In a recent filing submitted to the United States Department of Justice, investigators disclosed that the military branch of Hamas has been actively guiding its financial backers on how to move digital assets in a way that minimizes the risk of detection and seizure. The documents reveal a clear instruction from Hamas operatives: donors should refrain from sending cryptocurrency directly through Binance, one of the world’s largest and most visible crypto exchanges, and instead utilize a collection of alternative platforms and wallets that are perceived to be less scrutinized by regulators and law‑enforcement agencies.
The guidance specifically lists several services that supporters are encouraged to employ. These include Trust Wallet, a non‑custodial mobile wallet that allows users to retain full control over private keys; Bybit, a derivatives‑focused exchange that also offers spot trading; OKX, a global exchange with a broad suite of trading products; Kast, a lesser‑known platform that provides peer‑to‑peer crypto transactions; and Redotpay, a payment gateway that facilitates crypto transfers. By directing donors to these channels, Hamas aims to create a more fragmented and opaque financial pathway, making it harder for authorities to trace the flow of funds.
The preferred destination for the transferred assets is an external wallet on the TRON blockchain. TRON, known for its high throughput and low transaction fees, has become a popular choice for illicit actors because its network architecture allows rapid movement of tokens with relatively little on‑chain data that could be used for forensic analysis. The DOJ filing notes that the Hamas wing specifically requests that contributions be sent to a TRON wallet address that is not directly linked to any exchange account, thereby adding an extra layer of anonymity. Why avoid Binance?
Binance is a high‑profile exchange that complies with extensive Know‑Your‑Customer (KYC) and Anti‑Money‑Laundering (AML) regulations in many jurisdictions. Transactions conducted on Binance are subject to monitoring by the exchange’s compliance team and can be reported to authorities if suspicious activity is detected.
By steering donors away from Binance, Hamas reduces the likelihood that its funding streams will be flagged by the exchange’s internal controls or by external watchdogs. The shift toward decentralized or less regulated platforms reflects a broader trend among sanctioned groups and criminal networks: the adoption of crypto‑centric financial strategies that exploit the borderless nature of digital assets. While traditional banking channels are tightly monitored, cryptocurrencies offer a degree of pseudonymity that can be leveraged to evade sanctions. However, the narrative that crypto is completely untraceable is misleading.
Blockchain analysis firms have developed sophisticated tools to follow token movements, especially when they intersect with regulated exchanges or fiat on‑ramps. By using a combination of non‑custodial wallets and niche exchanges, Hamas attempts to stay one step ahead of these investigative techniques. The DOJ’s disclosure also sheds light on the operational sophistication of Hamas’ financial apparatus.
The group has evidently conducted internal risk assessments, identifying which platforms pose the greatest exposure to law‑enforcement scrutiny. The inclusion of both well‑known services like Bybit and OKX, alongside more obscure options such as Kast and Redotpay, suggests a layered approach: high‑volume transfers may be routed through larger exchanges that can handle larger sums, while smaller, more frequent payments could be funneled through lesser‑known services to avoid drawing attention. From a policy perspective, these findings underscore the challenges faced by regulators in the crypto space. The rapid evolution of financial technology outpaces the development of legal frameworks, creating gaps that illicit actors can exploit.
International cooperation is essential, as the crypto ecosystem is inherently global. Agencies like the Financial Action Task Force (FATF) have issued guidance on virtual asset service providers (VASPs), but enforcement remains uneven across jurisdictions. In response to the DOJ’s revelations, Binance has reiterated its commitment to compliance, stating that it continuously monitors transactions for suspicious activity and works closely with law‑enforcement agencies worldwide. The exchange has also highlighted its robust KYC procedures, which require users to verify their identities before accessing certain services.
Nonetheless, the incident illustrates that even the most compliant platforms can become inadvertent conduits for illicit financing if users deliberately circumvent them. For donors sympathetic to Hamas, the instructions serve as a practical manual for navigating the crypto landscape while attempting to stay under the radar.
They are told to set up a Trust Wallet, acquire TRON (TRX) tokens, and then transfer those tokens to a designated external address. The process may involve converting other cryptocurrencies into TRX on one of the listed exchanges, withdrawing the TRX to the non‑custodial wallet, and finally sending it to the target address. Each step is designed to fragment the transaction trail, making it more difficult for analysts to piece together the full picture. The broader implication of this development is a reminder that the fight against terrorist financing is increasingly digital.
As groups like Hamas adapt to the technological environment, governments and private sector actors must enhance their surveillance capabilities, share intelligence across borders, and develop adaptive regulatory measures that can keep pace with innovation. The DOJ filing is a clear indication that authorities are actively monitoring these trends and are prepared to pursue legal action against individuals and entities that facilitate such illicit transfers. In summary, the United States Department of Justice has uncovered a strategic effort by Hamas’ military wing to steer its supporters away from mainstream crypto exchanges like Binance and toward a suite of alternative platforms and wallets, ultimately funneling funds to a TRON blockchain address. This approach reflects a calculated attempt to obscure financial flows, exploit the perceived anonymity of decentralized networks, and evade regulatory oversight.
The revelation highlights the ongoing cat‑and‑mouse game between illicit actors seeking to harness emerging financial technologies and the authorities tasked with disrupting those channels.