According to recently unsealed documents filed by the United States Department of Justice, the military wing of Hamas has issued explicit instructions to its financial backers on how to move digital currency in a manner that avoids detection by authorities. The guidance, which appears in a series of internal communications, specifically advises donors to steer clear of using the popular cryptocurrency exchange Binance as an intermediary for their contributions. Instead, the group recommends a collection of alternative services—Trust Wallet, Bybit, OKX, Kast and Redotpay—to facilitate the transfer of funds into a TRON‑based wallet that lies outside the direct control of mainstream exchanges.
The DOJ filing details that Hamas’ military arm, often referred to as the Izz ad‑Din al‑Qassam Brigades, has been actively seeking ways to modernize its financing mechanisms. In recent years, the organization has increasingly turned to cryptocurrencies as a means of circumventing traditional banking channels, which are subject to rigorous anti‑money‑laundering (AML) oversight and sanctions enforcement. By leveraging the relative anonymity and borderless nature of digital assets, Hamas aims to secure a steady flow of resources from sympathizers worldwide while reducing the risk of seizure or freezing of funds.
The instruction set outlines a step‑by‑step process for supporters. First, donors are told to acquire the desired amount of cryptocurrency—typically stablecoins or TRON (TRX)—through a local exchange or peer‑to‑peer platform.
Once the assets are in the donor’s possession, they are directed to move the tokens into a Trust Wallet or one of the other listed services. These wallets are described as “non‑custodial,” meaning the user retains full control over the private keys, which in turn limits the ability of external parties to track or block the transaction. After the funds are safely stored in the chosen wallet, the instructions advise the donor to initiate a transfer to a pre‑specified TRON address that belongs to a Hamas‑affiliated entity.
The documents note that the TRON blockchain is favored because of its high transaction speed, low fees, and the relative obscurity of its address ledger compared with more widely scrutinized chains such as Bitcoin or Ethereum. Moreover, the TRON network’s architecture allows for the creation of tokenized assets that can be used for a variety of purposes, from purchasing equipment to funding propaganda operations. The filing also references the use of secondary platforms like Bybit, OKX, Kast and Redotpay as “bridging services.” These platforms can convert the cryptocurrency into different token standards or facilitate cross‑chain swaps, thereby adding an additional layer of complexity that hampers forensic analysis.
By routing the money through multiple hops, Hamas hopes to dilute the transactional trail, making it more difficult for law‑enforcement agencies to trace the ultimate beneficiary. U.S. authorities have long been concerned about the infiltration of extremist groups into the crypto ecosystem. The DOJ’s investigation, which began in earnest after a series of high‑profile arrests of individuals suspected of funneling digital assets to terrorist organizations, has uncovered a sophisticated network of actors who act as intermediaries, mixers, and wallet providers.
The documents reveal that Hamas’ financial operatives have cultivated relationships with certain crypto service providers that are either lax in their compliance regimes or deliberately turn a blind eye to suspicious activity. In addition to the operational guidance, the DOJ filing includes internal risk assessments conducted by Hamas’ finance unit. These assessments weigh the benefits of using Binance—an exchange with robust KYC (Know Your Customer) procedures and extensive regulatory scrutiny—against the heightened exposure to detection.
The conclusion is clear: while Binance offers liquidity and a broad user base, its compliance infrastructure makes it an unattractive conduit for illicit financing. Consequently, the group has shifted its focus to platforms that either lack stringent verification processes or operate in jurisdictions with weaker regulatory oversight.
The implications of these findings are significant for policymakers and the broader cryptocurrency community. They underscore the need for enhanced AML and counter‑terrorist financing (CTF) measures across all tiers of the crypto ecosystem, from centralized exchanges to decentralized wallet applications. Regulators are urged to collaborate internationally, sharing intelligence on suspicious wallet addresses and developing standardized reporting frameworks that can adapt to the rapid evolution of financial technology. From a strategic perspective, Hamas’ pivot to TRON and the recommended wallet services illustrates a broader trend among non‑state actors: the adoption of niche blockchain networks that are less monitored by mainstream compliance tools.
This shift challenges traditional enforcement models that have historically focused on Bitcoin and Ethereum, the two most widely analyzed blockchains. As a result, law‑enforcement agencies must expand their analytical capabilities to include a wider array of ledger technologies and develop new heuristics for identifying suspicious patterns.
In response to the DOJ’s revelations, several of the mentioned platforms have issued statements denying any intentional facilitation of terrorist financing. Trust Wallet, for example, emphasized its open‑source nature and the difficulty of policing individual user transactions.
Bybit and OKX have highlighted their ongoing efforts to strengthen KYC procedures and cooperate with regulatory bodies. Nonetheless, critics argue that the very design of non‑custodial wallets inherently limits the ability of any service provider to monitor or block illicit transfers.
The broader narrative emerging from the DOJ filing is one of adaptation and resilience. As governments tighten the net around traditional financial channels, groups like Hamas are quick to explore alternative pathways, leveraging the anonymity, speed, and global reach of cryptocurrencies. The ongoing cat‑and‑mouse game between regulators and illicit actors suggests that future policy responses will need to be both technologically sophisticated and internationally coordinated. In summary, the Department of Justice’s documents expose a clear directive from Hamas’ military wing urging donors to avoid Binance and instead use a suite of less regulated crypto services to move funds into a TRON wallet.
This strategy reflects a calculated effort to exploit gaps in the current regulatory framework, emphasizing the importance of comprehensive, cross‑jurisdictional oversight of the entire cryptocurrency ecosystem to prevent the misuse of digital assets for terrorist financing.