In a series of internal communications that have now been made public through a filing by the United States Department of Justice, the armed branch of Hamas issued explicit guidance to its financial backers on how to handle digital‑currency donations. The directive is clear: supporters should steer clear of using the popular cryptocurrency exchange Binance as an intermediary for moving funds. Instead, the group recommended a handful of alternative platforms and wallets—namely Trust Wallet, Bybit, OKX, Kast, and Redotpay—to funnel the money into a TRON‑based wallet that lies outside the direct control of any single exchange.
The DOJ’s filing, which was part of a broader criminal case targeting the financing networks of the Palestinian militant organization, includes screenshots of messages that appear to have been circulated among Hamas’ fundraising operatives. These messages outline a step‑by‑step process for donors, emphasizing the perceived security benefits of bypassing Binance. The language used in the communications suggests a sophisticated awareness of the regulatory scrutiny that major crypto exchanges face, as well as an attempt to exploit the relative anonymity offered by lesser‑known services and blockchain networks.
According to the documents, the Hamas military wing specifically warned that using Binance could expose donors to law‑enforcement tracking and potential seizure of assets. The organization portrayed Binance as a “high‑risk” conduit because of its compliance obligations and its cooperation with international authorities. By contrast, the recommended alternatives—Trust Wallet, Bybit, OKX, Kast, and Redotpay—were described as “low‑visibility” channels that could more easily mask the origin and destination of the funds. The instructions also included technical details about how to convert fiat currency into cryptocurrency, how to select the appropriate blockchain, and how to generate a TRON wallet address that would receive the final transfer.
The emphasis on TRON is noteworthy; the TRON network is known for its low transaction fees and fast confirmation times, making it attractive for moving relatively large sums without attracting undue attention. Moreover, the TRON blockchain’s design allows for the creation of tokenized assets that can be used to further obfuscate the trail of money. In practice, a typical donor would first acquire a stablecoin such as USDT or USDC on one of the recommended platforms.
After purchasing the stablecoin, the donor would then transfer it to a TRON wallet address that had been pre‑approved by Hamas operatives. From there, the funds could be converted into other cryptocurrencies, split into smaller parcels, or used to purchase goods and services that support the organization’s activities.
The entire process is intended to be as seamless as possible for the contributor, while simultaneously creating multiple layers of anonymity that hinder investigative efforts. The DOJ’s revelation of these instructions underscores a broader trend in which extremist groups are increasingly turning to digital assets as a means of financing. Cryptocurrencies offer a level of cross‑border mobility that traditional banking systems cannot match, and they can be moved quickly, often without the need for a formal identity verification process.
However, the very features that make crypto attractive to illicit actors also present challenges for regulators and law‑enforcement agencies. While major exchanges like Binance have instituted robust Know‑Your‑Customer (KYC) and Anti‑Money‑Laundering (AML) protocols, smaller platforms and decentralized wallets may lack the same level of oversight. Experts in financial crime note that the shift toward using multiple, less‑regulated platforms is a strategic adaptation. By diversifying the channels through which money is moved, Hamas can reduce the risk that a single point of failure—such as a crackdown on one exchange—will cripple its entire funding pipeline.
This approach mirrors tactics employed by other non‑state actors, who have historically used a mix of cash couriers, charitable fronts, and informal value‑transfer systems (like hawala) to move resources. The implications of the DOJ’s findings are significant for policymakers and technology companies alike.
On the one hand, there is a clear need for greater cooperation between governments and crypto service providers to identify and disrupt illicit financing networks. On the other hand, any heavy‑handed regulatory response must be balanced against the legitimate uses of cryptocurrency and the privacy rights of ordinary users. In response to the filing, representatives from several of the mentioned platforms have issued statements denying any knowledge of Hamas’ activities and affirming their commitment to compliance with international sanctions and AML regulations.
They argue that the misuse of their services by a small number of bad actors does not reflect the broader user base, which includes millions of individuals and businesses engaging in lawful transactions. Meanwhile, analysts suggest that the exposure of these internal communications may lead Hamas to further refine its financial tactics.
Potential next steps could involve the adoption of privacy‑focused cryptocurrencies such as Monero or Zcash, the use of mixers and tumblers to further obscure transaction trails, or the establishment of shell companies in jurisdictions with lax financial oversight. Overall, the DOJ’s disclosure provides a rare glimpse into the operational mindset of a militant organization as it navigates the evolving landscape of digital finance. By explicitly advising donors to avoid Binance and instead utilize a suite of alternative wallets and exchanges, Hamas demonstrates a calculated effort to stay ahead of law‑enforcement detection capabilities. The episode highlights the ongoing cat‑and‑mouse game between illicit financiers and authorities, a dynamic that is likely to intensify as cryptocurrency technology continues to mature and proliferate across the globe.