Report Says North Korean Workers Sold to Russian Employers Under Student Visa Cover as Forced Labour Network Grows

A nine-month investigation by the Hague-based legal group Global Rights Compliance says a Russian broker network has been placing North Korean workers with employers across Russia in conditions the group describes as forced labour, using student visas to get around a United Nations ban on hiring North Korean workers abroad. The report, released on October 29, 2026, describes a commercial operation in which workers are marketed online, enrolled in colleges they do not attend, and then sent for practical training at host companies, where the report says they work long hours, keep only a small share of their pay, and face threats if they try to leave.

The findings matter beyond a single labour case because they connect three larger questions at once: whether United Nations sanctions on North Korean overseas labour are being evaded in plain sight, whether money earned abroad is helping to fund Pyongyang’s weapons programmes, and whether Russia’s wartime economy is increasingly relying on workers brought in under educational cover. The findings are at the centre of the North Korean forced labour Russia report October 2026.

What the report says happened

The broker network at the centre

The report centres on a labour-brokering platform identified as KNDR.su, which it links to Russian businessman Vladimir Sokolov, a man the report says has led a machinery-import business called Black Horse Group since 2007. According to Global Rights Compliance, the platform markets North Korean workers to Russian companies in sectors including agriculture, construction, industry and information technology, presenting them as a ready, disciplined workforce that can be ordered in groups. Investigators say they posed as prospective employers and made contact with the network’s operations director, Ruslan Zhukov, who is reported to have confirmed that North Korean workers have been working in Russia since 2025 and that orders are accepted only in groups of at least fifty. The report treats that minimum order as important evidence that this is not a handful of individual students finding casual work, but a structured supply arrangement designed to deliver labour at scale, with a broker, a platform, and a repeatable process for matching workers to employers.

How workers are presented to employers

According to the investigation, the workers are not advertised as ordinary employees with contracts, rights and the freedom to change jobs. Instead, the report says, they are presented as students on practical training, a framing that changes how employers are told to think about them. One advertisement cited in the report is said to have assured prospective employers that the workers would not run away, a promise that investigators interpret as a selling point built on control rather than choice. The report also says companies seeking workers must undergo an inspection visit from North Korean embassy officials as part of a certification step, which the investigators argue shows direct state involvement rather than a purely private arrangement. That embassy link, if confirmed, would make it much harder to describe the scheme as an accidental paperwork error, because it suggests the placement process itself was checked and approved by officials acting for Pyongyang.

The student-visa route

Enrolment without attendance, as described

The central mechanism described in the report is fictitious enrolment. Workers are said to be listed at Russian colleges so that student visas can be issued, while their real destination is a host company where they carry out practical training that is, in substance, full-time work. In conversations reported by the investigators, Zhukov is said to have described the workers as enrolled in colleges they did not attend in order to avoid the application of labour law, a formulation that, according to the report, explains why the student label matters so much. If workers are students on paper, the argument goes, there is no employment relationship to regulate, no ordinary wage protection to enforce, and no labour inspectorate with an obvious file to open. The report says that legal gap is the point of the arrangement, not a side effect of it, and that it leaves workers in a grey zone where they are neither protected students nor recognised employees.

Why visas matter under sanctions

The visa figures give the story its scale. Russia issued 36,413 visas to North Koreans in 2025, roughly four times the number issued in 2024, and more than ninety-eight percent of those visas were officially for educational purposes, according to figures cited in the reporting of the investigation. South Korean intelligence estimates cited alongside the report put the number of North Korean labourers currently in Russia at more than fifty thousand. Those numbers do not by themselves prove that every student visa holder is a worker, and the report does not claim that they do. But investigators argue that the sharp rise, combined with the concentration in student visas and the broker platform’s own marketing, points to a systematic route rather than a coincidence. The visa is therefore not a detail of the story but its engine, because without an education label, hiring North Korean workers would be a clear breach of sanctions that member states are obliged to enforce.

The working conditions described

Hours, pay and control

The conditions described in the report are stark. Advertisements cited by investigators describe twelve-hour days with only two days off each month, while other material in the investigation describes working weeks of six or seven days and days stretching to eighteen hours in some cases. Workers are said to forfeit up to ninety percent of their earnings to the North Korean authorities, keeping only a small fraction for themselves, a split that investigators say is central to how the scheme funds Pyongyang. The report also describes coercion and threats of retribution against workers and their families as the mechanism that keeps people in place, rather than any formal contract or legal obligation. Taken together, those elements — long hours, minimal retained pay, and fear of consequences at home — are why the investigators use the language of forced labour rather than simply low-paid or exploitative work, a distinction that carries serious legal and diplomatic weight if it is accepted by governments and courts.

