In a recent filing submitted to the United States Department of Justice, investigators disclosed a striking piece of internal communication from the armed wing of Hamas, also known as the Izz al-Din al-Qassam Brigades. The message, which appears to be a set of operational guidelines aimed at the group’s financial backers, explicitly advises donors to steer clear of the popular cryptocurrency exchange Binance when moving funds. Instead, the instructions list a series of alternative wallets and platforms—Trust Wallet, Bybit, OKX, Kast, and Redotpay—as preferred conduits for sending digital assets to a designated external TRON (TRX) wallet.
The revelation is part of a broader effort by U.S. law‑enforcement agencies to trace and disrupt the financial networks that sustain militant organizations. By highlighting the specific crypto‑handling practices of Hamas’ military wing, the DOJ filing underscores the increasing sophistication with which non‑state actors adopt blockchain technology to evade detection, launder money, and fund operations. The guidance to avoid Binance is particularly noteworthy because Binance is one of the world’s largest and most regulated crypto exchanges, offering extensive compliance measures, transaction monitoring, and Know‑Your‑Customer (KYC) protocols.
By steering donors toward less regulated platforms, Hamas appears to be attempting to reduce the risk of its transactions being flagged or frozen by authorities. The instruction to use Trust Wallet, a decentralized, non‑custodial wallet, suggests a desire for greater anonymity. Trust Wallet allows users to store private keys locally on their devices, meaning the wallet provider does not retain any personal data that could be subpoenaed.
Bybit and OKX, while still centralized exchanges, are known for offering a wide array of trading pairs and relatively lax KYC requirements in certain jurisdictions, making them attractive for users seeking to move funds quickly without extensive identity verification. Kast and Redotpay, lesser‑known services, are believed to operate with minimal regulatory oversight, further facilitating the covert transfer of assets.
The choice of the TRON blockchain as the final destination for the funds is also strategic. TRON is known for its high throughput, low transaction fees, and a thriving ecosystem of decentralized applications.
Its architecture enables rapid movement of large volumes of tokens, which can be especially useful for groups that need to allocate resources swiftly across different operational theaters. Moreover, the relative obscurity of TRON compared with more mainstream chains like Bitcoin or Ethereum can make it harder for analysts to track transaction patterns, particularly when combined with the use of privacy‑enhancing tools such as mixers or tumblers. From a geopolitical perspective, the DOJ’s disclosure provides insight into how Hamas adapts to the evolving financial landscape. Since the early 2000s, the organization has relied heavily on a mix of traditional fundraising—such as charitable fronts, diaspora contributions, and illicit smuggling—and more modern mechanisms, including digital currencies.
The shift toward crypto reflects both the global rise of blockchain technology and the pressure placed on conventional money‑moving channels by sanctions, banking restrictions, and heightened surveillance. Experts in counter‑terrorism finance note that the move away from Binance could be a reaction to recent crackdowns on the exchange. In late 2023, Binance faced increased scrutiny from regulators in the United States, the European Union, and several Asian markets, leading to a tightening of its compliance framework.
These regulatory pressures have resulted in the freezing of accounts suspected of illicit activity, a development that would be highly undesirable for a group seeking to maintain uninterrupted cash flow. The DOJ filing also sheds light on the internal coordination mechanisms within Hamas.
The document appears to be a formal memo, possibly circulated among regional fundraising cells, that outlines step‑by‑step instructions: from the initial acquisition of cryptocurrency—often purchased on peer‑to‑peer platforms or through informal brokers—to the final transfer into the designated TRON wallet. The memo reportedly includes technical details such as wallet addresses, recommended transaction sizes to avoid triggering anti‑money‑laundering (AML) alerts, and even tips on how to disguise the source of funds by mixing them with legitimate traffic. Law‑enforcement analysts stress that while the guidance is detailed, it is not foolproof.
Blockchain forensics firms can still trace token movements on public ledgers, especially when patterns emerge across multiple transactions. However, by fragmenting the process—using multiple exchanges, converting between different tokens, and employing mixers—the overall traceability is reduced, raising the cost and complexity of investigative work. The broader implications of this discovery extend beyond Hamas.
It highlights a growing trend among extremist and militant groups worldwide to embed cryptocurrency into their financial arsenals. Similar tactics have been reported among other organizations, including al‑Qaeda affiliates, the Taliban, and various separatist movements.
Each group tailors its approach based on the regulatory environment of the platforms it utilizes, the technical expertise of its supporters, and the specific operational needs of its campaigns. In response, governments and international bodies are intensifying efforts to develop a coordinated regulatory framework for digital assets. The Financial Action Task Force (FATF) has issued guidance on virtual asset service providers (VASPs), urging member states to enforce stringent AML and counter‑terrorist financing (CTF) standards.
Meanwhile, the United States has introduced legislation aimed at improving the transparency of crypto transactions, mandating stricter reporting requirements for exchanges and wallet providers. For the private sector, the revelation serves as a reminder that compliance teams must remain vigilant.
Exchanges and wallet services are increasingly required to implement robust KYC/AML procedures, monitor for suspicious activity, and cooperate with law‑enforcement inquiries. Failure to do so can result in heavy fines, loss of licenses, or being blacklisted by the international community. In summary, the DOJ’s filing uncovers a deliberate strategy by Hamas’ military wing to circumvent mainstream cryptocurrency platforms like Binance, opting instead for a suite of alternative services and the TRON blockchain to funnel donor contributions.
This approach reflects a calculated effort to preserve operational secrecy, reduce exposure to regulatory scrutiny, and ensure a steady flow of resources for the group’s activities. As the digital finance ecosystem continues to evolve, both authorities and private actors will need to adapt their detection and enforcement tools to keep pace with the innovative methods employed by extremist organizations.