In a recent filing submitted to the United States Department of Justice, investigators disclosed that the military branch of Hamas—known for its armed operations and extensive fundraising network—has issued explicit instructions to its financial backers regarding the handling of digital assets. The guidance, which appears in internal communications recovered by law‑enforcement officials, specifically advises donors to avoid sending cryptocurrency directly from the popular exchange Binance. Instead, the organization urges supporters to employ a series of alternative services—namely Trust Wallet, Bybit, OKX, Kast, and Redotpay—to transfer funds into an external wallet that operates on the TRON blockchain. The documents reveal that Hamas' armed wing is acutely aware of the growing importance of cryptocurrencies in modern conflict financing.
As traditional banking channels become increasingly scrutinized, digital currencies offer a degree of anonymity and speed that can be attractive to groups seeking to move money across borders without attracting the attention of regulators. However, the organization also recognizes that certain platforms, particularly those with a high public profile like Binance, are subject to intense scrutiny from both financial regulators and intelligence agencies.
By steering donors away from Binance, Hamas aims to reduce the risk that its financial flows will be flagged, frozen, or otherwise disrupted. Trust Wallet, a non‑custodial mobile wallet that allows users to store a wide variety of tokens, is highlighted as a preferred tool.
Because it gives users full control over private keys, the wallet reduces the chance that a third‑party service could be compelled to hand over transaction data. Bybit and OKX, both of which are major cryptocurrency exchanges with robust trading features, are also mentioned. These platforms are known for offering a broad suite of services, including the ability to convert fiat currency into digital assets and to move those assets into external wallets with relative ease.
The inclusion of Kast and Redotpay—lesser‑known services that specialize in facilitating cross‑border payments—suggests a layered approach: donors can first acquire crypto on a mainstream exchange, then move it through a series of less‑visible channels before finally depositing it into a TRON address controlled by the Hamas network. The choice of the TRON blockchain is particularly noteworthy. TRON, identified by its native token TRX, is recognized for its high transaction throughput and low fees, making it an efficient conduit for moving large sums quickly.
Moreover, the TRON ecosystem includes a variety of decentralized applications and wallets that can obscure the ultimate destination of funds. By funneling money into an external TRON wallet, Hamas can take advantage of these privacy‑enhancing features while also benefiting from the network’s scalability.
From a law‑enforcement perspective, the DOJ filing underscores the challenges that agencies face when attempting to track illicit financing in the age of digital assets. Traditional investigative techniques—such as monitoring bank wire transfers or following paper trails—are less effective when funds are converted into cryptocurrencies and shuffled through a maze of exchanges, wallets, and blockchain networks. Even when agencies can identify a wallet address, tracing the ultimate beneficiary often requires sophisticated blockchain analytics, cooperation from multiple service providers, and sometimes even legal compulsion to obtain user data. The filing also highlights the broader strategic shift within extremist and militant groups toward embracing fintech innovations.
Over the past several years, a growing number of organizations have published step‑by‑step guides for supporters, detailing how to purchase, store, and transfer crypto while evading detection. These manuals frequently stress the importance of using privacy‑focused tools, avoiding centralized exchanges that are likely to share data with authorities, and employing mixers or tumblers to further obfuscate transaction trails.
In response to these developments, the U.S. government and its allies have increased efforts to regulate cryptocurrency exchanges and enforce anti‑money‑laundering (AML) standards. The Financial Crimes Enforcement Network (FinCEN) has issued guidance that expands the definition of “money transmitter” to include many crypto‑related services, and several jurisdictions have introduced licensing regimes that require exchanges to implement robust Know‑Your‑Customer (KYC) procedures. Nevertheless, the rapid evolution of the crypto ecosystem often outpaces regulatory frameworks, creating gaps that groups like Hamas can exploit.
The DOJ’s disclosure serves as a reminder that digital currencies are not merely speculative assets for retail investors; they have become integral to the financing strategies of non‑state actors engaged in violent conflict. By directing donors to avoid Binance and to use a combination of Trust Wallet, Bybit, OKX, Kast, and Redotpay for transfers to a TRON wallet, Hamas demonstrates a sophisticated understanding of both the technical and operational aspects of crypto finance. This level of operational security indicates that the organization is actively adapting to the changing financial landscape, seeking to protect its revenue streams from disruption while continuing to fund its militant activities.
For policymakers and security professionals, the key takeaway is the necessity of a coordinated, multi‑jurisdictional approach to crypto regulation and enforcement. Enhanced information sharing between exchanges, wallet providers, and law‑enforcement agencies, combined with advanced blockchain analytics capabilities, will be essential to disrupt the financial lifelines of groups that rely on digital assets. As the technology continues to evolve, so too must the strategies employed to safeguard global security from the misuse of cryptocurrency.