In a series of internal communications that have now been disclosed through a filing by the United States Department of Justice, the military arm of Hamas – often referred to as the Izz ad‑Din al‑Qassam Brigades – issued explicit guidance to its network of donors about how to handle digital‑currency contributions. The core message was clear: supporters should steer clear of the popular cryptocurrency exchange Binance when moving funds, and instead employ a handful of alternative services to funnel the money into a designated TRON‑based wallet. The DOJ documents, which were part of a broader investigation into the financing of terrorism, reveal a surprisingly sophisticated approach to money‑laundering and operational security.
Rather than relying on a single, well‑known platform, the Hamas military wing outlined a multi‑step process that involved several distinct tools. First, donors were instructed to acquire crypto assets – primarily USDT, a stablecoin pegged to the U.S. dollar – on platforms that are perceived to have lighter regulatory scrutiny or that are less likely to be flagged by financial watchdogs. The list of recommended services included Trust Wallet, a non‑custodial mobile wallet that allows users to hold private keys on their own devices; Bybit, a derivatives exchange that also offers spot trading; OKX, a large Asian exchange with a broad user base; Kast, a lesser‑known platform that has attracted attention for its anonymity features; and Redotpay, a payment gateway that facilitates crypto transactions across multiple blockchains.
Once the crypto was purchased, the instructions called for the funds to be transferred to an external wallet on the TRON network. TRON, known for its high throughput and low transaction fees, has become a favored conduit for illicit actors because its blockchain explorer can be more difficult to trace than those of Bitcoin or Ethereum, especially when mixed with a high volume of legitimate traffic. By moving the assets to a TRON address that is not directly linked to any exchange, the Hamas operatives hoped to obscure the money trail, making it harder for law‑enforcement agencies to pinpoint the ultimate recipients. The documents also highlighted why Binance was singled out for avoidance.
Binance, being one of the world’s largest cryptocurrency exchanges, operates under a relatively robust compliance framework that includes Know‑Your‑Customer (KYC) and Anti‑Money‑Laundering (AML) protocols. The agency’s internal risk assessments indicated that transactions passing through Binance are more likely to be flagged by automated monitoring systems, especially when large sums are moved to wallets associated with sanctioned entities or high‑risk jurisdictions.
By steering donors away from Binance, the Hamas military wing aimed to reduce the probability that their financial flows would be intercepted or frozen by international authorities. Beyond the technical steps, the communications contained a broader strategic narrative. The messaging emphasized the importance of “operational security” and urged supporters to act discreetly, avoid discussing transactions in public forums, and use encrypted messaging apps for coordination. It also warned that any deviation from the prescribed method could jeopardize the entire funding pipeline, potentially exposing donors to legal repercussions or triggering counter‑terrorism actions.
Analysts observing the DOJ filing note that this level of detail underscores a shift in how terrorist organizations adapt to the evolving financial ecosystem. While traditional methods such as cash smuggling, hawala networks, and charitable fronts remain in use, the integration of cryptocurrency offers a new layer of flexibility and anonymity. The Hamas military wing’s guidance mirrors similar tactics employed by other extremist groups, which have increasingly turned to digital assets to bypass sanctions, fund recruitment, and purchase equipment. The United States, alongside its allies, has been intensifying efforts to clamp down on crypto‑related terrorism financing.
Recent regulatory moves include tighter reporting requirements for crypto exchanges, increased scrutiny of stablecoin issuers, and collaborative information‑sharing agreements between financial intelligence units. However, the decentralized nature of many blockchain platforms, coupled with the rapid emergence of new services, presents a moving target for regulators. In response to the revelations, several of the named platforms have issued statements denying any knowledge of illicit use of their services. Trust Wallet emphasized that it is a non‑custodial wallet and does not retain user data, making it difficult to monitor transaction patterns.
Bybit and OKX reiterated their compliance programs and pledged to cooperate with law‑enforcement investigations. Meanwhile, Kast and Redotpay, which are smaller and less visible in the mainstream crypto space, have not yet publicly commented. The DOJ’s filing serves as a reminder that the battle over financial channels is a critical front in the fight against terrorism. By dissecting the instructions provided by the Hamas military wing, investigators gain insight into the operational playbook of a group that is actively seeking to exploit the relative anonymity and speed of modern digital currencies.
The case also highlights the importance of international cooperation, as tracing crypto flows often requires coordination across multiple jurisdictions, each with its own legal standards and technical capabilities. For donors who may be sympathetic to the cause, the message is unequivocal: using mainstream exchanges like Binance carries a higher risk of detection, while leveraging a chain of less regulated services and obscure blockchain networks can provide a veneer of secrecy. Yet, as regulatory frameworks tighten and blockchain analytics become more sophisticated, the window of opportunity for such covert financing narrows.
In summary, the Department of Justice documents expose a calculated effort by Hamas’s armed wing to steer its financial backers away from the highly visible Binance platform and toward a suite of alternative crypto services, ultimately funneling the proceeds into a TRON wallet designed to mask the ultimate destination of the funds. This strategy reflects a broader trend among extremist groups to harness emerging financial technologies, prompting governments and the private sector to adapt their counter‑terrorism tools and policies accordingly.