In a recent filing submitted to the United States Department of Justice, investigators disclosed a striking piece of internal communication from the military wing of Hamas, the Palestinian Islamist organization that controls the Gaza Strip. The document reveals that Hamas’ armed faction has been actively guiding its financial backers on how to move digital assets in a way that minimizes the risk of detection by law‑enforcement agencies and financial regulators.
Specifically, the group warned donors not to transfer cryptocurrency directly through Binance, one of the world’s largest and most widely used crypto exchanges, and instead suggested a series of alternative platforms—Trust Wallet, Bybit, OKX, Kast and Redotpay—to funnel funds into an external TRON (TRX) wallet. The DOJ filing, which is part of an ongoing investigation into the financing of terrorism, includes screenshots of chat messages that appear to have been exchanged between Hamas operatives and their supporters.
In those messages, the militants explicitly advise contributors to avoid the “high‑visibility” nature of Binance, citing the exchange’s robust compliance program and its cooperation with international law‑enforcement bodies. By contrast, the recommended services are portrayed as “low‑profile” or “off‑radar” options that allegedly provide greater anonymity and fewer procedural checks.
Trust Wallet, a non‑custodial mobile wallet, allows users to retain direct control over private keys, meaning that the wallet provider does not hold any of the user’s assets and therefore cannot be compelled to share transaction data. Bybit and OKX are both cryptocurrency derivatives exchanges that have, in the past, faced scrutiny for lax Know‑Your‑Customer (KYC) procedures, especially in certain jurisdictions.
Kast and Redotpay are lesser‑known platforms that specialize in peer‑to‑peer crypto transfers and have been flagged in previous intelligence reports for facilitating illicit flows. The common thread among all of these services is their relative lack of stringent identity verification compared with mainstream exchanges such as Binance, Coinbase, or Kraken.
According to the DOJ, the instruction to use an external TRON wallet is also strategic. TRON, a blockchain platform known for its high transaction throughput and low fees, has become a popular conduit for moving large sums of money quickly and cheaply across borders. By sending funds to a TRON address that is not directly linked to any exchange, Hamas aims to create an additional layer of obfuscation that makes it more difficult for analysts to trace the ultimate destination of the cryptocurrency. Once the funds are in the TRON ecosystem, they can be swapped for other tokens, moved to other blockchains via bridges, or converted into fiat currency through a network of informal dealers, often referred to as “crypto‑to‑cash” services.
The revelation of these instructions is significant for several reasons. First, it underscores the growing sophistication of terrorist financing operations, which have increasingly turned to digital assets as a means of bypassing traditional banking channels that are subject to rigorous monitoring and reporting requirements. Unlike cash or wire transfers, cryptocurrency transactions can be executed instantly, cross borders without the need for correspondent banks, and can be concealed behind layers of pseudonymous addresses.
Second, the document highlights a specific tactical shift away from mainstream exchanges that are under heightened regulatory scrutiny. By steering donors toward platforms with weaker compliance frameworks, Hamas seeks to exploit regulatory gaps and reduce the likelihood that their financial streams will be flagged by anti‑money‑laundering (AML) systems.
U.S. authorities have been intensifying their focus on crypto‑related terrorism financing in recent years.
In 2022, the Treasury’s Office of Terrorist Financing and Financial Crimes (TFF) issued an advisory warning that several extremist groups were using digital currencies to fund operations, purchase weapons, and pay operatives. The advisory called on crypto businesses to strengthen their KYC and transaction monitoring practices, especially when dealing with high‑risk jurisdictions. Since then, the DOJ, the FBI, and the Department of the Treasury have launched multiple joint operations targeting illicit crypto networks, resulting in the seizure of millions of dollars in digital assets linked to criminal and terrorist actors. The specific mention of Binance in the Hamas communication is noteworthy because Binance has publicly committed to cooperating with regulators worldwide.
The exchange has instituted a comprehensive compliance program that includes mandatory KYC for users in many jurisdictions, transaction monitoring, and a dedicated team to handle suspicious activity reports (SARs). While Binance remains a popular choice for many legitimate traders, its high profile also makes it a target for law‑enforcement scrutiny. The Hamas directive to avoid Binance therefore reflects an awareness among terrorist financiers of the exchange’s compliance posture and a desire to sidestep platforms that could potentially expose their transactions to authorities.
From a policy perspective, the DOJ’s disclosure raises important questions about how governments and the private sector can better detect and disrupt the use of crypto for illicit purposes. One approach being discussed among regulators is the implementation of standardized reporting thresholds for crypto transactions, similar to the $10,000 cash reporting requirement in the United States.
Another proposal involves enhancing information‑sharing mechanisms between cryptocurrency service providers and intelligence agencies, while still respecting user privacy and data protection norms. Moreover, there is a growing call for international coordination, as the decentralized nature of blockchain technology means that illicit actors can easily shift operations to jurisdictions with weaker oversight. In conclusion, the Justice Department’s filing paints a clear picture of how Hamas’ military wing is adapting its fundraising strategies to the evolving landscape of digital finance.
By explicitly advising supporters to bypass Binance and instead use a suite of less regulated wallets and exchanges to move funds into a TRON wallet, the group demonstrates a calculated effort to evade detection and sustain its operational capabilities. This development serves as a reminder to policymakers, law‑enforcement agencies, and the broader crypto industry that the fight against terrorism financing is an ongoing challenge that requires constant vigilance, robust compliance frameworks, and international cooperation. As cryptocurrency continues to gain mainstream acceptance, the imperative to balance innovation with security becomes ever more critical, ensuring that the technology is not co‑opted by those seeking to fund violence and destabilization.