According to recently unsealed documents from the United States Department of Justice, the military wing of Hamas – the organization’s armed branch – has been actively advising its financial backers on how to move digital assets in a way that evades detection by law‑enforcement agencies and financial regulators. The guidance, which appears in a filing related to an ongoing investigation into the group’s fundraising operations, explicitly warns donors not to send cryptocurrency directly through the popular exchange Binance.
Instead, the instructions point supporters toward a series of alternative wallets and platforms, including Trust Wallet, Bybit, OKX, Kast and Redotpay, and they recommend that the funds ultimately be transferred to an external wallet on the TRON blockchain. The DOJ filing outlines a fairly detailed set of steps that Hamas’ military wing allegedly disseminated among its supporters. First, donors are told to acquire the desired amount of cryptocurrency – most commonly stablecoins such as USDT or USDC, which are pegged to the U.S. dollar and thus provide a predictable value for financing.
Rather than purchasing these tokens on Binance, which is one of the world’s largest crypto exchanges and therefore subject to stringent Know‑Your‑Customer (KYC) and anti‑money‑laundering (AML) protocols, the instructions advise using less regulated platforms. Trust Wallet, a non‑custodial mobile wallet, allows users to hold private keys on their own devices, making it harder for external observers to trace ownership.
Bybit and OKX are both derivatives‑focused exchanges that have, in recent years, attracted scrutiny for looser compliance standards compared with more established venues. Kast and Redotpay are lesser‑known services that function as crypto‑to‑fiat gateways, often operating in jurisdictions with minimal oversight.
Once the donor has moved the funds onto one of these recommended platforms, the next step is to send the assets to a TRON wallet address that is not directly linked to any known Hamas‑affiliated entity. The TRON network, known for its high throughput and low transaction fees, has become a favored conduit for illicit actors because its blockchain explorer provides limited information about the ultimate beneficiary of a given address. By routing the money through a series of intermediary wallets and exchanges, the group aims to create a layered “mixing” process that obscures the trail back to the original source. The DOJ’s documents suggest that this operational playbook was distributed through encrypted messaging apps and private online forums frequented by Hamas sympathizers.
The language used in the instructions is deliberately technical, assuming a baseline familiarity with crypto terminology, yet it also includes step‑by‑step screenshots and hyperlinks to tutorials on how to set up the recommended wallets. This indicates a sophisticated level of coordination, reflecting the group’s broader strategy of leveraging modern financial technology to sustain its military activities while avoiding conventional banking channels that are more easily monitored. Analysts note that the choice to specifically exclude Binance is significant. Binance, despite its global reach, has increasingly cooperated with law‑enforcement agencies worldwide, providing transaction data and user information when presented with valid legal requests.
By steering donors away from Binance, Hamas’ military wing seeks to minimize the risk that its financial flows will be flagged by the exchange’s compliance team or that the organization will be forced to freeze accounts linked to suspicious activity. The broader context of this revelation ties into a growing concern among Western governments about the use of cryptocurrencies by extremist groups. Over the past several years, intelligence agencies have documented how a range of non‑state actors – from terrorist organizations to transnational criminal networks – have adopted crypto assets as a means of bypassing sanctions, moving funds across borders instantly, and financing operations without the need for a traditional banking relationship.
The anonymity and speed that digital currencies provide are particularly attractive to groups that operate under constant surveillance and face severe financial restrictions. In response, the United States and its allies have been ramping up efforts to tighten crypto regulations, improve the traceability of blockchain transactions, and compel exchanges to adopt more rigorous KYC/AML procedures. The DOJ filing underscores the challenges regulators face: even as major exchanges tighten their compliance regimes, smaller platforms and decentralized wallets can serve as alternative pathways for illicit finance.
The document also highlights the importance of international cooperation, as many of the recommended services are based in jurisdictions that do not share the same level of transparency or legal obligations as the United States. From a strategic standpoint, the instructions given by Hamas’ military wing illustrate a broader shift in how militant organizations adapt to technological change. By integrating crypto‑centric fundraising into their operational playbook, they can tap into a global diaspora of supporters who are comfortable using digital assets.
This not only expands their donor base but also reduces reliance on cash smuggling, hawala networks, or charitable fronts that are more vulnerable to disruption. The DOJ’s exposure of these crypto‑fundraising tactics is expected to feed into ongoing prosecutions and may lead to new indictments against individuals or entities that facilitate the transfers. Prosecutors are likely to argue that the deliberate circumvention of a regulated exchange like Binance, coupled with the use of privacy‑enhancing wallets, constitutes a knowing effort to evade financial sanctions and support a designated terrorist organization.
In summary, the newly released Justice Department documents reveal a calculated effort by Hamas’ armed wing to guide donors away from mainstream cryptocurrency exchanges, particularly Binance, and toward a suite of alternative platforms that offer greater anonymity. By channeling funds through Trust Wallet, Bybit, OKX, Kast, Redotpay and ultimately an external TRON wallet, the group aims to obscure the financial trail and sustain its operations in the face of heightened regulatory scrutiny. This case exemplifies the evolving landscape of terrorist financing in the digital age and underscores the need for robust, coordinated responses from governments, financial institutions, and the cryptocurrency industry alike.