In a recent filing submitted to the United States Department of Justice, investigators disclosed a detailed set of instructions that Hamas’ military wing, commonly known as the Izz ad-Din al-Qassam Brigades, circulated among its financial supporters. The guidance explicitly warned donors against using the popular cryptocurrency exchange Binance to move funds, citing heightened scrutiny and the risk of detection on that platform. Instead, the group recommended a series of alternative digital‑currency services—Trust Wallet, Bybit, OKX, Kast, and Redotpay—as more discreet conduits for transferring assets to a designated external wallet on the TRON blockchain.
The DOJ documents, which form part of a broader crackdown on illicit financing of terrorism, outline how the Hamas military organization has adapted its fundraising tactics to exploit the relative anonymity and speed offered by decentralized finance (DeFi) tools. By steering contributors away from Binance, a platform that has recently faced increased regulatory pressure and compliance obligations, the group aims to reduce the likelihood that its transactions will be flagged by anti‑money‑laundering (AML) systems or frozen by law‑enforcement agencies. According to the filing, the instructions were disseminated through encrypted messaging apps and private online forums frequented by sympathizers of the Palestinian cause.
The communication emphasized the importance of using a TRON‑based wallet address, which is compatible with the TRC‑20 token standard, to receive the cryptocurrency. This choice is strategic: TRON’s network is known for low transaction fees and rapid settlement times, making it an attractive option for moving relatively small sums quickly across borders without attracting the attention of financial watchdogs.
The recommended platforms each serve a specific role in the laundering chain. Trust Wallet, for instance, is a non‑custodial mobile wallet that allows users to store private keys locally on their devices, thereby eliminating the need to trust a third‑party custodian. Bybit and OKX are major cryptocurrency exchanges that support a wide range of trading pairs and often provide fiat on‑ramps, enabling donors to convert local currencies into digital assets with minimal friction.
Kast and Redotpay, while less well‑known, function as payment processors that can facilitate the conversion of crypto into other forms of value, such as prepaid cards or direct transfers to other wallets. The documents also detail a step‑by‑step process for donors: first, acquire the preferred cryptocurrency—typically USDT (Tether) or USDC (USD Coin) due to their stable‑coin nature—through a local exchange or peer‑to‑peer transaction. Next, transfer the stable‑coin to one of the suggested platforms, ensuring that the transaction is labeled as a personal transfer rather than a commercial one. After the funds appear in the chosen exchange’s account, the donor is instructed to withdraw the assets to the external TRON wallet address provided by Hamas operatives.
The final stage involves confirming receipt of the funds via an encrypted channel, after which the donor may receive a token of appreciation or further instructions for subsequent contributions. Law‑enforcement analysts highlighted several reasons why Hamas is keen to avoid Binance.
First, Binance has a sizable user base and sophisticated compliance infrastructure, including Know‑Your‑Customer (KYC) protocols and transaction monitoring tools that can flag suspicious activity. Second, the exchange has recently entered into memoranda of understanding with multiple jurisdictions to share data on illicit transactions, increasing the risk that any transfers linked to a designated terrorist organization could be traced back to the source.
By contrast, the alternative platforms mentioned in the guidance either operate with looser regulatory oversight or provide more robust privacy features, making them less attractive targets for investigation. The DOJ’s filing underscores a broader trend in which terrorist and extremist groups are increasingly turning to decentralized finance to circumvent traditional banking systems. The anonymity afforded by blockchain technology, combined with the proliferation of privacy‑focused wallets and mixers, creates a complex environment for regulators.
While blockchain transactions are publicly recorded on immutable ledgers, the identities behind wallet addresses often remain hidden unless linked to real‑world information through KYC processes or law‑enforcement subpoenas. In response to these findings, U.S.
authorities have intensified efforts to monitor cryptocurrency flows linked to terrorism financing. The Financial Crimes Enforcement Network (FinCEN) has issued new guidance urging financial institutions to apply heightened due diligence when dealing with digital‑asset service providers, and the Treasury’s Office of Foreign Assets Control (OFAC) has expanded its list of sanctioned entities to include several crypto exchanges and wallet services suspected of facilitating illicit transfers. Experts caution that while the guidance from Hamas demonstrates a sophisticated understanding of the crypto ecosystem, the very act of publicizing such instructions may also provide investigators with valuable intelligence. By mapping out the specific platforms and wallet types favored by the group, analysts can develop targeted surveillance strategies, such as tracking large inflows to the recommended exchanges or monitoring blockchain analytics for patterns that match the described transaction flow.
The revelation of these instructions also raises questions about the responsibilities of the platforms named in the document. Trust Wallet, Bybit, OKX, Kast, and Redotpay have each issued statements affirming their commitment to compliance and cooperation with law‑enforcement agencies. Some have highlighted ongoing efforts to implement advanced AML controls, including transaction monitoring, suspicious activity reporting, and user verification enhancements. Nonetheless, the rapid evolution of illicit financing tactics continues to challenge these companies, prompting calls for industry‑wide standards and greater collaboration with governmental bodies.
In summary, the DOJ filing paints a clear picture of how Hamas’ military wing is leveraging the flexibility and relative opacity of the crypto world to sustain its operations. By steering donors away from mainstream exchanges like Binance and toward a suite of alternative wallets and exchanges, the organization seeks to minimize exposure to regulatory scrutiny while maintaining a steady flow of financial resources.
This development underscores the urgent need for coordinated international action, robust regulatory frameworks, and advanced analytical tools to detect and disrupt the financial lifelines of terrorist groups operating in the digital age.