In a recent filing submitted to the United States Department of Justice, investigators disclosed a striking set of instructions issued by the military wing of Hamas, the Palestinian Islamist organization that controls the Gaza Strip. The documents reveal that the group is actively guiding its financial backers on how to move digital assets in a way that minimizes the risk of detection and seizure by authorities. Specifically, the Hamas military wing warned donors against sending cryptocurrency directly through Binance, one of the world’s largest cryptocurrency exchanges, and instead recommended a series of alternative platforms and a particular technical pathway for the transfer of funds.
The guidance outlines a multi‑step process that begins with the donor acquiring cryptocurrency—most commonly US‑dollar‑denominated stablecoins such as USDT or USDC—on a mainstream exchange. Rather than completing the transaction on Binance, donors are instructed to move the assets to a Trust Wallet, a non‑custodial mobile wallet that gives the user full control over private keys.
From there, the instructions suggest routing the crypto through a handful of other exchanges and services, including Bybit, OKX, Kast, and Redotpay. Each of these platforms is chosen for its relatively lax compliance regimes, lower visibility to law‑enforcement monitoring tools, or the ability to quickly convert between different blockchain networks. After the funds have passed through these intermediary services, the final step is to transfer the cryptocurrency to an external wallet on the TRON network.
TRON, a blockchain known for its high throughput and low transaction fees, is frequently used for rapid, inexpensive transfers of stablecoins. By directing the money to a TRON address that lies outside of the traditional exchange ecosystem, Hamas aims to create a layer of obfuscation that makes it more difficult for investigators to trace the flow of funds back to the organization’s operational accounts.
The DOJ filing emphasizes that the advice is not merely a casual suggestion but a concerted operational directive. The documents cite internal communications—messages exchanged on encrypted messaging apps and emails—where senior Hamas operatives explicitly warn supporters that Binance’s robust Know‑Your‑Customer (KYC) and anti‑money‑laundering (AML) protocols make the exchange a high‑risk conduit for illicit financing. By contrast, the alternative platforms listed in the guidance either have weaker KYC requirements or allow for the use of pseudonymous accounts, thereby reducing the digital footprint left behind. Why is Binance singled out as a risky channel?
Binance, despite its size and global reach, has increasingly come under scrutiny from regulators worldwide. In recent years, the exchange has faced enforcement actions from the U.S. Treasury’s Office of Foreign Assets Control (OFAC), the European Union, and several Asian regulators for alleged failures to adequately screen transactions linked to sanctioned entities. The DOJ’s documents suggest that Hamas’ leadership is acutely aware of these regulatory pressures and seeks to avoid any platform that might flag or freeze their assets.
The choice of TRON as the final destination also carries strategic significance. TRON’s architecture supports the issuance of a wide range of tokens, including many stablecoins that are pegged to the U.S. dollar.
These stablecoins can be moved quickly across borders without the need for traditional banking intermediaries, which are subject to stringent AML checks. Moreover, the TRON network’s public ledger is less scrutinized by mainstream crypto analytics firms compared to Bitcoin or Ethereum, providing an additional layer of anonymity. The DOJ’s filing also sheds light on the broader financial ecosystem that Hamas relies upon. In addition to the specific platforms mentioned, the documents reference a network of “crypto facilitators”—individuals and small firms that specialize in converting cryptocurrency into fiat currency or vice versa, often operating out of jurisdictions with lax regulatory oversight.
These facilitators act as the final link in the chain, converting the TRON‑based stablecoins into cash that can be used to fund the organization’s military and political activities. From a policy perspective, the revelations underscore the challenges that law‑enforcement agencies face when confronting the use of decentralized finance (DeFi) and crypto‑centric money‑laundering schemes. Traditional AML frameworks were designed around the banking system, where transactions are routed through identifiable institutions. Cryptocurrencies, especially when moved through a series of non‑custodial wallets and low‑regulation exchanges, can bypass many of these safeguards.
In response, the U.S. government has been ramping up its efforts to tighten crypto compliance. Recent executive orders have called for tighter reporting requirements for cryptocurrency transactions exceeding certain thresholds, and the Treasury’s Financial Crimes Enforcement Network (FinCEN) has proposed new rules that would require many crypto service providers to collect and share more detailed user information.
However, the rapid evolution of the crypto space—along with the emergence of new platforms that can operate in regulatory gray zones—means that adversarial groups like Hamas are constantly adapting their tactics. The DOJ filing also highlights the importance of international cooperation. Because the crypto ecosystem is inherently borderless, tracking the flow of funds often requires coordination between multiple jurisdictions, each with its own legal standards and enforcement capabilities. The documents note that several allied nations have already shared intelligence on suspicious crypto transactions linked to Hamas, but gaps remain, particularly in regions where local authorities lack the technical expertise to monitor blockchain activity.
In summary, the Department of Justice’s recent filing provides a rare glimpse into the operational playbook of Hamas’ military wing as it navigates the complex world of cryptocurrency finance. By explicitly warning donors against using Binance and instead directing them to a series of alternative platforms before moving funds to a TRON wallet, Hamas demonstrates a sophisticated understanding of both the opportunities and the risks presented by digital assets. The guidance reflects a calculated effort to exploit the relative anonymity and speed of crypto transactions while evading the growing scrutiny of regulators and law‑enforcement agencies.
As governments worldwide continue to grapple with the regulatory challenges posed by cryptocurrency, the case of Hamas serves as a stark reminder of how non‑state actors can leverage emerging financial technologies to fund illicit activities, and it underscores the urgent need for coordinated, technologically adept responses to combat such threats.