Coinbase Tightens Hiring Rules Amid North Korean Infiltration Threats

Coinbase is overhauling its security protocols after uncovering attempts by North Korean workers to exploit its remote hiring policies and gain access to internal systems. The crypto exchange, one of the largest in the United States, will now require U.S. citizenship, fingerprinting, and in-person orientation for roles involving sensitive infrastructure.

CEO Brian Armstrong revealed the new measures during a podcast appearance with Stripe president John Collison, explaining that hostile actors have become relentless in their efforts to penetrate the company. “It feels like there’s 500 new people graduating every quarter from some kind of school they have – that’s just their whole job,” Armstrong said, referring to organized attempts to infiltrate American companies.

The FBI recently issued its own warning, noting that North Korean IT workers are increasingly trying to embed themselves within U.S. firms, often aided by Americans who either knowingly or unknowingly assist them. These operatives have been caught reshipping laptops, staging fake interviews, and setting up false businesses to bypass screening procedures.

For Coinbase, the risks have extended beyond fake applications. Armstrong disclosed that customer service agents had been offered bribes in the hundreds of thousands of dollars in exchange for photographs of internal documents. In response, the company has sharply restricted employee access to sensitive systems and has warned that violators face criminal charges rather than quiet dismissals. “When we catch people, we don’t walk them out the door; they go to jail,” Armstrong said.

The company is also strengthening its domestic presence. It has opened a new customer service hub in Charlotte, North Carolina, and is hiring more U.S.-based support staff to reduce reliance on remote workers abroad. Video interviews have become mandatory for all applicants, with requirements that cameras remain on to verify physical presence and prevent the use of AI-generated deepfakes or off-screen coaching.

The tougher rules reflect the growing challenges of operating in a digital environment where fraud tools are becoming more sophisticated. Armstrong suggested that proof of physical presence could become an industry standard once again as cybercrime evolves.

In parallel with its security overhaul, Coinbase has added the USD1 stablecoin, issued by World Liberty Financial, to its listing roadmap. The token has political overtones, given that Armstrong publicly supported Donald Trump’s 2024 presidential campaign and donated to it. Coinbase has clarified that trading will not begin until sufficient liquidity and technical infrastructure are in place.

World Liberty recently expanded the token’s supply by minting $205 million in new USD1, raising its circulation to $2.4 billion. Much of that capital came from MGX, an Abu Dhabi investment firm that signed a $2 billion deal with a major crypto exchange earlier this year.

For Coinbase, the convergence of security risks and political scrutiny underscores the complex environment in which it now operates—an exchange balancing regulatory compliance, geopolitical pressures, and the fast-moving world of digital assets.