티스토리 뷰

Your Crypto Wallet Is in Danger — The Real Story of $7.1 Billion from North Korean Hackers to Romance Scammers

 

You get a random text from an unknown number on KakaoTalk. "Hey, are you ○○? We used to work at the same company~" they say, all friendly. A few days later: "I've been making some decent money from crypto lately, wanna try it too?" Honestly, I bet a lot of you have either heard about this or dealt with it yourselves.

But here's the thing—this isn't just bad luck for individuals. It's connected to organized crime happening at a government level. The scale of it is absolutely insane. I literally got chills reading about it.

$7.1 Billion Missing from Korea's Crypto Market?

According to a report from blockchain analytics firm Chainalysis, the scale of illegal cryptocurrency transactions in Korea's market has reached a staggering $7.1 billion (about 9 trillion won). That's a number way too big to just brush off, right?

This includes various types of crime: cyber attacks from North Korea-backed hacking groups, hawala (illegal money transfers), and romance scams that exploit people's emotions. Since Korea is one of the world's most active cryptocurrency trading countries, it's become an incredibly attractive target for criminals.

Type of Illegal Activity Characteristics Scale/Notes
North Korean Hacking State-sponsored cyber attacks, exchange and wallet hacking Largest crypto theft source in the world
Hawala Moving illegal funds across borders using crypto Primary method for money laundering
Romance Scams Building emotional connections via SNS/KakaoTalk, then pitching investments Millions of won lost per victim

Three Methods Used Against Us—Here's How They Work

First, there's North Korean hacking groups. Teams like the Lazarus Group aren't just spraying out malware—they're impersonating job offers or disguising malicious files as work documents to target exchange employees or individual wallet owners. In other words, they're going after people directly.

Second, there's hawala. It's the illegal transfer of money across borders without going through banks, and nowadays crypto is being used as the channel. The scary part is that your own trading account could be involved in this process without you even knowing.

Third—and this is the scariest—romance scams. They start by acting like a good person, and they'll invest weeks, even months of effort. Then they casually mention "I've been making returns on this app" and recommend a specific platform. At first, they even show you small profits. So you put in more money, and the second you try to withdraw, they disappear.

WARNING If a stranger recommends a crypto investment app, assume it's a scam 100% of the time. If they're pushing you to download an app not on the official app store or sending you a "private link," these are classic red flags.

Thinking "It Won't Happen to Me" Is the Most Dangerous Part

Actually, when you look at romance scam victim profiles, people in their 30s to 50s working office jobs are hit the hardest. People who think "I can spot that stuff from a mile away" often end up losing the most. It's because scammers spend months building the relationship—nothing seems sketchy from the start.

It's the same with North Korean hacking. You might think "I'm just a regular person with a trading account, why would I get hacked?" But if the exchange itself gets hacked, your money goes down with it. We've actually seen major Korean exchanges get hit before.

TIP Check if your exchange has ISMS certification (Information Security Management System certification). You can look it up on the Financial Information Institute website. Certified exchanges tend to have higher security standards.

Practical Self-Defense You Can Do Right Now

1
Enable two-factor authentication (OTP) no matter what. Go to your exchange app settings and turn on 'OTP Authentication' or '2-Factor Authentication.' Even if someone gets your password, they can't log in right away. It takes five minutes to set up and the payoff is huge.
2
Never click on investment links from strangers. Whether it's KakaoTalk, Instagram, Telegram—doesn't matter. If someone you don't know sends you an investment-related link or asks you to install an app, just ignore it. If something was genuinely a good investment, you'd find it yourself anyway.
3
Keep large amounts in a personal hardware wallet (cold wallet). A cold wallet is an offline storage device that's not connected to the internet. Even if an exchange server gets hacked, your wallet stays safe. Ledger and Trezor are popular examples.

FAQ

Q. I already sent crypto to someone through a romance scam. Can I get it back?

A. Honestly, it's tough. Once a crypto transaction is complete, it's almost impossible to undo. Still, you should immediately report it to the Police Cyber Crime Report System (ecrm.police.go.kr) and submit your case to the exchange to have that address blacklisted. The faster you act, the better.

Q. Are domestic exchanges safe? What about foreign ones?

A. Domestic exchanges are required to register with financial authorities under the Special Finance Law, so they're relatively safer than unregistered exchanges. Foreign exchanges and apps, on the other hand, are hard to protect legally if something goes wrong. It's best to stick with exchanges registered with the Financial Services Commission.

There's nothing wrong with crypto investing. But you need to know how much attention this market is getting from criminals. Knowledge is the best defense. If reading this made you think "I should check my settings," go ahead and open your exchange app right now and verify your OTP setup. Five minutes is all it takes. 💙