In a recent filing submitted to the United States Department of Justice, investigators disclosed a striking piece of internal communication from the armed branch of Hamas, the Palestinian Islamist organization that controls the Gaza Strip. The document reveals that the group’s military wing has explicitly warned its financial backers to refrain from using the popular cryptocurrency exchange Binance when moving funds. Instead, the militants have outlined a more complex, multi‑step process involving a handful of alternative platforms—Trust Wallet, Bybit, OKX, Kast and Redotpay—culminating in the transfer of digital assets to an external wallet on the TRON blockchain. The guidance appears in a set of instructions that were allegedly shared among Hamas operatives and their overseas supporters.
The language of the memo is pragmatic and technical, reflecting a sophisticated understanding of how modern crypto‑exchange ecosystems function. It begins by acknowledging the growing scrutiny that Binance has faced from regulators worldwide, noting that the exchange’s high profile makes it a frequent target for law‑enforcement investigations. By advising donors to steer clear of Binance, Hamas is attempting to reduce the risk that its financial lifelines will be intercepted, frozen, or otherwise disrupted by authorities.
According to the DOJ filing, the recommended route starts with the donor acquiring cryptocurrency—most commonly US dollars converted into stablecoins such as USDT or USDC—through one of the listed services. Trust Wallet, a non‑custodial mobile wallet, is highlighted as the first point of contact because it allows users to retain full control over private keys, thereby limiting exposure to third‑party oversight.
From there, the instructions advise moving the assets to Bybit or OKX, both of which are major crypto‑derivatives platforms that also support a wide array of token pairs and have relatively lax Know‑Your‑Customer (KYC) procedures in certain jurisdictions. The next step involves using Kast, a lesser‑known platform that reportedly offers fast, low‑fee transfers and has been flagged in the past for facilitating anonymous transactions. Finally, the funds are routed through Redotpay, a service that specializes in converting crypto into fiat currencies and can execute cross‑border payments with minimal traceability.
The ultimate destination is an external wallet on the TRON network, chosen for its high throughput, low transaction costs, and the relative anonymity it can provide when combined with the use of multiple intermediary services. Why the TRON blockchain? Analysts suggest that Hamas favors TRON because its architecture allows for rapid, inexpensive transfers, which is crucial when moving large sums in a covert manner.
Moreover, TRON’s ecosystem includes a variety of decentralized applications (dApps) that can be leveraged for further obfuscation, such as mixing services that blend multiple transaction streams to hide the origin of funds. By the time the cryptocurrency reaches the final TRON wallet, the trail is deliberately fragmented across several platforms, each with its own jurisdictional blind spots. The DOJ’s interest in this matter stems from a broader effort to crack down on illicit financing of terrorist organizations. Over the past several years, U.S.
authorities have increasingly focused on the role of digital assets in enabling extremist groups to bypass traditional banking systems. Crypto’s pseudonymous nature, combined with the global reach of exchanges and wallets, makes it an attractive conduit for funding activities that would otherwise be subject to stringent monitoring under anti‑money‑laundering (AML) regulations.
Legal experts note that the instructions found in the filing illustrate a level of operational security that rivals that of sophisticated criminal enterprises. By deliberately avoiding a single, well‑known exchange, Hamas is attempting to stay one step ahead of law‑enforcement detection tools that rely on transaction monitoring and pattern analysis. The multi‑platform approach also complicates the ability of agencies to issue effective sanctions, as each service may be subject to different regulatory regimes and enforcement priorities.
The revelation has broader implications for the cryptocurrency industry as a whole. Exchanges and wallet providers are under mounting pressure to strengthen their compliance frameworks, implement robust KYC and AML procedures, and cooperate with international investigative bodies. Failure to do so could result in heightened scrutiny, potential blacklisting, or even forced shutdowns in certain markets. At the same time, the industry faces a delicate balancing act: preserving user privacy and financial freedom while preventing the misuse of its platforms for illicit purposes.
For donors sympathetic to Hamas, the guidance underscores the lengths to which the organization will go to safeguard its financial channels. It also serves as a reminder that contributions, whether in fiat currency or digital assets, are subject to intense surveillance by governments seeking to disrupt the flow of resources to groups designated as terrorist entities. The DOJ’s disclosure may act as a deterrent for some potential supporters, but it also highlights the adaptive nature of terrorist financing strategies in the digital age. In summary, the Department of Justice’s filing paints a detailed picture of Hamas' military wing’s strategic shift away from mainstream cryptocurrency exchanges like Binance toward a more convoluted network of wallets and platforms, culminating in a TRON blockchain address.
This maneuver is designed to minimize exposure to regulatory scrutiny, exploit the technical advantages of the TRON network, and ensure that the organization’s funding pipeline remains resilient against ongoing international counter‑terrorism efforts. The case exemplifies the evolving challenge faced by policymakers, law‑enforcement agencies, and the crypto industry in addressing the intersection of emerging financial technologies and global security concerns.