In a recently unsealed filing by the U.S. Department of Justice, investigators disclosed internal communications from the military wing of Hamas that detail a sophisticated approach to raising and moving digital currency. The documents reveal that Hamas operatives explicitly instructed potential donors to avoid routing their contributions through Binance, one of the world’s largest cryptocurrency exchanges, and instead to employ a collection of alternative services—including Trust Wallet, Bybit, OKX, Kast and Redotpay—to funnel money into a designated TRON blockchain wallet. The guidance appears to be part of a broader strategy aimed at obscuring the financial trail of donations destined for the group’s armed activities.
By steering supporters away from Binance, which is subject to extensive regulatory scrutiny and cooperation with law‑enforcement agencies, Hamas seeks to exploit platforms that either have looser compliance regimes or are perceived as less likely to flag suspicious transactions. The use of a TRON wallet further complicates detection, as the TRON network processes transactions at high speed and with relatively low fees, making it attractive for rapid fund transfers. According to the DOJ filing, the instruction was distributed through internal messaging channels used by Hamas’ military apparatus.
The communication specifically listed Trust Wallet, a non‑custodial mobile wallet that allows users to store a variety of tokens without handing over private keys to a third party. Bybit and OKX, both prominent cryptocurrency exchanges, were highlighted for their “privacy‑friendly” features and the ability to convert fiat into digital assets without stringent KYC (Know‑Your‑Customer) procedures. Kast and Redotpay, lesser‑known services that facilitate peer‑to‑peer crypto transactions, were also mentioned as viable conduits for moving funds.
The choice of the TRON blockchain is notable. TRON’s architecture supports high‑throughput smart contracts and boasts a large ecosystem of decentralized applications. Its native token, TRX, can be swapped for a wide range of other cryptocurrencies, providing a flexible gateway for converting donations into assets that can be used to purchase equipment, pay operatives, or fund logistical operations.
Moreover, TRON’s transaction data is publicly available but difficult to trace back to individuals without sophisticated blockchain analysis tools, a fact that Hamas appears to be leveraging. Analysts point out that the shift away from mainstream exchanges like Binance reflects a growing awareness among extremist groups of the evolving regulatory landscape. In recent years, Binance has faced multiple investigations across jurisdictions for alleged money‑laundering failures and has been compelled to enhance its compliance framework. By contrast, the platforms cited by Hamas are either based in jurisdictions with weaker oversight or have historically been slower to adopt comprehensive AML (Anti‑Money‑Laundering) measures.
The DOJ’s revelation underscores the challenges that law‑enforcement agencies face when confronting the intersection of terrorism financing and cryptocurrency. Traditional financial monitoring tools rely on bank‑level reporting and SWIFT messaging, but crypto transactions bypass these channels, often leaving a fragmented audit trail. While blockchain analytics firms have made strides in de‑anonymizing crypto flows, the rapid evolution of privacy‑enhancing technologies and the proliferation of decentralized finance (DeFi) protocols continually raise the bar for investigators.
In response to the filing, the U.S. Treasury’s Office of Foreign Assets Control (OFAC) has reiterated its designation of Hamas as a terrorist organization and warned that any assets—digital or otherwise—transferred on behalf of the group are subject to sanctions. OFAC’s guidance emphasizes that individuals and entities must conduct due diligence to ensure they are not inadvertently facilitating prohibited transactions, even when dealing with seemingly innocuous crypto wallets.
The broader geopolitical context also informs Hamas’ reliance on digital currencies. The Gaza Strip, where the organization maintains a stronghold, suffers from severe restrictions on banking services due to the blockade imposed by Israel and Egypt. Conventional channels for receiving foreign aid or private donations are heavily monitored or outright blocked, prompting Hamas to turn to crypto as a lifeline that can bypass physical borders.
Humanitarian organizations have expressed concern that the increasing use of cryptocurrencies by armed groups could complicate the delivery of aid. When donors intend to support civilian relief efforts but inadvertently channel funds through networks associated with Hamas, the risk of sanctions violations rises. Consequently, NGOs are urged to adopt robust vetting procedures and to stay informed about the evolving tactics employed by terrorist financiers. The DOJ’s disclosure also highlights the importance of international cooperation in combating crypto‑based terrorism financing.
Agencies across Europe, the Middle East and Asia have begun sharing intelligence on suspicious wallet addresses and exchange accounts linked to extremist groups. Joint task forces are being formed to develop standardized reporting frameworks that can be applied across different blockchain platforms.
In summary, the internal memo from Hamas’ military wing illustrates a calculated attempt to sidestep mainstream cryptocurrency exchanges in favor of platforms perceived as less regulated, while leveraging the TRON blockchain to obscure the ultimate destination of funds. The document serves as a reminder that terrorist organizations are adept at adopting emerging financial technologies to sustain their operations. As governments and private sector stakeholders continue to refine their monitoring capabilities, the cat‑and‑mouse game between regulators and illicit actors is likely to intensify, demanding ongoing vigilance, advanced analytical tools, and coordinated policy responses.