In a recent filing submitted to the United States Department of Justice, investigators disclosed that the armed wing of Hamas – the organization’s military branch – has been actively advising its financial backers on how to move digital assets in a manner that avoids detection by law‑enforcement agencies and financial regulators. The documents reveal a clear directive: donors should not send cryptocurrency directly from the popular exchange Binance. Instead, supporters are instructed to route their contributions through a series of alternative platforms, including Trust Wallet, Bybit, OKX, Kast, and Redotpay, before ultimately transferring the funds to an external wallet on the TRON blockchain. The guidance appears in a series of internal communications that were intercepted by U.S.
authorities during a broader investigation into the financing of terrorist organizations. These communications outline a step‑by‑step process designed to obscure the origin and destination of the crypto assets, thereby complicating any attempts by investigators to trace the money trail. By recommending the use of multiple wallets and exchanges, the Hamas military wing aims to fragment the transaction path, creating a series of hops that make it harder for blockchain analytics tools to link the final recipient to the original donor. Binance, one of the world’s largest cryptocurrency exchanges, is a well‑known platform that complies with extensive Know‑Your‑Customer (KYC) and anti‑money‑laundering (AML) regulations.
Because of its robust compliance framework, transactions that pass through Binance are more likely to be flagged for review if they appear suspicious. The Hamas directive explicitly acknowledges this risk, urging supporters to avoid the exchange altogether. Instead, the organization recommends using Trust Wallet, a non‑custodial mobile wallet that allows users to retain full control over private keys, thereby reducing the exposure to third‑party scrutiny.
Bybit, OKX, Kast, and Redotpay are also highlighted as preferred conduits. These platforms, while still subject to varying degrees of regulatory oversight, often provide more flexible anonymity features compared to larger, regulated exchanges. For example, Bybit and OKX have historically offered a range of privacy‑oriented services, such as the ability to create accounts without extensive identity verification, especially for users who transact in certain jurisdictions.
Kast and Redotpay, though less well‑known, are reported to facilitate rapid cross‑border transfers with minimal documentation, making them attractive to actors seeking to move funds quickly and discreetly. The final step in the Hamas‑recommended workflow involves transferring the cryptocurrency to an external TRON wallet.
TRON is a blockchain platform known for its high throughput and low transaction fees, which makes it a popular choice for moving large sums of value without incurring prohibitive costs. Moreover, the TRON network’s architecture allows for the creation of custom tokens and smart contracts, which can be leveraged to further mask the nature of the funds. By moving assets onto a TRON wallet that is not directly linked to any exchange, the organization creates an additional layer of opacity. Analysts note that this strategy reflects a broader trend among illicit actors who are increasingly sophisticated in their use of digital currencies.
The rapid evolution of blockchain analytics tools has forced terrorist groups, criminal syndicates, and sanctioned entities to adopt more complex operational security measures. By fragmenting the transaction path across multiple platforms and ultimately landing the funds in a wallet that is not tied to a centralized exchange, Hamas seeks to stay ahead of investigative techniques that rely on clustering and address attribution. U.S.
officials stress that while the use of cryptocurrency does not in itself constitute illegal activity, the intent behind these transfers – to fund violent actions and support a designated terrorist organization – is unequivocally unlawful. The Department of Justice’s filing underscores the importance of international cooperation in monitoring crypto flows, as the decentralized nature of blockchain technology often transcends national borders.
Agencies are urging financial institutions, exchanges, and wallet providers to enhance their monitoring capabilities and to share suspicious activity reports promptly. The revelation of Hamas’ internal guidance also raises questions about the effectiveness of current regulatory frameworks governing digital assets. Critics argue that the rapid proliferation of new exchanges and wallet services has outpaced the ability of regulators to enforce consistent KYC and AML standards worldwide.
As a result, actors with malicious intent can exploit gaps in oversight, hopping between platforms that operate in jurisdictions with lax regulatory regimes. In response, several governments have begun to propose stricter licensing requirements for crypto service providers, as well as more rigorous reporting obligations for large or unusual transactions. The United States, the European Union, and other major economies are actively working on legislation that would require greater transparency from both centralized exchanges and certain decentralized platforms.
The goal is to create a more uniform global standard that makes it harder for illicit actors to hide behind the anonymity that cryptocurrency can provide. For the public and private sector alike, the key takeaway from the DOJ filing is the need for heightened vigilance.
Organizations that handle cryptocurrency – whether they are exchanges, wallet developers, or payment processors – must implement robust compliance programs, conduct thorough due diligence on users, and employ advanced analytics to detect patterns indicative of terrorist financing. At the same time, law‑enforcement agencies must continue to invest in technical expertise and cross‑border partnerships to keep pace with the evolving tactics of groups like Hamas. In summary, the Department of Justice’s recent documents reveal that Hamas’ military wing is actively directing donors to avoid Binance, a heavily regulated exchange, and instead use a suite of alternative platforms before moving the crypto to an external TRON wallet.
This multi‑step approach is designed to obscure the financial trail, reduce the likelihood of detection, and ultimately fund the organization’s operations. The disclosure highlights the ongoing cat‑and‑mouse game between illicit actors leveraging emerging technologies and the authorities tasked with preventing the misuse of those same technologies for violent and criminal ends.