In a recent filing submitted to the United States Department of Justice, investigators disclosed a striking piece of evidence that sheds light on the financial tactics employed by the military wing of Hamas, the Palestinian Islamist organization that has been engaged in an armed conflict with Israel for decades. The documents reveal that Hamas’ armed faction has been actively advising its donors and sympathizers to avoid using the popular cryptocurrency exchange Binance when transferring digital assets, and instead to employ a suite of alternative services—namely Trust Wallet, Bybit, OKX, Kast and Redotpay—to move funds into a designated external wallet on the TRON blockchain. This strategic shift in the handling of crypto donations underscores a sophisticated awareness of both the technical and regulatory landscape surrounding digital currencies, as well as a concerted effort to evade detection by law‑enforcement agencies and financial watchdogs.
The DOJ filing outlines a series of internal communications in which Hamas operatives explicitly caution supporters against sending cryptocurrency directly from Binance. Binance, being one of the world’s largest crypto exchanges, is subject to heightened scrutiny from regulators across multiple jurisdictions, including the United States, the European Union and several Asian markets. By steering donors away from Binance, Hamas appears to be seeking to reduce the likelihood that their financial flows will be flagged by anti‑money‑laundering (AML) systems or intercepted by intelligence services monitoring suspicious activity on high‑profile platforms.
Instead, the guidance points donors toward using Trust Wallet, a non‑custodial mobile wallet that allows users to retain direct control over their private keys. This feature is attractive to illicit actors because it eliminates the need for a third‑party intermediary that could potentially share transaction data with authorities.
Similarly, Bybit, OKX, Kast and Redotpay are highlighted as alternative conduits. These platforms, while also facilitating cryptocurrency trades and transfers, are either less regulated, operate under different jurisdictions, or provide more anonymity‑friendly features compared to Binance. The documents specifically mention that the ultimate destination for the transferred funds is an external wallet on the TRON network, a blockchain known for its high throughput, low transaction fees, and a growing ecosystem of decentralized applications. The choice of the TRON blockchain is noteworthy.
TRON’s architecture enables rapid, inexpensive transfers, which is advantageous for organizations that need to move large sums quickly and discreetly. Moreover, TRON’s transaction data, while publicly visible on the blockchain, can be obfuscated through the use of multiple wallet addresses, mixing services, or cross‑chain bridges, making it more challenging for investigators to trace the flow of funds back to the originating donors or the ultimate beneficiaries. Beyond the technical instructions, the DOJ filing provides context about the broader fundraising strategy of Hamas’ military wing.
The organization has increasingly turned to digital assets as a complement to traditional cash donations, charitable fronts, and illicit smuggling operations. Cryptocurrencies offer several benefits: they can be transferred across borders without the need for a banking intermediary, they are less susceptible to seizure once they have been moved into a non‑custodial wallet, and they can be quickly converted into other assets or used to purchase goods and services on the dark web. The shift toward crypto also reflects a global trend among extremist and terrorist groups to adopt emerging financial technologies. Similar patterns have been observed with other organizations that have embraced Bitcoin, Ethereum, Monero and other digital currencies to fund operations, procure weapons, and pay operatives.
However, the specific emphasis on avoiding Binance suggests that Hamas is learning from past experiences where transactions on high‑visibility platforms have been traced and led to arrests or asset freezes. Law‑enforcement agencies, including the FBI and the Department of Homeland Security, have been intensifying their focus on cryptocurrency-related terrorism financing.
The DOJ’s recent filing is part of a broader effort to document and disrupt the financial networks that sustain militant activities. By publicly exposing the internal directives of Hamas’ armed wing, authorities aim to alert financial institutions, crypto exchanges, and the public to the tactics being employed, thereby encouraging enhanced due‑diligence measures and cooperation with investigative bodies. In practical terms, the guidance to use Trust Wallet and the other named platforms involves a series of steps for the donor. First, the donor must acquire the relevant cryptocurrency—often Bitcoin (BTC) or Tether (USDT) on the TRON network (TRC‑20).
Next, they transfer the assets from their personal exchange account (which could be Binance, Coinbase, or another service) into the non‑custodial Trust Wallet. From there, they use the wallet’s built‑in swapping functionality or an external decentralized exchange (DEX) to convert the assets into TRC‑20 USDT, if necessary.
Finally, they send the USDT to the pre‑specified external TRON wallet address provided by Hamas operatives. Each of these stages is designed to minimize the digital footprint that could be captured by blockchain analytics tools. The DOJ documents also highlight the challenges faced by regulators in keeping pace with the rapid evolution of crypto technology.
While some jurisdictions have introduced stringent KYC (Know Your Customer) and AML requirements for exchanges, the decentralized nature of wallets like Trust Wallet means that users can bypass these safeguards entirely. Moreover, the cross‑border nature of crypto transactions complicates jurisdictional authority, as a donor in one country can send funds to a wallet operated out of another country with little oversight.
In response to these revelations, several cryptocurrency platforms have issued statements reaffirming their commitment to compliance and cooperation with law‑enforcement agencies. Binance, for instance, has emphasized its robust AML program and its willingness to share transaction data with authorities when legally compelled. Meanwhile, smaller platforms such as Bybit and OKX have indicated that they are reviewing their internal controls to ensure they are not inadvertently facilitating illicit financing. The exposure of Hamas’ internal crypto‑fundraising instructions serves as a reminder that the battle against terrorism financing is increasingly fought in the digital realm.
As extremist groups continue to adapt and exploit new financial tools, governments and the private sector must collaborate closely, leveraging advanced blockchain analytics, information sharing agreements, and regulatory frameworks that can adapt to the fluid nature of cryptocurrency ecosystems. In conclusion, the Department of Justice’s filing provides a detailed snapshot of how Hamas’ military wing is strategically guiding its donors away from mainstream exchanges like Binance, toward more obscure or less regulated platforms, and ultimately into an external TRON wallet.
This approach reflects a calculated effort to obscure financial trails, reduce exposure to regulatory scrutiny, and exploit the speed and low cost of the TRON network. The information underscores the necessity for ongoing vigilance, enhanced compliance measures, and international cooperation to disrupt the flow of illicit funds that sustain violent conflict and terrorism.