In a recent filing submitted to the United States Department of Justice, investigators disclosed that the armed branch of Hamas – the organization’s military wing – has been actively advising its financial backers on how to move digital assets while evading detection by law‑enforcement agencies. The guidance, which appears in internal communications obtained by U.S. authorities, explicitly warns supporters not to rely on Binance, one of the world’s largest cryptocurrency exchanges, for handling donations. Instead, the group recommends a series of alternative services, including Trust Wallet, Bybit, OKX, Kast and Redotpay, as well as the use of an external TRON blockchain wallet to receive the funds.
The documents detail a calculated approach by Hamas’ military leadership to mitigate the risk of their financial channels being traced or frozen. Binance, due to its size, regulatory scrutiny, and compliance infrastructure, represents a high‑visibility conduit that could attract the attention of investigators.
By steering donors toward smaller, less regulated platforms and a decentralized wallet on the TRON network, the organization hopes to obscure the origin and destination of the crypto assets, making it more difficult for authorities to follow the money trail. According to the DOJ filing, the instructions were disseminated through encrypted messaging apps and private online forums frequented by sympathizers. The communication outlined step‑by‑step procedures: first, donors should purchase the desired cryptocurrency—most commonly USDT (Tether) or other stablecoins—on a mainstream exchange. After acquisition, they are instructed to transfer the tokens to a Trust Wallet or a similar non‑custodial wallet, which gives the user full control over private keys.
From there, the funds are to be sent to a designated TRON address that is not directly linked to any known Hamas entity. The choice of the TRON blockchain is strategic; its high transaction speed and low fees enable rapid movement of large sums without raising the same level of suspicion that might accompany transfers on more heavily monitored networks like Bitcoin or Ethereum. The filing also notes that Bybit, OKX, Kast and Redotpay are suggested as alternative platforms for the final leg of the transaction.
These services, while still subject to some regulatory oversight, are perceived by the Hamas operatives as offering a lower profile than Binance. In particular, Bybit and OKX have historically operated with a more flexible compliance stance in certain jurisdictions, which the group believes can be exploited to hide the ultimate beneficiary of the funds.
Beyond the technical instructions, the documents reveal a broader strategic mindset. Hamas’ military wing appears to be adapting quickly to the evolving landscape of financial surveillance, recognizing that traditional banking channels are increasingly monitored and often blocked by governments and financial institutions.
By turning to cryptocurrency, the organization taps into a global, borderless system that can bypass many conventional controls. However, the group is also aware of the growing capabilities of law‑enforcement agencies to trace blockchain transactions, especially when they intersect with regulated exchanges. To counteract this, the guidance emphasizes the use of privacy‑enhancing practices. Donors are encouraged to employ VPNs or the Tor network when accessing the recommended platforms, to avoid linking IP addresses to the transaction.
They are also advised to break larger donations into multiple smaller transfers, a technique known as “structuring,” which can help avoid triggering automated monitoring systems that flag unusually large or frequent movements of funds. The DOJ’s revelation of these instructions underscores the increasing importance of cryptocurrency in the financing of extremist groups. While the total amount of money funneled through such channels remains difficult to quantify, the sophistication of the instructions suggests that Hamas is investing significant resources into developing a resilient financial network. This development aligns with broader trends observed among various non‑state actors, who have been experimenting with digital assets to fund operations, procure weapons, and sustain their organizational infrastructure.
International regulators have responded to these challenges by tightening compliance requirements for crypto exchanges, mandating stricter Know‑Your‑Customer (KYC) and Anti‑Money‑Laundering (AML) protocols. Nonetheless, the decentralized nature of many blockchain platforms means that complete eradication of illicit use is unlikely.
Instead, authorities are focusing on improving forensic capabilities, such as blockchain analytics tools that can trace token movements across multiple wallets and exchanges, even when they involve privacy‑focused chains. In the case of Hamas, the shift away from Binance may also reflect a response to recent enforcement actions taken by the exchange against illicit actors.
Binance has faced multiple investigations and fines from regulators in the United States, Europe and Asia for alleged failures to monitor suspicious activity. By recommending alternative platforms, Hamas seeks to stay ahead of potential crackdowns that could disrupt its funding pipeline. The implications of these findings are significant for policymakers and security agencies. Understanding the specific platforms and methods favored by extremist groups enables more targeted interventions, such as placing sanctions on particular wallet addresses, collaborating with exchange operators to freeze suspicious accounts, and enhancing information sharing across borders.
Moreover, the emphasis on the TRON network highlights a growing trend among illicit actors to exploit newer, less scrutinized blockchains. While TRON offers technical advantages like high throughput and low transaction costs, its relative lack of comprehensive regulatory oversight makes it an attractive venue for covert financial activity. This raises the question of whether regulators should broaden their focus beyond the most popular blockchains and incorporate emerging ecosystems into their monitoring frameworks.
In summary, the Department of Justice documents paint a clear picture of how Hamas’ military wing is engineering a sophisticated crypto‑based fundraising strategy. By steering donors away from high‑visibility exchanges like Binance and toward a combination of non‑custodial wallets and less regulated platforms, the group aims to obscure the flow of money, reduce the risk of detection, and sustain its operational capabilities. The content of these instructions underscores the evolving nature of terrorist financing in the digital age and the need for continuous adaptation by law‑enforcement and regulatory bodies to counteract these emerging threats.