resolutions’ objectives. Resolution 2397 subsequently imposed the broader repatriation requirement, while also reaffirming that DPRK sanctions were not intended to produce adverse humanitarian consequences and retaining case-by-case exemption authority for humanitarian purposes. Resolution 2664 later reinforced the broader principle that sanctions should not impede humanitarian assistance or activities supporting basic human needs, although its standing humanitarian carveout applies to asset freezes, not the overseas-worker measure.
Resolution 2664 also requested the Secretary General to examine the unintended adverse humanitarian consequences arising from sanctions regimes. The Secretary General’s subsequent report provided Recommendations, noting that “…the Security Council may need to make further adjustments” to the design and scope of the humanitarian carveout.
These provisions do not establish a current exception for DPRK medical workers abroad. They do show that supervised humanitarian calibration is not alien to Security Council sanctions design. A future pathway would therefore require new Security Council language or an agreed 1718 Committee mechanism, supported by clear implementation guidance. It could not be created through unilateral national discretion.
Any future medical carve-out would need to be narrow, transparent and protective of worker rights. It should require direct contracts with hospitals or ministries; demonstrated host-country need; independent credential verification; transparent salary channels; worker possession of passports; access to labor inspection; and safeguards against diversion of wages to sanctioned entities. The contrast between Pointe-Noire and Abuja shows why those conditions matter. An occupational label alone cannot establish public benefit or protect against regulatory abuse.
Even without legal reform, governments and researchers can improve the analytical framework. Cyber theft, arms procurement and overseas medical work may all be sanctions-relevant, but they do not present the same mix of harm, public benefit, coercion risk and security impact. Recognizing that difference would not legalize prohibited conduct. It would make the policy debate more precise and help identify what a credible future exemption would have to prevent.
Conclusion
DPRK overseas medical work should not be romanticized. It is part of a labor-export system that raises serious sanctions and human-rights concerns. But it should not be treated as analytically equivalent to cyber theft or proliferation-related activity. The Libya, Mozambique, Republic of the Congo and Nigeria cases show that DPRK medical workers can provide real services in fragile or underserved settings. They also show that the same occupational category can encompass both formal health cooperation and opaque, poorly regulated private activity.
The humane policy position is not that medical income is “good income,” or that it should be allowed without regard to the violation of international law it represents. It is that not all income is alike. Some DPRK overseas revenue streams are socially destructive by design. Others may produce public benefit while still flowing through a coercive and nontransparent system. Future sanctions design should be able to reflect that distinction. If it cannot, it risks treating a doctor in Kufra and a hacker behind a crypto heist as the same kind of problem. They are not.