The Side Job Is Simple: Keep a Work Laptop Plugged In at Your House. It Is Also a Federal Crime.

The offer sounds like the easiest money anyone has ever been handed. A company needs a laptop kept online at a residential address in the United States. You plug it in, leave it alone, and get paid monthly. Perhaps you also sit in on a video interview, or let someone borrow your professional networking profile.

The FBI published an alert on this in October, and the headline is that the scheme has flipped. It used to be about fake remote employees. Increasingly it is about recruiting real Americans to stand in front of them.

Look Behind the Curtain

The operation behind it is a state revenue program. North Korean technology workers take remote jobs at Western companies under stolen or invented identities, and the FBI estimates the North Korean government receives eighty-five to ninety percent of the revenue those workers generate.

The obstacle has always been presence. A paycheck needs a bank account, a job needs an interview, a company laptop gets shipped to an address. That is what the facilitator is for. The alert lists what people are being asked to do: appear on camera or sit in on interviews and meetings on the worker's behalf, verify fraudulent identities, hand over access to personal social media or professional networking accounts, receive and reship packages, complete urinalysis tests or fingerprint submissions, and keep employment devices connected to the internet from a private residence. That last one has a name in the field, the laptop farm. The alert also describes facilitators being used for in-person intimidation visits.

None of it is presented to the recruit that way. It arrives as remote work, an equipment-hosting gig, an identity-verification task, and the recruiting is aimed at people under financial pressure.

For anyone who hires, the alert doubles as a checklist. The tools named as indicators are ordinary ones used in an unusual pattern: remote-access software including AnyDesk, TeamViewer, RustDesk, Chrome Remote Desktop and Splashtop appearing on a work machine for no role-related reason; hardware that puts a keyboard and screen on the network, such as TinyPilot, PiKVM and similar devices; broadcast software like OBS Studio with a video-routing plugin; a separate laptop used to drive the company-issued one. Behavioral signals include unusually frequent changes to bank accounts, home addresses and account names.

The Capability Multiplier

The FBI's own framing is the useful part, and it is a correction to how most small employers think about this. Their guidance is identity in depth: layered checks across the whole employment lifecycle, because no single signal identifies these workers. Combinations of behaviors that each look innocent are what gives it away.

They are equally clear about what does not work. Do not rely on ban lists or name-based filtering. It is unreliable, and it mostly catches identity-theft victims whose names were used without their knowledge, plus qualified applicants who happen to share a name.

What does add friction is unglamorous and cheap. Verify identity live rather than on paper. Use employment verification. Require more than one form of identification. Ship equipment to an address you have confirmed and notice when it changes. Watch for remote-access tools on company devices that have no business reason to be there. Treat frequent banking and address changes as a question rather than an inconvenience. For a five-person business these cost almost nothing, and they are the same controls that catch ordinary payroll fraud.

For readers on the other side of it, the message is simpler. Hosting a laptop, lending an identity or sitting in on an interview for someone you have never met is not a gray area, and the alert notes that workers have extorted and threatened facilitators after an arrangement ended. The money stops; the exposure does not.

The Sovereign Action

Two audiences, one habit: verify the person, not the paperwork.

• Treat any offer to host equipment, lend a professional profile, or appear in an interview for someone else as what it is. Decline it and report it, whatever the pay.
• If you hire remotely, verify identity live and in layers rather than through documents alone. No single check is sufficient.
• Audit company devices for remote-access and screen-sharing software that nobody's job requires.
• Make a changed bank account or home address a conversation, not a form update.
• Skip the name-based block lists. The FBI says they are unreliable and that they hit identity-theft victims hardest.