In a recent filing submitted to the United States Department of Justice, investigators uncovered a set of instructions that originated from the military branch of Hamas, the Palestinian Islamist organization that controls the Gaza Strip. The documents reveal that the group explicitly warned its financial backers not to employ the popular cryptocurrency exchange Binance when attempting to move funds. Instead, the Hamas military wing suggested a series of alternative platforms—Trust Wallet, Bybit, OKX, Kast, and Redotpay—to facilitate the transfer of digital assets into an external wallet on the TRON blockchain. This guidance appears to be a calculated effort to evade detection by financial regulators and law‑enforcement agencies that monitor major exchanges for suspicious activity.
The DOJ filing, which is part of a broader investigation into the financing of terrorism, includes screenshots of internal communications among Hamas operatives. In these messages, the militants describe Binance as a “high‑risk” conduit for donations because of its robust compliance procedures, mandatory Know‑Your‑Customer (KYC) checks, and close cooperation with law‑enforcement bodies worldwide.
By contrast, the recommended services are portrayed as “low‑profile” and “less regulated,” thereby offering a perceived veil of anonymity for donors who wish to support Hamas’ armed activities without attracting scrutiny. Trust Wallet, a decentralized mobile wallet that allows users to store a wide variety of cryptocurrencies, is highlighted as a primary tool for receiving donations. The instructions advise donors to first acquire TRON (TRX) tokens on one of the suggested exchanges—Bybit, OKX, Kast, or Redotpay—and then transfer those tokens directly to a designated TRON wallet address controlled by Hamas operatives. The choice of the TRON network is notable; its high throughput and relatively low transaction fees make it attractive for moving sizable sums quickly, while the network’s architecture can obscure the ultimate destination of funds.
Bybit and OKX are both well‑known cryptocurrency exchanges that, unlike Binance, have historically placed less emphasis on stringent KYC protocols in certain jurisdictions. The documents suggest that Hamas operatives view these platforms as “easier entry points” for supporters located in regions where financial surveillance is less aggressive. Kast, a newer entrant to the market, and Redotpay, a payment processor that specializes in crypto‑to‑fiat conversions, are also listed as viable alternatives. The inclusion of multiple platforms serves a dual purpose: it diversifies the channels through which money can flow, reducing the risk that a single point of failure could cripple the organization’s fundraising pipeline, and it creates redundancy in case any one service decides to tighten its compliance posture.
The strategic shift away from Binance reflects a broader trend among sanctioned entities and extremist groups to adapt to the evolving regulatory landscape. After a series of high‑profile crackdowns on illicit crypto activity—most notably the U.S. Treasury’s Office of Foreign Assets Control (OFAC) designating several digital‑currency firms for facilitating money laundering—terrorist networks have become more sophisticated in their operational security.
They now routinely conduct reconnaissance on exchange policies, monitor law‑enforcement alerts, and disseminate best‑practice guides among their supporters to ensure that contributions reach the intended recipients without interruption. From a law‑enforcement perspective, the discovery of these instructions offers valuable insight into the methods Hamas employs to sustain its military capabilities. By leveraging decentralized wallets and less‑regulated exchanges, the group can sidestep the traditional banking system, which is subject to extensive monitoring under anti‑money‑laundering (AML) frameworks. However, this also creates new challenges for investigators, as tracing the flow of funds on public blockchains requires specialized analytical tools and cooperation from a broader array of crypto service providers.
The DOJ’s case against Hamas is still in its early stages, but the inclusion of these communications suggests that prosecutors intend to pursue charges related to the facilitation of terrorist financing, conspiracy to provide material support, and possibly violations of sanctions law. If successful, the government could seek to impose penalties not only on the individuals directly involved in the crypto transfers but also on the platforms that knowingly or negligently allowed the transactions to occur. For donors sympathetic to Hamas, the guidance underscores the importance the organization places on operational security. By steering supporters toward wallets and exchanges that are perceived as less transparent, Hamas aims to protect its financial lifelines from interdiction.
Yet the very act of issuing such detailed instructions also exposes the group to legal risk, as it provides a paper trail that investigators can use to demonstrate intent and coordination. In summary, the DOJ filing paints a clear picture of a calculated effort by Hamas’ military wing to adapt its fundraising strategy in the digital age. By discouraging the use of Binance—a platform with strong compliance mechanisms—and promoting a suite of alternative services, the organization seeks to maintain a steady flow of cryptocurrency donations while minimizing the chance of detection. This development highlights the ongoing cat‑and‑mouse game between terrorist financiers and authorities, where each side continuously refines its tactics in response to the other’s moves.
The ultimate outcome will depend on the ability of regulators and law‑enforcement agencies to keep pace with the rapid innovation occurring within the crypto ecosystem, as well as the willingness of the private sector to cooperate in the fight against illicit financing.