In a series of recent disclosures obtained by the United States Department of Justice, investigators have uncovered detailed instructions from the military wing of Hamas—known as the Izz al-Din al-Qassam Brigades—directed at its financial backers. The documents reveal a concerted effort by the organization to evade detection by Western financial regulators and cryptocurrency exchanges by steering donors away from the popular trading platform Binance and toward a more fragmented network of digital wallets and lesser‑known exchanges.
The DOJ filing, which forms part of a broader crackdown on illicit cryptocurrency use by extremist groups, outlines a step‑by‑step guide that Hamas operatives circulated among sympathizers and potential donors. The guide explicitly cautions supporters not to transfer funds directly through Binance, citing heightened scrutiny and the platform’s growing compliance infrastructure as reasons why such transactions could be flagged, frozen, or reported to authorities.
Instead, the instruction set recommends a multi‑stage process designed to obscure the money trail and complicate any investigative effort. First, donors are advised to acquire cryptocurrency—primarily US‑dollar‑denominated stablecoins such as USDT (Tether) or USDC—through a series of alternative exchanges. The list includes Bybit, OKX, and the newer platform Kast, each of which operates under different regulatory regimes and offers varying degrees of anonymity. By distributing the acquisition phase across multiple venues, Hamas aims to dilute the concentration of funds on any single exchange, thereby reducing the likelihood of triggering automated anti‑money‑laundering (AML) alerts.
Once the stablecoins are in the donor’s possession, the next recommendation is to move the assets into a non‑custodial wallet, with Trust Wallet singled out as a preferred option. Trust Wallet is an open‑source mobile application that allows users to store private keys locally on their devices, eliminating the need for a third‑party custodian and making it harder for external parties to seize or freeze the holdings. The documents stress the importance of securing the wallet with strong passwords and, where possible, employing hardware‑based security modules to safeguard the private keys.
After the assets are safely housed in Trust Wallet, the instructions call for a transfer to a TRON‑based wallet address. The TRON blockchain is chosen for its high throughput, low transaction fees, and relative obscurity compared to more mainstream networks like Bitcoin or Ethereum. By leveraging TRON’s efficient transaction model, Hamas can move large sums quickly and with minimal cost, further reducing the financial footprint that could attract regulatory attention.
The final leg of the process involves the use of a payment gateway called Redotpay. According to the DOJ documents, Redotpay functions as a bridge that can convert the TRON‑based stablecoins into fiat currency or other cryptocurrencies that are more readily usable in the Gaza Strip and surrounding regions. Redotpay’s role is critical because it provides a layer of fiat conversion that can be funneled into local economies, supporting the brigade’s logistical and operational needs without exposing the origin of the funds. Analysts note that the multi‑platform strategy reflects a sophisticated understanding of both cryptocurrency technology and the evolving regulatory landscape.
By avoiding a single point of entry like Binance—an exchange that has recently tightened its Know‑Your‑Customer (KYC) procedures and cooperated closely with law‑enforcement agencies—Hamas reduces its exposure to compliance checks that could lead to account closures or asset seizures. Moreover, the diversification across Bybit, OKX, and Kast spreads risk, as each platform may have different thresholds for reporting suspicious activity. The DOJ’s filing also includes internal communications that suggest the instructions were disseminated through encrypted messaging apps and private forums frequented by sympathizers in the diaspora. These channels enable the group to reach potential donors across Europe, North America, and the Middle East while maintaining operational security.
The documents indicate that the guidance was periodically updated to reflect changes in exchange policies, new regulatory developments, and emerging technological tools that could either aid or hinder the fundraising effort. From a broader perspective, the case underscores the growing challenge that governments and financial regulators face in tracking illicit financing in the crypto sphere. While traditional banking systems have long been subject to stringent AML and counter‑terrorism financing (CTF) rules, the decentralized and pseudonymous nature of many blockchain networks offers a fertile ground for groups seeking to sidestep oversight.
The use of stablecoins, in particular, presents a paradox: they provide the price stability needed for operational budgeting while retaining many of the anonymity features associated with other digital assets. In response to these revelations, U.S. authorities have indicated that they are expanding their investigative toolkit to include blockchain analytics firms capable of tracing token movements across multiple chains and exchanges.
Partnerships with private sector experts are expected to enhance the ability to de‑obfuscate complex transaction pathways, such as those outlined in the Hamas guide. Additionally, the Department of Justice is working closely with international counterparts to share intelligence and coordinate enforcement actions against the identified platforms and wallet providers.
The implications for cryptocurrency exchanges are significant. Platforms that wish to remain compliant must not only implement robust KYC and AML protocols but also continuously monitor emerging patterns of misuse. This may involve adopting advanced machine‑learning models that can detect atypical transaction sequences—like rapid transfers from an exchange to a non‑custodial wallet, followed by a cross‑chain bridge to TRON and finally to a payment gateway. Failure to adapt could result in regulatory sanctions, loss of market confidence, and potential blacklisting by governments.
For donors sympathetic to Hamas, the guidance serves as a stark reminder of the legal risks associated with supporting designated terrorist organizations. Even if the funds are transferred through seemingly innocuous channels, the underlying intent can still be uncovered, leading to criminal prosecution, asset forfeiture, and severe penalties under U.S.
and international law. In conclusion, the DOJ’s exposure of Hamas’ crypto‑fundraising blueprint illustrates a sophisticated, multi‑layered approach to evading detection by leveraging a combination of alternative exchanges, non‑custodial wallets, low‑cost blockchain networks, and specialized payment gateways.
It highlights the need for continuous vigilance by regulators, exchanges, and law‑enforcement agencies to keep pace with the evolving tactics employed by extremist groups in the digital age. The case also emphasizes the importance of international cooperation and advanced analytics in disrupting illicit financial flows that threaten global security.