In a recent filing submitted to the United States Department of Justice, investigators disclosed internal communications from the military wing of Hamas that provide a detailed roadmap for how the organization seeks to fund its activities through digital assets. The documents, which were part of a broader effort to dismantle the group’s financial networks, show that Hamas officials explicitly warned potential donors against using the popular cryptocurrency exchange Binance as a conduit for their contributions.
Instead, the group recommended a series of alternative platforms—namely Trust Wallet, Bybit, OKX, Kast, and Redotpay—paired with a specific instruction to transfer the proceeds to an external wallet on the TRON blockchain. The guidance appears in a series of messages that were intercepted by law‑enforcement officials during a multi‑year investigation into the financing of terrorist organizations. In the messages, Hamas operatives describe Binance as “highly visible” and therefore “risky” for moving funds that could be traced back to the organization. By contrast, they portray the suggested platforms as less scrutinized, more private, and therefore better suited for the covert movement of money.
The recommendation to use an external TRON wallet is particularly noteworthy because the TRON network, while known for its fast transaction speeds and low fees, also offers a degree of anonymity that can be attractive to illicit actors. The DOJ filing outlines the step‑by‑step process that Hamas supporters are instructed to follow. First, donors are told to acquire a cryptocurrency—most commonly US‑dollar‑pegged stablecoins such as USDT or USDC—through a local exchange or peer‑to‑peer transaction. Once the digital assets are in hand, the donors are directed to transfer them into a Trust Wallet or one of the other listed services.
These wallets function as custodial or non‑custodial accounts that can hold a variety of tokens across multiple blockchains, including TRON. After the assets are safely stored, the next instruction is to send the funds to a specific TRON address that is controlled by Hamas operatives. The address is described in the documents as an “external TRON wallet,” indicating that it resides outside the immediate control of any centralized exchange and thus evades many of the compliance checks that traditional financial institutions must perform. Why TRON?
Analysts point out that the TRON ecosystem is popular among certain segments of the cryptocurrency community because it offers near‑instant settlement and negligible transaction costs, which are advantageous for moving large sums without attracting attention. Moreover, the blockchain’s architecture allows users to create tokenized assets and smart contracts with relative ease, providing additional layers of obfuscation. By using a TRON address that is not linked to any known exchange, Hamas can receive funds that are difficult for investigators to trace, especially when the initial purchase of the stablecoin was conducted through a peer‑to‑peer platform that does not retain detailed user data. The decision to avoid Binance is also strategic.
Binance, as one of the world’s largest cryptocurrency exchanges, is subject to extensive regulatory oversight in multiple jurisdictions, including the United States, the European Union, and Japan. The exchange has implemented robust Know‑Your‑Customer (KYC) and Anti‑Money‑Laundering (AML) procedures, which include monitoring for suspicious transaction patterns and reporting them to authorities.
By steering donors away from Binance, Hamas attempts to sidestep these compliance mechanisms, reducing the likelihood that its financial flows will be flagged by automated detection systems. Law‑enforcement officials emphasize that the use of multiple wallets and exchanges is a classic tactic employed by illicit actors to create “mixing” layers that obscure the origin and destination of funds. The DOJ’s filing indicates that Hamas not only advises the use of alternative platforms but also recommends that donors regularly change the wallets they employ and rotate the TRON addresses they send money to. This dynamic approach makes it harder for investigators to map a consistent flow of money and to freeze assets once they are identified.
The broader context of this revelation is the increasing reliance of extremist groups on digital currencies to fund operations, procure weapons, and support propaganda efforts. Traditional fundraising channels—such as charitable donations, cash smuggling, and front companies—have become more difficult to sustain due to heightened international scrutiny and financial sanctions. Cryptocurrencies, with their borderless nature and pseudo‑anonymous features, present an attractive alternative.
However, the same attributes that make them appealing to legitimate users also provide a veneer of secrecy for those seeking to evade detection. In response to these findings, the U.S.
government has intensified its focus on cryptocurrency compliance, urging exchanges and wallet providers to adopt stricter monitoring tools and to cooperate more fully with investigative agencies. Recent legislative proposals aim to expand the reach of AML regulations to cover decentralized finance (DeFi) platforms and to mandate that crypto‑related service providers implement real‑time transaction monitoring.
For the public and private sector alike, the Hamas case underscores the necessity of a coordinated approach to counter‑terrorism financing in the digital age. While technology companies continue to innovate and improve the user experience of crypto services, they must also balance those advancements with robust security and compliance frameworks. Failure to do so not only exposes them to regulatory risk but also inadvertently facilitates the flow of money to organizations that threaten global peace and security. In summary, the Department of Justice’s recent filing reveals a calculated effort by Hamas' military wing to guide donors away from high‑visibility platforms like Binance and toward a suite of alternative wallets and the TRON blockchain, where transactions can be executed with minimal oversight.
By leveraging the technical advantages of low‑fee, fast‑settling networks and by employing a rotating set of addresses, the group seeks to create a resilient financial pipeline that can withstand law‑enforcement scrutiny. The disclosure serves as a reminder that as financial technology evolves, so too do the tactics of those who would misuse it, and that continuous vigilance and adaptive regulatory measures are essential to curtailing illicit financing.