In a recent filing submitted to the United States Department of Justice, investigators uncovered a striking piece of internal communication from the armed wing of Hamas, the Palestinian Islamist organization that governs the Gaza Strip. The document, which appears to be a set of instructions aimed at the group’s financial backers, explicitly warns donors not to channel their cryptocurrency contributions through Binance, one of the world’s largest and most well‑known digital‑asset exchanges. Instead, the guidance lists a series of alternative platforms and wallets—Trust Wallet, Bybit, OKX, Kast, and Redotpay—as the preferred conduits for moving money into a designated TRON blockchain address that lies outside the direct control of mainstream exchanges.
The DOJ filing, which forms part of a broader investigation into the financing of terrorism, sheds light on the evolving tactics that militant groups employ to secure funding in an increasingly digital world. While traditional money‑laundering schemes have long relied on cash couriers, charitable fronts, and informal value‑transfer systems, the rise of cryptocurrencies has opened new avenues for rapid, cross‑border transfers that can be harder for authorities to trace. Hamas, which has been designated as a terrorist organization by the United States, Israel, the European Union and several other jurisdictions, appears to be adapting its fundraising playbook to take advantage of these technological developments. According to the internal memo, the primary reason for avoiding Binance is the heightened scrutiny the exchange now faces from regulators and law‑enforcement agencies worldwide.
Binance, despite its massive user base, has been subject to numerous investigations concerning its compliance practices, anti‑money‑laundering (AML) controls, and ties to illicit actors. By steering donors away from the platform, Hamas’ military wing seeks to reduce the risk that transactions will be flagged, frozen, or otherwise intercepted by financial watchdogs. The alternative services listed—Trust Wallet, Bybit, OKX, Kast and Redotpay—are presented as more discreet or less regulated options, allowing contributors to move digital assets with fewer obstacles. The memo also details the technical steps required to complete the transfer.
Donors are instructed to acquire TRON (TRX) tokens, either by purchasing them on a secondary market or by converting other cryptocurrencies into TRX. Once in possession of the tokens, contributors are told to use one of the recommended wallets to generate a transaction that sends the funds to a specific external TRON wallet address. This address is not hosted on any of the major exchanges, which further obscures the trail.
By leveraging the TRON blockchain’s relatively low transaction fees and fast settlement times, the group can move sizable sums quickly and with minimal cost. Analysts note that the choice of TRON is strategic.
The network’s architecture allows for high throughput and a large number of daily transactions, making it an attractive vehicle for large‑scale transfers. Moreover, TRON’s ecosystem includes a variety of decentralized applications (dApps) and token standards that can be used to further mask the origin and destination of funds. The use of a non‑custodial wallet—where the user retains full control of private keys—means that there is no centralized entity that can be compelled to provide transaction records, unlike a traditional exchange that must comply with Know‑Your‑Customer (KYC) and AML regulations. The DOJ’s exposure of this guidance is part of a broader effort to disrupt the financial networks that sustain terrorist operations.
By mapping out the pathways through which digital currencies flow, investigators hope to identify choke points where law‑enforcement can intervene, freeze assets, and ultimately hamper the organization’s ability to fund attacks, procure weapons, and support its administrative apparatus. The filing also underscores the challenges that regulators face in keeping pace with the rapid innovation in the crypto space. While some jurisdictions have moved to impose stricter licensing requirements on exchanges and wallet providers, many of the platforms mentioned in the Hamas memo operate in jurisdictions with lax oversight or ambiguous regulatory status. Critics argue that the very act of publicizing such internal communications could have a dual effect.
On one hand, it alerts financial institutions and policymakers to the specific methods being employed, potentially prompting tighter controls and more robust monitoring. On the other hand, it may inadvertently provide a blueprint for other illicit actors seeking to emulate Hamas’ approach, thereby spreading the knowledge of how to evade detection.
In response to the revelations, several of the named platforms have issued statements denying any intentional facilitation of terrorist financing. Trust Wallet, for instance, emphasized its commitment to compliance and its cooperation with law‑enforcement when presented with legitimate subpoenas. Bybit and OKX similarly highlighted their ongoing efforts to strengthen AML protocols, including transaction monitoring and user verification processes.
However, the decentralized nature of many crypto services means that complete oversight remains a complex and often unattainable goal. The broader implications of this discovery extend beyond Hamas itself. As more extremist groups explore cryptocurrency as a fundraising tool, the international community is confronted with the need to balance the legitimate, innovative uses of digital assets with the imperative to prevent abuse.
Initiatives such as the Financial Action Task Force’s (FATF) recommendations on virtual assets, the establishment of dedicated crypto‑focused investigative units within agencies like the FBI and the DEA, and increased collaboration between public and private sectors are all part of the evolving response. In conclusion, the Department of Justice’s filing reveals a calculated shift by Hamas’ military wing toward leveraging less regulated crypto platforms and wallets to sidestep traditional financial scrutiny. By advising donors to avoid Binance and instead use Trust Wallet, Bybit, OKX, Kast and Redotpay for transfers to a TRON wallet, the group demonstrates a sophisticated understanding of the digital finance landscape. This development underscores the urgent need for continued vigilance, enhanced regulatory frameworks, and international cooperation to mitigate the risk that cryptocurrencies become a safe harbor for terrorist financing.