In a recent filing made public by the United States Department of Justice, investigators uncovered a detailed set of instructions circulated by the military wing of Hamas that specifically addresses how supporters should handle cryptocurrency donations. The guidance, which appears to be part of a broader operational manual, explicitly warns donors not to route their contributions through Binance, one of the world’s largest and most recognizable cryptocurrency exchanges. Instead, the document lists a series of alternative platforms—Trust Wallet, Bybit, OKX, Kast, and Redotpay—as preferred channels for moving digital assets. The ultimate destination for these funds, according to the instructions, is an external wallet operating on the TRON blockchain, a network known for its high transaction speed and low fees.
The decision to avoid Binance is notable for several reasons. Binance, headquartered in the Cayman Islands with a substantial global user base, has historically been a focal point for regulatory scrutiny due to its size and the volume of transactions it processes daily.
By steering donors away from such a high‑profile exchange, Hamas’s military wing appears to be seeking to reduce the likelihood that its financial flows will be detected by law‑enforcement agencies or financial monitoring tools that are more rigorously applied to larger platforms. Smaller or less regulated services may offer a lower profile, making it easier for illicit actors to obscure the origin and destination of funds.
Trust Wallet, for instance, is a non‑custodial mobile wallet that allows users to store a wide variety of cryptocurrencies directly on their devices. Because it does not hold user assets on its own servers, it provides a level of anonymity that can be attractive to individuals wishing to conceal their financial activities. Bybit and OKX are both cryptocurrency derivatives exchanges that also support spot trading and wallet services.
While they are subject to regulatory oversight in certain jurisdictions, their operational structures often include features such as private keys held by the user, which can complicate tracing efforts. Kast and Redotpay are less well‑known in the mainstream crypto ecosystem, but they have been identified in multiple intelligence reports as platforms that facilitate peer‑to‑peer transfers with minimal KYC (Know‑Your‑Customer) requirements. Their relative obscurity can make them attractive conduits for moving money without attracting the attention of financial watchdogs.
The instructions specifically mention that the final step should involve sending the cryptocurrency to an external TRON wallet. TRON, a blockchain platform that emphasizes scalability and low transaction costs, is frequently used for high‑volume transfers.
Its architecture allows for rapid movement of funds, which can be advantageous for organizations that need to mobilize resources quickly and discreetly. The DOJ filing also sheds light on the broader strategic considerations behind Hamas’s financial operations. By diversifying the channels through which donations are received, the group reduces its reliance on any single point of failure.
If one platform were to be shut down or come under intense regulatory pressure, the organization could still maintain its funding pipeline through the other recommended services. This redundancy mirrors tactics used by other illicit networks, including terrorist groups, drug cartels, and ransomware operators, who often employ a mix of traditional banking, informal value transfer systems, and emerging digital assets to evade detection.
From a law‑enforcement perspective, the emergence of cryptocurrency as a financing tool for extremist groups presents a complex challenge. While blockchain transactions are inherently transparent—every transfer is recorded on a public ledger—the identities behind wallet addresses are not always readily apparent. This pseudo‑anonymity can be exploited by actors who are adept at using mixing services, privacy‑focused coins, or multiple hops across different blockchains to obfuscate the trail. The DOJ’s emphasis on the specific avoidance of Binance suggests that investigators are aware of the heightened scrutiny that large exchanges face and are attempting to stay one step ahead by focusing on less regulated pathways.
International cooperation is essential in tackling this issue. Many of the platforms mentioned operate across multiple jurisdictions, and their regulatory frameworks vary widely.
Some countries have instituted stringent licensing requirements and robust AML (Anti‑Money Laundering) protocols, while others maintain more permissive environments that can be leveraged by illicit actors. Coordinated efforts between agencies such as the Financial Crimes Enforcement Network (FinCEN), Europol, and regional cybercrime units are crucial for sharing intelligence, harmonizing legal standards, and conducting joint operations that can disrupt the financial lifelines of terrorist organizations. In addition to the operational guidance, the DOJ documents provide insight into the narrative used to persuade donors.
The language employed in the instructions emphasizes security, speed, and anonymity, framing the recommended platforms as the most reliable means of ensuring that contributions reach their intended destination without interference. This messaging is designed to build trust among supporters, many of whom may be wary of governmental surveillance or financial repression. By presenting a clear, step‑by‑step roadmap, the Hamas military wing reduces the perceived risk for potential donors, thereby encouraging continued financial support.
The broader implications of this discovery extend beyond Hamas alone. As more extremist groups explore the utility of digital currencies, policymakers and regulators must balance the need to foster innovation and legitimate use of blockchain technology with the imperative to prevent abuse. Initiatives such as enhanced KYC requirements, transaction monitoring tools that leverage artificial intelligence, and public‑private partnerships can help create a more resilient financial ecosystem. In summary, the United States Department of Justice has uncovered a strategic memo from Hamas’s armed wing that advises supporters to steer clear of Binance and instead use a suite of alternative wallets and exchanges—Trust Wallet, Bybit, OKX, Kast, and Redotpay—to funnel cryptocurrency into an external TRON wallet.
This approach reflects a calculated effort to minimize detection risk, leverage the speed and low cost of the TRON network, and maintain a diversified funding architecture. The revelation underscores the evolving landscape of terrorist financing in the digital age and highlights the urgent need for coordinated, multi‑jurisdictional responses to mitigate the threat posed by crypto‑enabled illicit activities.