The no-run-away promise

The promise that workers would not run away deserves close attention because it reveals how control is marketed as a benefit. For an ordinary employer, a worker who cannot leave is not a normal hire; for a broker selling a workforce, the report suggests, that inability to leave is presented as reliability. Investigators say they confirmed through undercover contact and open-source material that workers were placed at production sites, including a military rations factory, and that at least one site was visited and checked by embassy officials. At one Moscow-region producer of military rations and canned foods, identified as KPP Ruskon, footage is said to confirm about thirty North Korean workers on site, while investigators estimate the true number is likely higher because the network’s minimum order is fifty. The gap between what can be seen on camera and what the ordering rules imply is itself part of the report’s argument: the visible workforce may be only a fraction of the total placed through the network.

The money trail

Commission per worker

The report puts a price on each placement. Brokers are said to receive a commission of between one hundred thousand and one hundred fifty thousand roubles per worker, roughly nine hundred to one thousand eight hundred and sixty dollars depending on the exchange rate used in different accounts of the findings. That commission is paid by the employer or through the brokering chain, and it turns each worker into a revenue-generating unit for the network before a single hour is worked. For employers, the appeal described in the report is a workforce that arrives in bulk, stays put, and costs less in management and turnover than a freely hired team. For the brokers, the commission model rewards volume: the more workers placed, the more fees collected, regardless of the conditions at the receiving site. That incentive structure, investigators argue, helps explain why the platform would advertise so openly and why the minimum order is set as high as fifty workers at a time.

Where earnings are said to go

The larger money question is what happens to wages after they are earned. Global Rights Compliance says overseas forced labour is estimated to generate between four hundred fifty million and eight hundred million dollars for North Korea, money the group says is channelled into the military-industrial complex that sustains the country’s ballistic missile programme. That estimate is presented as an estimate for overseas labour as a whole, not as a precise accounting of this one network’s takings, and it should be read with that limit in mind. Even so, the report’s core claim is that the wage split — with workers keeping only a small share — is not an accident of low pay but a deliberate revenue mechanism. If a large share of earnings is remitted to the state, then each placement does double duty: it supplies labour to a Russian employer and income to Pyongyang, which is exactly what the United Nations sanctions were designed to prevent.

The war-economy link

Factories and military-linked sites

The report says the network also helped support Russia’s war effort in Ukraine, with Sokolov publicising at least two work sites with links to Moscow’s military-industrial complex. The military rations producer is the clearest example cited, because food and canned goods for soldiers are a direct input to sustaining an army in the field, even if they are not weapons themselves. A second site, a United States-sanctioned metal-processing company in Kaluga region identified as Agrisovgas, is said to have been inspected by embassy officials as a potential employer, though the report’s language there is about inspection and potential placement rather than confirmed large-scale deployment. The distinction matters, because it separates what investigators say they have visually confirmed from what they say was under consideration. Both strands, however, point in the same direction in the report’s argument: a labour supply chain that touches the war economy, not merely civilian farms and building sites.

Troops, weapons and labour together

The labour findings sit alongside a much larger military relationship between Moscow and Pyongyang. Since 2024, North Korea has sent more than ten thousand troops to fight alongside Russian forces in the Ukraine war, as well as weapons to replenish Moscow’s dwindling armoury, according to South Korean intelligence cited in the reporting of the investigation. The report’s legal adviser is quoted as identifying two linked problems: North Korea’s use of overseas forced labour to finance its weapons programme, and Russia’s growing reliance on labour to sustain its war economy. Viewed that way, troops, weapons and workers are not three separate stories but three inputs to the same partnership, each filling a gap the other side cannot fill alone. That framing is the report’s most politically charged claim, because it suggests the labour scheme is not a peripheral abuse but a structural part of how the wartime relationship works in practice.

