In a recent filing submitted to the United States Department of Justice, investigators disclosed a set of instructions allegedly issued by the military wing of Hamas, the Palestinian Islamist organization that controls the Gaza Strip. The guidance, which was shared with potential donors and financial supporters, explicitly cautioned against the use of the popular cryptocurrency exchange Binance for moving digital assets.
Instead, the document outlined a preferred set of alternative services—including Trust Wallet, Bybit, OKX, Kast, and Redotpay—through which contributors could transfer crypto into an external wallet on the TRON blockchain. The revelation offers a rare glimpse into the operational security measures employed by a non‑state armed group that has increasingly turned to digital currencies to fund its activities.
While Hamas has historically relied on traditional fundraising channels such as charitable fronts, diaspora networks, and cash smuggling, the rise of cryptocurrencies has provided a new avenue for rapid, cross‑border transfers that are harder for authorities to trace. The DOJ filing suggests that the group is not only aware of the surveillance capabilities of major exchanges like Binance but is also actively seeking to circumvent them by dispersing transactions across a more fragmented ecosystem of platforms.
According to the filing, the instructions were distributed via encrypted messaging apps and private chat groups used by Hamas sympathizers. The message emphasized that Binance’s compliance team and its ties to U.S.
regulatory bodies made it a high‑risk conduit for illicit financing. By contrast, the recommended services were portrayed as less scrutinized and more conducive to anonymous transfers. The guidance specifically mentioned the use of Trust Wallet, a non‑custodial mobile wallet that allows users to hold private keys on their own devices, thereby reducing the exposure to third‑party oversight. Bybit and OKX were highlighted as exchange platforms that support a wide range of crypto assets and reportedly have looser Know‑Your‑Customer (KYC) procedures.
Kast and Redotpay, lesser‑known services, were also listed, suggesting that Hamas’ financial operatives have conducted extensive research into niche platforms that may escape the radar of mainstream regulators. The document further instructed donors to convert their contributions into TRON (TRX) tokens before sending them to a designated external TRON wallet address.
TRON, a blockchain known for its high transaction throughput and low fees, is attractive for illicit actors because it enables swift movement of funds without the heavy costs associated with Bitcoin or Ethereum. The choice of an external wallet—one that is not hosted on any exchange—adds an additional layer of anonymity, as the private keys remain solely in the hands of the recipient.
This method also complicates law‑enforcement attempts to freeze or seize assets, since the wallet can be moved across multiple nodes and hidden behind a series of intermediary addresses. Analysts note that the shift toward decentralized finance (DeFi) tools reflects a broader trend among militant and criminal groups worldwide. By leveraging the pseudonymous nature of blockchain transactions, these organizations can sidestep traditional financial monitoring systems. However, the very transparency of blockchain ledgers also presents a paradox: while the identities of participants may be obscured, every transaction is permanently recorded on a public ledger.
This duality has spurred the development of sophisticated laundering techniques, such as mixing services, chain hopping, and the use of privacy‑focused coins, all of which aim to obscure the origin and destination of funds. The DOJ’s disclosure is part of a larger investigative effort to track the flow of cryptocurrency into extremist organizations. In recent years, U.S. authorities have seized millions of dollars in digital assets linked to terrorist financing, including Bitcoin tied to al‑Qaeda affiliates and Ether associated with ISIS supporters.
The agency’s approach combines blockchain analytics, cooperation with exchange operators, and international partnerships to dismantle the financial infrastructure of these groups. Critics of the crackdown argue that excessive regulation of cryptocurrency exchanges could stifle innovation and impede legitimate users. Nonetheless, the government maintains that targeted enforcement actions are necessary to prevent the misuse of emerging financial technologies.
The case involving Hamas’ military wing underscores the challenges regulators face: balancing the promotion of a vibrant digital economy with the imperative to block illicit financing pathways. For donors sympathetic to Hamas, the guidance represents a clear instruction set aimed at protecting their contributions from seizure and ensuring that the funds reach the intended recipients without detection.
For law‑enforcement agencies, the document offers a roadmap to identify vulnerable points in the financing chain. By monitoring activity on the specified platforms and tracing TRON transactions to the external wallet address, investigators can potentially disrupt the flow of resources that sustain the organization’s military operations. In response to the filing, Binance issued a statement reaffirming its commitment to compliance and cooperation with authorities.
The exchange highlighted its robust anti‑money‑laundering (AML) program, which includes real‑time transaction monitoring, mandatory KYC verification for users, and regular reporting to regulatory bodies. Binance also noted that it continuously updates its policies to address emerging threats and works closely with law‑enforcement agencies worldwide.
The emergence of alternative platforms like Trust Wallet, Bybit, OKX, Kast, and Redotpay as preferred channels for illicit financing raises questions about the effectiveness of current regulatory frameworks. Many of these services operate in jurisdictions with lax oversight, making it difficult for a single nation to enforce uniform standards.
International coordination, therefore, becomes essential. Organizations such as the Financial Action Task Force (FATF) have begun to extend their recommendations to cover virtual asset service providers (VASPs), urging member states to implement comprehensive licensing, reporting, and monitoring requirements. Ultimately, the DOJ filing illustrates the evolving tactics of a group that has long adapted to changing financial landscapes.
From traditional cash couriers to sophisticated digital money‑laundering schemes, Hamas continues to seek out the most efficient and least conspicuous means of funding its activities. As cryptocurrency technology advances and new platforms emerge, both policymakers and security agencies will need to stay ahead of the curve, employing cutting‑edge analytics and fostering global cooperation to counter the misuse of these powerful financial tools.
The public disclosure of these instructions serves as a reminder that while blockchain promises decentralization and privacy, it also offers a conduit for those intent on financing violence. Vigilance, transparency, and collaborative enforcement remain the cornerstone of any strategy aimed at curbing the flow of illicit funds in the digital age.