In a recent filing submitted to the United States Department of Justice, investigators disclosed a series of internal communications from the armed wing of Hamas that detail how the group attempts to funnel financial support from sympathizers around the globe. The documents reveal a strategic shift in the organization’s cryptocurrency‑fundraising tactics, specifically urging donors to steer clear of the popular exchange Binance when moving digital assets. Instead, the group recommended a suite of alternative platforms—Trust Wallet, Bybit, OKX, Kast, and Redotpay—as conduits for transferring crypto to a designated external wallet on the TRON blockchain. The guidance appears in a series of messages that were intercepted by law‑enforcement officials during a broader crackdown on illicit financing of terrorism.
In the communications, Hamas’ military wing explicitly cautions supporters that using Binance could expose their transactions to heightened scrutiny, given the exchange’s comparatively high profile and its recent cooperation with regulatory authorities. By contrast, the suggested platforms are portrayed as more obscure or less regulated, thereby offering a perceived layer of anonymity for contributors.
The recommended pathway involves converting donated funds—typically in the form of major cryptocurrencies such as Bitcoin (BTC) or Ethereum (ETH)—into TRON (TRX) tokens. Once converted, the donors are instructed to send the TRX to a specific wallet address that lies outside of any centralized exchange’s control.
This external wallet, hosted on the TRON network, is presented as a “cold storage” solution that is harder for investigators to trace. The documents note that the TRON blockchain’s high transaction throughput and relatively low fees make it an attractive choice for moving sizable sums quickly and discreetly.
The DOJ filing also sheds light on the broader operational context in which these instructions were issued. Hamas’ military wing has long relied on a patchwork of fundraising channels, ranging from traditional cash donations to more modern digital avenues. Over the past few years, the organization has increasingly turned to cryptocurrencies as a means of bypassing conventional banking systems that are subject to sanctions and anti‑money‑laundering (AML) controls.
The shift toward decentralized finance (DeFi) platforms reflects a calculated effort to stay ahead of regulatory developments and to exploit the inherent pseudonymity of blockchain transactions. Law‑enforcement analysts emphasize that the advice to avoid Binance is not merely a precaution against detection; it also reflects a strategic assessment of the exchange’s compliance posture. Binance, after facing a series of investigations across multiple jurisdictions, has bolstered its AML and know‑your‑customer (KYC) procedures.
This has resulted in a higher likelihood that large or suspicious transfers will be flagged, investigated, and potentially frozen. By steering donors toward less scrutinized services—such as Trust Wallet, which functions primarily as a self‑custody wallet, or Bybit and OKX, which are still subject to varying degrees of regulatory oversight—the Hamas network seeks to reduce the risk of transaction freezes or account closures. The inclusion of platforms like Kast and Redotpay is particularly noteworthy.
These services are relatively obscure in the mainstream crypto ecosystem, and they often operate with minimal user verification requirements. Their lower profile makes them attractive for illicit actors who wish to obscure the source and destination of funds.
The DOJ’s documents suggest that Hamas operatives have conducted informal vetting of these platforms, weighing factors such as transaction speed, fee structure, and the perceived likelihood of law‑enforcement interference. Beyond the technical instructions, the intercepted messages also contain motivational language aimed at encouraging continued support.
Donors are reminded of the humanitarian and defensive objectives of the organization, framed as a struggle for self‑determination. The communications appeal to the sympathizers’ sense of solidarity, urging them to “choose the safest route” for their contributions to ensure that the money reaches the intended recipients without interruption.
From a policy perspective, the revelations underscore the challenges that governments face in tracking and disrupting terrorist financing in the digital age. While traditional financial institutions are subject to rigorous reporting standards, the decentralized nature of many blockchain networks complicates the task of tracing funds.
Even when a transaction is flagged on a public ledger, linking a wallet address to a real‑world individual often requires additional investigative steps, such as subpoenaing exchange data or employing sophisticated blockchain analytics tools. The DOJ filing indicates that authorities are increasingly employing these analytical techniques, collaborating with private sector firms that specialize in blockchain forensics. By mapping transaction flows, identifying clustering patterns, and cross‑referencing known illicit addresses, investigators aim to construct a comprehensive picture of how terrorist groups move money online.
The specific focus on TRON in this case reflects a broader trend: as certain blockchains gain popularity for their speed and low cost, they also become attractive vectors for illicit finance. In response to the findings, several cryptocurrency platforms have reiterated their commitment to compliance. Binance, for instance, issued a statement emphasizing its ongoing cooperation with law‑enforcement agencies and its dedication to maintaining robust AML protocols. Meanwhile, smaller services like Kast and Redotpay have faced heightened scrutiny, with regulators in multiple jurisdictions considering tighter licensing requirements or outright bans on certain activities.
The broader implication of this disclosure is that terrorist organizations are not static in their operational methods; they adapt quickly to emerging technologies and regulatory environments. As governments tighten oversight of major exchanges, these groups will likely continue to diversify their financial pipelines, exploring newer blockchain ecosystems, privacy‑focused coins, and emerging DeFi protocols.
For policymakers, the key takeaway is the necessity of a coordinated, multi‑layered approach that blends regulatory enforcement with technological innovation. Enhancing transparency standards across all crypto service providers, fostering information sharing between public and private sectors, and investing in advanced analytics are essential steps to stay ahead of malicious actors. In summary, the DOJ’s recent filing provides a rare glimpse into the internal playbook of Hamas’ military wing as it navigates the complex landscape of cryptocurrency fundraising.
By advising donors to bypass Binance in favor of less regulated wallets and exchanges, and by funneling funds through the TRON network to an external wallet, the organization demonstrates a sophisticated understanding of both the opportunities and risks presented by digital assets. The revelations serve as a reminder that the fight against terrorist financing must evolve alongside the technologies that enable it, demanding vigilance, collaboration, and continuous adaptation from all stakeholders involved.