The sanctions question

What the 2017 ban requires

The legal backdrop is a United Nations Security Council resolution adopted after North Korea’s sixth and last nuclear test in 2017, which placed a blanket ban on the hiring of North Korean workers overseas and required member states to send such workers home. The purpose was straightforward: to cut off a revenue stream that Pyongyang could use for its nuclear weapons and missile programmes, by removing the legal basis for employing its citizens abroad. Under that framework, a member state that knowingly hosts North Korean workers is not merely tolerating poor labour practice; it is failing to implement a binding Security Council obligation. The report argues that the student-visa route is designed to defeat that obligation without openly defying it, by relabelling workers as students so that, on paper, no hiring has taken place at all. Whether courts and governments accept that relabelling as a breach will depend on evidence about what the workers actually do each day, not on the visa stamp in their passport.

Why enforcement is difficult

Enforcement is difficult for several practical reasons. First, student visas are issued in large numbers for legitimate reasons, so a rise in student visas does not automatically trigger an investigation, especially when colleges are named on the paperwork. Second, the workers themselves are described as unlikely to complain, because complaints could bring retribution against them or their families, which means the usual labour-inspection trigger — a worker’s complaint — may never arrive. Third, the broker network operates through a commercial platform and private companies, which can make the chain harder to trace than a direct state-to-state deployment. Fourth, Russia is itself a permanent member of the Security Council, which complicates any attempt to use that body to enforce the ban against it. Together, those factors help explain why a scheme described in such detail could, according to the investigators, operate openly online while still evading the sanctions regime it is accused of breaching.

The denials and disputes

What Zhukov says

The report does not present its findings without a response. Global Rights Compliance says it contacted two Russians identified as key figures in the network, but only one replied, denying the accusation. Zhukov is reported to have denied any connection to the Black Horse network in one account, while in another statement attributed to him he is quoted as calling the allegations false, fabricated and categorically rejected in their entirety, and as saying the matter concerns exclusively students of a specialised college sent to Russia under an intergovernmental agreement on exchange of experience and provision of venues for educational and industrial practical training. In the undercover conversations, he is also reported to have said that because the people involved are students, there is no employment relationship and therefore labour laws do not apply. Those two positions — outright denial on the one hand, and a legal argument about student status on the other — will both need to be tested against the underlying evidence about hours, pay, and workplace control.

What remains contested

Several important points remain contested and should not be treated as settled. The exact number of workers placed through this specific network, as opposed to the wider estimate of North Koreans in Russia, is not firmly established in the public reporting. The precise share of earnings remitted in each placement, the identity of every employer site, and whether every site inspected went on to receive workers are all matters where the report offers examples and estimates rather than a complete ledger. Sokolov was sanctioned by the European Union on October 12, 2026, with his assets frozen, for promoting industrial cooperation projects with North Korea, a step that adds an official penalty to the story but does not by itself prove every detail of the labour allegations. Readers should therefore treat the report as a detailed investigative claim that has been put to the people named in it, with a denial on record, rather than as a court judgment.

Questions still unanswered

How many workers are involved

The most basic unanswered question is scale. The report confirms about thirty workers visually at one site, cites a minimum order of fifty, points to more than thirty-six thousand visas in a single year, and sits alongside an intelligence estimate of more than fifty thousand North Korean labourers in Russia overall. Those figures measure different things — confirmed sightings, ordering rules, visa issues, and total estimates — and they cannot simply be added together into a single total for this network. What is missing is a reliable count of how many people were placed specifically through KNDR.su, how long each placement lasted, and how many of those people have since returned, moved, or remained in Russia. Without that count, governments will struggle to judge whether sanctions enforcement should target a single platform, a wider set of brokers, or the visa system itself, and aid and labour groups will struggle to know how many people might need protection.

What happens next

The second unanswered question is what governments will actually do. The European Union has already sanctioned Sokolov, but sanctions against one businessman do not close a platform, reform a visa route, or protect workers already in place. The United Nations, the European Union, and other governments could investigate the colleges named on the paperwork, audit the practical-training placements, interview workers through safe channels, or press Russia for the return of workers under the 2017 resolution. They could also widen sanctions to brokers, employers, or intermediaries, or pursue legal cases based on forced-labour and sanctions law. None of those steps is guaranteed, and Russia’s position as a Security Council member makes collective action through that body especially difficult. For now, the report’s main achievement may be to put a named platform, named figures, and a documented method into public view, leaving the harder question — whether anyone with power over visas, sanctions, or workplaces will act on it — still open.

Comments

comments