In a recent filing submitted to the United States Department of Justice, investigators disclosed a set of detailed instructions circulated by the military arm of Hamas, the Palestinian Islamist organization that controls the Gaza Strip. The documents, which form part of a broader effort to dismantle the financial networks that sustain the group’s operations, reveal that Hamas’ armed wing has explicitly warned its donors and sympathizers to refrain from using the popular cryptocurrency exchange Binance when moving digital assets.
Instead, the group recommended a suite of alternative services—Trust Wallet, Bybit, OKX, Kast, and Redotpay—through which contributors could funnel crypto funds into a designated external wallet on the TRON blockchain. The guidance appears to be a calculated response to increasing scrutiny of cryptocurrency platforms by law‑enforcement agencies worldwide.
Binance, which boasts the largest trading volume among global exchanges, has been the focus of multiple investigations over the past few years for alleged lapses in anti‑money‑laundering (AML) controls and for facilitating illicit transfers. By advising supporters to sidestep Binance, Hamas aims to reduce the risk that its financial flows will be flagged, frozen, or seized by authorities monitoring the exchange’s activity. According to the DOJ filing, the instructions were disseminated through encrypted messaging channels and private online forums frequented by Hamas supporters. The message emphasized that the alternative platforms—Trust Wallet, Bybit, OKX, Kast and Redotpay—offer “greater privacy and fewer compliance checks,” making them more suitable for the covert movement of funds.
The donors were instructed to purchase or transfer cryptocurrency on these platforms and then send the assets to a specific TRON wallet address that had been pre‑registered by the organization’s financial operatives. TRON, a blockchain network known for its high throughput and low transaction fees, has become a favored conduit for illicit actors seeking to move value quickly and with minimal cost.
The DOJ’s documents note that the external TRON wallet in question is linked to a series of downstream addresses that ultimately fund Hamas’ military procurement, including the acquisition of weapons, ammunition, and the financing of operational logistics in Gaza. By leveraging the TRON ecosystem, the group can exploit the network’s relative anonymity and the ability to execute rapid, cross‑border transfers without the need for traditional banking intermediaries. The decision to recommend Trust Wallet, a non‑custodial mobile wallet, further underscores Hamas’ intent to minimize third‑party oversight. Trust Wallet allows users to retain full control of their private keys, meaning that the platform itself does not hold or manage the funds, thereby reducing the likelihood of external audits or seizure.
Similarly, Bybit and OKX are cryptocurrency derivatives exchanges that have historically positioned themselves as “crypto‑first” platforms with less stringent KYC (Know Your Customer) protocols, especially for users who transact in smaller volumes. Kast and Redotpay, while less well‑known, are described in the filing as “peer‑to‑peer payment services” that facilitate direct transfers between users without routing the transaction through a centralized exchange.
This peer‑to‑peer model can obscure the trail of funds, making it more difficult for investigators to trace the ultimate destination of the money. The DOJ’s exposure of these instructions is part of a larger crackdown on the use of digital currencies by terrorist organizations. In recent years, U.S.
authorities have successfully prosecuted several individuals for providing material support to Hamas through cryptocurrency, citing violations of the International Emergency Economic Powers Act (IEEPA) and the Terrorist Financing Prevention Act. The current filing adds to a growing body of evidence that Hamas is actively adapting its fundraising strategies to incorporate emerging financial technologies.
Analysts point out that the shift away from mainstream exchanges like Binance reflects a broader trend among illicit actors: the migration toward decentralized finance (DeFi) platforms and privacy‑enhancing tools. While Binance has implemented more robust AML measures, including real‑time monitoring and enhanced user verification, the platform’s sheer size makes it an attractive target for regulators seeking high‑impact enforcement actions. By contrast, smaller or niche services often operate under the radar, offering a perceived safe haven for money that would otherwise be flagged on larger exchanges. The implications of this discovery are significant for both policymakers and the private sector.
For regulators, it highlights the necessity of extending compliance obligations beyond the biggest exchanges to include a wider array of crypto service providers, especially those that facilitate wallet creation and peer‑to‑peer payments. For the cryptocurrency industry, the filing serves as a reminder that lax KYC procedures can inadvertently provide a conduit for terrorist financing, prompting calls for industry‑wide standards that balance user privacy with security.
In response to the DOJ’s findings, Binance issued a brief statement reaffirming its commitment to combating illicit activity and noting that it continually upgrades its compliance framework in line with global regulations. The exchange also emphasized that it cooperates fully with law‑enforcement agencies and that any accounts found to be involved in prohibited activities are subject to immediate suspension and reporting. Meanwhile, the recommended platforms have either declined to comment or have provided limited public statements. Trust Wallet’s developers reiterated that the wallet is a non‑custodial tool designed for user sovereignty and that they do not retain any user data that could be used for investigative purposes.
Bybit and OKX have both highlighted their ongoing efforts to strengthen AML controls, though critics argue that the pace of implementation lags behind the rapid evolution of illicit financing tactics. Overall, the DOJ’s disclosure underscores a key reality: as financial technologies evolve, so too do the methods employed by groups like Hamas to sustain their operations. By directing donors toward less regulated crypto services and exploiting the anonymity of the TRON blockchain, the organization seeks to shield its revenue streams from detection.
Continuous vigilance, collaborative intelligence sharing, and adaptive regulatory frameworks will be essential to countering these emerging threats and ensuring that the promise of digital finance is not undermined by its misuse.