In a recent filing submitted to the United States Department of Justice, investigators disclosed a striking piece of internal communication from the military arm of Hamas, the Palestinian Islamist organization that controls the Gaza Strip. The document shows that Hamas’ armed wing explicitly warned its financial backers to avoid sending digital currency through Binance, the world’s largest cryptocurrency exchange, and instead to employ a collection of alternative services—Trust Wallet, Bybit, OKX, Kast, and Redotpay—to move funds into a designated TRON (TRX) wallet located outside of the exchange’s ecosystem. This advisory, which appears to be part of a broader operational manual for fundraising, underscores the group’s sophisticated understanding of the crypto landscape and its attempts to evade detection by law‑enforcement agencies and financial regulators. The DOJ filing, which was unsealed as part of a larger criminal case against individuals alleged to have facilitated Hamas’ financing, contains screenshots of internal messages that read, in essence, “Do not use Binance for transfers.
Use Trust Wallet, Bybit, OKX, Kast, or Redotpay to send the crypto to the external TRON wallet we have provided.” The language is straightforward and practical, indicating a clear intent to steer donors away from a platform that is heavily scrutinized by regulators and more likely to cooperate with investigative requests. By contrast, the recommended services are either less regulated, have weaker Know‑Your‑Customer (KYC) procedures, or provide greater anonymity for users, making them attractive to actors seeking to conceal the origin and destination of illicit funds. Binance, despite its massive user base and global reach, has faced increasing pressure from U.S.
authorities over its compliance practices. In recent years, the exchange has entered into settlement agreements with the Securities and Exchange Commission (SEC) and the Financial Crimes Enforcement Network (FinCEN) to address alleged lapses in anti‑money‑laundering (AML) controls. Hamas’ decision to sidestep Binance therefore reflects a strategic calculation: by using platforms that are perceived to have looser oversight, the organization hopes to reduce the risk that its financial flows will be flagged, frozen, or reported to law‑enforcement bodies. Trust Wallet, for example, is a non‑custodial mobile wallet that allows users to store a wide variety of tokens without the need to create an account on a centralized exchange.
Because it does not hold users’ private keys, it operates outside the direct purview of most regulatory frameworks. Bybit and OKX are cryptocurrency derivatives exchanges that, while sizable, have historically emphasized privacy and have faced criticism for limited transparency in certain jurisdictions. Kast and Redotpay are lesser‑known services that specialize in peer‑to‑peer transfers and often market themselves as privacy‑focused alternatives to mainstream platforms.
The instruction to route the money to a TRON wallet is also notable. TRON, a blockchain platform known for its high throughput and low transaction fees, has become a popular conduit for illicit actors because its network can process large volumes of transfers quickly and at minimal cost.
Moreover, TRON’s address format and transaction data are less commonly monitored by mainstream blockchain analytics firms, which tend to prioritize Bitcoin, Ethereum, and other higher‑profile chains. By funneling donations into a TRON address, Hamas can benefit from rapid, inexpensive movement of funds while complicating the tracing efforts of investigators.
The DOJ’s disclosure of this guidance is part of a broader pattern of U.S. authorities cracking down on the use of cryptocurrencies by terrorist organizations and sanctioned entities.
Over the past few years, the Treasury’s Office of Foreign Assets Control (OFAC) has added numerous digital‑currency addresses and service providers to its sanctions list, and the Department of Justice has pursued both domestic and foreign actors who facilitate the flow of crypto to extremist groups. The inclusion of Hamas’ operational advice in a criminal filing demonstrates that investigators are now able to penetrate the encrypted channels that these groups use to coordinate fundraising.
Legal analysts suggest that the evidence of Hamas’ explicit instructions could be used to charge individuals who comply with the guidance with conspiracy to provide material support to a designated foreign terrorist organization. Under U.S.
law, providing financial services, even in the form of cryptocurrency transfers, to a group like Hamas can carry severe penalties, including up to 20 years in prison for each count of material support, plus substantial fines. Beyond the immediate legal ramifications, the revelation raises broader questions about the evolving role of digital assets in the financing of conflict.
While traditional methods of moving money—such as hawala networks, cash couriers, and charitable fronts—remain prevalent, cryptocurrencies offer a new set of tools that can be leveraged for both transparency and obfuscation. The speed, borderless nature, and pseudonymous characteristics of crypto make it attractive to groups seeking to bypass conventional banking sanctions. However, the same properties also enable law‑enforcement agencies to employ blockchain analytics, transaction monitoring, and international cooperation to trace illicit flows. In response to the DOJ filing, Binance issued a brief statement emphasizing its commitment to compliance and cooperation with regulators worldwide.
The exchange reiterated that it continuously upgrades its AML and KYC procedures and works closely with law‑enforcement agencies to identify and block suspicious activity. Meanwhile, the other platforms mentioned—Trust Wallet, Bybit, OKX, Kast, and Redotpay—have not publicly commented on the allegations, though some have previously faced scrutiny for perceived lax oversight. The incident underscores the cat‑and‑mouse dynamic that defines the intersection of terrorism financing and emerging technologies.
As governments tighten regulations and improve detection capabilities, extremist groups adapt by seeking out newer, less regulated avenues. For policymakers, the challenge lies in striking a balance: fostering innovation and legitimate use of digital assets while preventing their exploitation for violent or illicit purposes.
International coordination, robust regulatory frameworks, and ongoing investment in blockchain forensic tools are likely to remain essential components of any effective strategy. In summary, the DOJ’s newly released documents reveal that Hamas’ military wing is actively directing its donors to avoid Binance and instead use a suite of alternative crypto services to funnel money into a TRON wallet. This tactic reflects a calculated effort to exploit perceived gaps in regulatory oversight and to leverage the speed and low cost of the TRON network. The disclosure not only provides law‑enforcement with concrete evidence of Hamas’ financing methods but also highlights the broader challenges that cryptocurrency poses for global security and financial integrity.