Two state-trained IT specialists were arrested in Wonsan in July 2026 for running a smishing and voice-phishing scheme that drained e-wallet funds from North Korea's wealthy donju market entrepreneurs. The pair sent malware-laden text messages impersonating the central bank or inspection agencies, stealing Jonsong payment-app credentials in real time, then leveraged stolen family data to extort additional money through fake child-detention calls. The fraud caused major donju in Wonsan, Sinuiju, and Chongjin to lose lifetime savings, triggering wholesale market disruption and prompting a Ministry of Social Security task force now probing possible accomplices and fund flows.