In a recent filing submitted to the United States Department of Justice, investigators disclosed a series of internal communications from the military wing of Hamas that provide a detailed look at how the organization attempts to finance its operations using digital currencies. The documents reveal that the group is actively advising its supporters and financial backers to steer clear of using the popular cryptocurrency exchange Binance as a conduit for moving funds.
Instead, the Hamas operatives are directing donors toward a handful of alternative platforms—namely Trust Wallet, Bybit, OKX, Kast, and Redotpay—so that the money can ultimately be transferred into an external wallet on the TRON blockchain. The guidance appears in a set of messages that were intercepted by law‑enforcement agencies during a broader investigation into illicit financing networks linked to extremist groups.
In the messages, Hamas’ armed wing explicitly warns its donors that Binance is "high‑risk" and "subject to heightened scrutiny" by regulators and intelligence agencies. The group argues that using Binance could expose both the donor and the organization to detection, seizure, or account freezes, potentially jeopardizing the flow of resources needed for its militant activities. By contrast, the recommended platforms—Trust Wallet, Bybit, OKX, Kast, and Redotpay—are portrayed as more discreet and less likely to attract the attention of authorities. The communications advise supporters to first acquire cryptocurrency on one of these services, then to move the assets to a TRON‑based wallet that is not directly linked to any identifiable personal information.
The TRON network, known for its fast transaction speeds and relatively low fees, is highlighted as an ideal vehicle for rapid, cross‑border transfers that can be difficult for investigators to trace. The DOJ filing notes that this operational shift is part of a broader trend among extremist groups to exploit the anonymity and borderless nature of digital assets. Traditional fundraising channels—such as cash couriers, charitable fronts, and informal value‑transfer systems—have increasingly come under pressure from financial regulators and intelligence services. In response, groups like Hamas have turned to cryptocurrencies, which can be moved instantly across the globe without the need for physical transport or the involvement of banks that are subject to anti‑money‑laundering (AML) controls.
Experts in financial crime and counter‑terrorism financing say the move to TRON and the specific wallet recommendations are strategic. TRON’s architecture allows for the creation of tokenized assets and smart contracts that can be used to automate the distribution of funds to multiple recipients, further complicating the investigative trail. Moreover, the use of decentralized wallets—where the private keys are held solely by the user—means there is no central authority that can be compelled to disclose transaction data, unlike centralized exchanges that are required to collect Know‑Your‑Customer (KYC) information. Law‑enforcement officials involved in the case emphasized that the guidance provided by Hamas’ military wing demonstrates a sophisticated understanding of the cryptocurrency ecosystem.
The group appears to be conducting its own internal risk assessments, weighing the relative exposure associated with each platform. For example, Binance, being one of the world’s largest exchanges, has a robust compliance program and is under constant scrutiny from regulators in the United States, Europe, and Asia.
By contrast, services like Trust Wallet—a non‑custodial mobile wallet—do not hold user funds on their servers, reducing the likelihood of a forced shutdown or data seizure. The documents also reveal that Hamas is not merely relying on a single cryptocurrency. While the focus is on TRON, the messages mention that donors may also use other coins that are compatible with the TRON network, such as USDT‑TRC20, to further obscure the source and destination of funds.
This diversification helps the organization mitigate the risk that a crackdown on a particular token could disrupt its financial pipeline. From a policy perspective, the revelations underscore the challenges that regulators face in keeping pace with the rapid evolution of digital finance.
Traditional AML frameworks were designed around fiat currency and bank transfers; adapting them to the decentralized, pseudonymous world of crypto requires new tools, such as blockchain analytics, enhanced reporting requirements for virtual asset service providers, and international cooperation among financial intelligence units. In response to the growing use of cryptocurrencies by extremist groups, several governments have introduced or are considering legislation that would require exchanges and wallet providers to implement stricter KYC and transaction monitoring protocols.
The United States, for instance, has expanded the scope of the Bank Secrecy Act to cover certain digital asset transactions, and the Financial Crimes Enforcement Network (FinCEN) has issued guidance on the obligations of crypto‑related businesses. Nevertheless, the Hamas communications illustrate that even with tighter regulations, determined actors can find ways to circumvent oversight by leveraging less regulated platforms and blockchain networks that prioritize privacy.
The DOJ filing calls for continued vigilance, enhanced intelligence sharing, and the development of advanced analytical capabilities to trace the flow of crypto‑funded terrorism financing. In summary, the newly released DOJ documents provide a rare glimpse into the operational playbook of Hamas' military wing as it navigates the complex landscape of cryptocurrency financing.
By steering donors away from Binance and toward a suite of alternative services and a TRON‑based wallet, the group seeks to reduce its exposure to detection while maintaining a steady stream of resources for its activities. This development highlights the ongoing arms race between extremist financiers and the agencies tasked with disrupting their money flows, and it signals the need for adaptive, technology‑driven responses from policymakers and law‑enforcement bodies worldwide.