In a series of documents recently unsealed by the United States Department of Justice, investigators disclosed that the military wing of Hamas – the organization that controls the Gaza Strip and has been designated a terrorist group by the U.S., the European Union, and many other jurisdictions – has been actively advising its financial backers on how to move digital assets in a manner that minimizes the risk of detection and seizure. The guidance, which appears in internal communications and operational manuals recovered during a broader crackdown on illicit financing networks, specifically warns donors against using the popular cryptocurrency exchange Binance as a conduit for their contributions. Instead, the group recommends a suite of alternative services – Trust Wallet, Bybit, OKX, Kast, and Redotpay – to facilitate the transfer of funds into an external TRON (TRX) wallet that is under the control of Hamas operatives. The DOJ filing outlines the strategic reasoning behind this shift.
Binance, while one of the world’s largest crypto exchanges, has increasingly come under regulatory scrutiny in multiple jurisdictions, including the United States, where the Financial Crimes Enforcement Network (FinCEN) has issued guidance that could compel the platform to share user transaction data with law‑enforcement agencies. By steering donors away from Binance, Hamas seeks to exploit the relative opacity of smaller, less regulated platforms and wallet services that often lack robust Know‑Your‑Customer (KYC) procedures.
Trust Wallet, for example, is a non‑custodial mobile wallet that allows users to retain full control over private keys, making it difficult for external parties to trace the flow of funds once they leave the exchange. Bybit and OKX, both of which are headquartered in jurisdictions with less stringent reporting obligations, provide additional layers of anonymity. They enable users to convert fiat currency into a range of cryptocurrencies, including TRON, without necessarily revealing the ultimate beneficiary. The documents also mention Kast and Redotpay, lesser‑known services that specialize in peer‑to‑peer crypto transactions and have been flagged in the past for facilitating money‑laundering activities.
The combination of these platforms creates a multi‑step laundering chain: donors first purchase cryptocurrency on a relatively open market, then transfer the assets to a wallet service that does not retain extensive user data, and finally move the coins to a TRON address that is controlled by Hamas operatives. The choice of TRON as the final destination is notable.
TRON’s blockchain architecture is known for its high throughput and low transaction fees, making it an attractive vehicle for moving large sums quickly and cheaply. Moreover, the TRON network’s design offers a degree of privacy that, while not as strong as privacy‑focused coins like Monero, still presents challenges for investigators attempting to link wallet addresses to real‑world identities. The DOJ documents indicate that the Hamas military wing has set up a series of TRON wallets that act as aggregation points, allowing the group to consolidate donations from multiple donors before funneling the proceeds into its broader financial network, which supports procurement of weapons, logistical operations, and other activities related to its armed campaign. The guidance also includes operational security tips for donors.
For instance, supporters are instructed to use virtual private networks (VPNs) when accessing the recommended platforms, to avoid reusing passwords across services, and to employ two‑factor authentication (2FA) wherever possible. They are cautioned against sharing transaction details on social media or in group chats, as such disclosures could inadvertently expose the flow of funds to intelligence agencies monitoring extremist financing. The documents further advise donors to break up large transfers into smaller, incremental payments, a technique known as “structuring,” which can help evade automated detection algorithms employed by exchanges and financial institutions.
Law‑enforcement officials argue that this systematic approach to crypto fundraising underscores a broader trend among terrorist organizations: the rapid adoption of digital currencies to sidestep traditional banking oversight. Over the past decade, groups ranging from al‑Qaeda to the Islamic State have experimented with Bitcoin, Ethereum, and other assets to finance their operations. Hamas, however, appears to have refined its methodology, leveraging the lessons learned from earlier attempts and the evolving regulatory landscape. By moving away from mainstream exchanges that are more likely to cooperate with investigations, the group hopes to create a resilient financial pipeline that can survive heightened scrutiny.
The DOJ’s filing also references parallel investigations into individuals and entities that have allegedly facilitated these transfers. Several crypto‑exchange accounts have been identified as potential conduits for Hamas‑linked funds, and subpoenas have been issued to obtain transaction logs, user registration data, and communications records. In some cases, the authorities have coordinated with foreign law‑enforcement partners to seize assets frozen on the blockchain, using advanced tracing tools that can follow the movement of tokens across multiple wallets and exchanges.
Critics of the U.S. approach argue that focusing on the technological aspects of fundraising may overlook the underlying political and humanitarian dimensions of the conflict.
They contend that while disrupting illicit financing is a legitimate goal, it should be balanced with efforts to address the root causes that drive individuals to support Hamas, including economic deprivation, political disenfranchisement, and the ongoing blockade of Gaza. Nonetheless, the DOJ maintains that cutting off the financial lifelines of terrorist organizations is a critical component of national security strategy.
In summary, the newly released documents paint a detailed picture of how Hamas' military wing is actively guiding its donors to circumvent mainstream cryptocurrency platforms like Binance in favor of a more fragmented, less regulated set of services. By channeling contributions through Trust Wallet, Bybit, OKX, Kast, and Redotpay into a TRON wallet, the group aims to obscure the origin and destination of funds, thereby reducing the likelihood of detection by authorities. The guidance reflects a sophisticated understanding of the crypto ecosystem and demonstrates the group's adaptability in the face of evolving regulatory pressures.
As governments worldwide continue to grapple with the challenges of policing digital finance, the Hamas case serves as a stark reminder of the need for coordinated, technologically informed responses to the financing of terrorism.