In a recent filing submitted to the United States Department of Justice, investigators disclosed a striking piece of internal communication from the armed wing of Hamas, the Palestinian Islamist organization that controls the Gaza Strip. The document, which forms part of a broader criminal case involving money‑laundering and terrorism financing, shows that Hamas’ military leadership is actively directing its donors on how to move digital assets in a way that evades detection by financial regulators and law‑enforcement agencies.
The guidance, which was circulated among Hamas’ fundraising networks, explicitly warns supporters not to send cryptocurrency through Binance, the world’s largest cryptocurrency exchange by volume. Instead, the message advises using a collection of alternative services—namely Trust Wallet, Bybit, OKX, Kast, and Redotpay—to transfer digital coins to a designated TRON (TRX) wallet that lies outside the direct control of mainstream platforms. By steering donors away from Binance, Hamas appears to be seeking to avoid the heightened scrutiny that the exchange now faces from regulators in the United States, Europe, and elsewhere, where it has been pressured to improve its anti‑money‑laundering (AML) safeguards.
The DOJ filing outlines the reasoning behind this recommendation. According to the internal memo, Binance’s robust Know‑Your‑Customer (KYC) procedures and its cooperation with law‑enforcement agencies make it a risky conduit for illicit financing. The Hamas operatives argue that by using wallets and exchanges that either have weaker KYC standards or that are based in jurisdictions with less stringent oversight, they can obscure the origin of the funds and reduce the likelihood that transactions will be flagged as suspicious. The document specifically mentions the use of Trust Wallet, a non‑custodial mobile wallet that allows users to hold private keys on their own devices, thereby limiting the amount of data that can be collected by third parties.
Bybit and OKX, both of which are major players in the derivatives and spot‑trading markets, are highlighted as alternative routes because they reportedly offer more flexible deposit options and have historically been slower to adopt comprehensive AML protocols. Kast and Redotpay, lesser‑known services that cater to a niche audience of crypto enthusiasts, are also listed as viable pathways for moving funds into the TRON ecosystem. TRON, a blockchain platform known for its high throughput and low transaction fees, is favored by the Hamas network because it enables rapid, inexpensive transfers that can be executed without the need for intermediary banks or traditional financial institutions.
The strategic choice of TRON is not accidental. The blockchain’s architecture allows for the creation of custom tokens and smart contracts, which can be employed to automate the distribution of funds to multiple recipients or to embed additional layers of anonymity. Moreover, the TRON network’s popularity in the Middle East and its relatively open regulatory environment make it an attractive venue for groups seeking to fund operations while staying under the radar of Western authorities. From a broader perspective, the DOJ’s discovery underscores a growing trend among extremist and terrorist organizations: the adoption of decentralized finance (DeFi) tools to sidestep conventional financial oversight.
As governments around the world tighten AML regulations and increase reporting requirements for cryptocurrency exchanges, illicit actors are turning to a patchwork of less regulated platforms, peer‑to‑peer (P2P) marketplaces, and privacy‑focused wallets to move money across borders. Analysts note that the shift away from centralized exchanges like Binance to more fragmented services poses significant challenges for investigators.
Centralized platforms typically retain transaction logs, user identification data, and other metadata that can be subpoenaed in criminal investigations. In contrast, non‑custodial wallets such as Trust Wallet store private keys locally on a user’s device, meaning that the service provider holds little to no information about the wallet’s owner or transaction history. When funds are subsequently moved through exchanges that have lax KYC standards, the paper trail becomes increasingly opaque. The DOJ filing also reveals that Hamas’ financial operatives are not merely passively receiving donations; they are actively managing a sophisticated logistics chain that includes conversion of fiat currency into crypto, routing through multiple platforms, and eventual disbursement to operatives on the ground.
The memo describes a step‑by‑step process: donors first acquire a stablecoin or a major cryptocurrency such as Bitcoin or Ethereum, then swap it for TRON on a platform with minimal verification, and finally send the TRX tokens to a pre‑determined wallet address that serves as a hub for further distribution. From this hub, the funds can be split into smaller amounts and sent to various field units, each of which can convert the crypto back into local currency or use it to purchase equipment, supplies, or services needed for militant activities. Law‑enforcement officials argue that this multi‑layered approach is designed to exploit the inherent anonymity of blockchain transactions while also leveraging the speed and low cost of the TRON network.
By avoiding traditional banking channels, Hamas reduces the risk of asset freezes, sanctions, or other financial countermeasures that could cripple its operational capabilities. The revelation has prompted calls for tighter coordination among international regulators, cryptocurrency exchanges, and intelligence agencies.
Experts suggest that a unified framework for sharing blockchain analytics, combined with mandatory reporting standards for all crypto service providers—regardless of size or jurisdiction—could help close the loopholes that groups like Hamas are exploiting. Some policymakers are also advocating for the development of advanced forensic tools capable of tracing funds across multiple blockchains and identifying patterns indicative of terrorist financing. In the meantime, the DOJ continues to pursue legal actions against individuals and entities suspected of facilitating the flow of cryptocurrency to Hamas.
The agency’s statement accompanying the filing emphasizes that any person who knowingly provides financial services to a designated foreign terrorist organization faces severe criminal penalties, including substantial fines and lengthy prison sentences. Overall, the document provides a rare glimpse into the operational mindset of Hamas’ military wing as it adapts to the evolving financial landscape. By explicitly steering donors away from Binance and toward a constellation of less regulated platforms, the group demonstrates a calculated effort to stay ahead of regulatory crackdowns while maintaining a steady stream of funding through digital assets.
The case serves as a stark reminder of the dual‑use nature of cryptocurrency technology: while it offers unprecedented financial inclusion and innovation, it also presents new avenues for illicit actors to fund violent and destabilizing activities. The challenge for governments and the private sector alike will be to strike a balance that preserves the legitimate benefits of decentralized finance without allowing it to become a safe haven for terrorism financing.