In a recent filing submitted to the United States Department of Justice, investigators disclosed that the military arm of Hamas has been actively guiding its financial supporters on how to move digital assets in a manner that avoids detection and circumvents traditional financial oversight. The documents, which form part of a broader effort to dismantle the organization’s fundraising network, reveal a detailed set of instructions aimed at donors who wish to contribute cryptocurrency to the group’s war effort.
Rather than sending funds directly through Binance, one of the world’s largest cryptocurrency exchanges, the Hamas military wing has specifically advised supporters to employ a series of alternative wallets and platforms that provide a higher degree of anonymity and technical complexity. The guidance enumerates several services that donors should use, including Trust Wallet, Bybit, OKX, Kast and Redotpay. Each of these platforms offers distinct features that can obscure the trail of a transaction.
For example, Trust Wallet is a non‑custodial, mobile‑first wallet that allows users to hold private keys on their own devices, thereby eliminating the need for a centralized exchange to store or process the funds. Bybit and OKX are both derivatives‑focused exchanges that have built-in privacy tools, such as the ability to create multiple sub‑accounts and to route trades through internal liquidity pools, making it harder for external observers to link a given address to a specific user. Kast and Redotpay, while less widely known, are specialized payment processors that support a range of crypto‑to‑fiat conversion services and often operate under jurisdictions with looser reporting requirements.
The core of the instruction is to move the cryptocurrency from any of these platforms into an external wallet that resides on the TRON blockchain. TRON, a high‑throughput public ledger, is favored by many illicit actors because its transaction fees are minimal and its network can handle a massive volume of transfers without the delays that can plague other chains. By funneling funds into a TRON address, Hamas aims to take advantage of the chain’s speed and cost efficiency while also leveraging its relative obscurity in the eyes of Western regulators.
The documents note that the final destination wallet is typically a cold storage address, meaning it is kept offline and is not directly linked to any exchange account, further reducing the risk of seizure or interdiction. The DOJ filing underscores that this operational shift is not merely a tactical tweak but part of a broader strategic evolution in how militant organizations finance their activities. Over the past few years, Hamas has increasingly turned to digital currencies as a way to bypass sanctions, avoid the scrutiny of traditional banking systems, and tap into a global pool of sympathizers who are comfortable using crypto. The organization’s financial apparatus has become more sophisticated, employing encryption, mixing services, and now a multi‑platform approach that disperses the transaction flow across several services before consolidating it on a blockchain that is harder for law‑enforcement agencies to monitor.
From a law‑enforcement perspective, the advice to avoid Binance is particularly noteworthy. Binance, despite its size, has been under intense regulatory pressure in multiple jurisdictions, and its compliance protocols have been improving.
By steering donors away from Binance, Hamas seeks to exploit the comparatively weaker oversight on the alternative platforms mentioned. The filing also indicates that the group provides step‑by‑step tutorials, often in Arabic, that walk contributors through the process of creating wallets, purchasing crypto on one platform, transferring it to another, and finally sending it to the TRON address.
These tutorials frequently emphasize the importance of using VPNs, disabling location services, and employing privacy‑focused browsers to further mask the donor’s identity. The ramifications of this guidance extend beyond the immediate financial pipeline. By normalizing the use of multiple crypto services and emphasizing cross‑chain transfers, Hamas is effectively creating a resilient, decentralized funding model that can adapt to takedowns of any single point of failure.
If authorities shut down one exchange or seize a particular wallet, the organization can simply reroute its donors to another platform in the list without disrupting the overall flow of resources. This redundancy mirrors tactics used by other extremist groups that have adopted similar multi‑layered crypto strategies. In response, U.S. authorities are ramping up their investigative capabilities, employing blockchain analytics firms to trace the movement of funds across the listed platforms and to map the network of addresses associated with the TRON wallet.
While the anonymity of TRON presents challenges, analysts can still identify patterns, such as repeated transaction sizes, timing correlations, and the use of known mixing services that may link back to the original donors. The DOJ’s filing suggests that ongoing cooperation with international partners is crucial, as many of the platforms operate under different regulatory regimes. Ultimately, the revelation that Hamas’ military wing is actively directing donors to avoid Binance in favor of a suite of alternative wallets underscores the evolving sophistication of illicit finance in the digital age. It highlights the need for coordinated global efforts to enhance transparency, improve regulatory oversight of crypto‑service providers, and develop advanced forensic tools capable of untangling complex, multi‑platform transaction chains.
As the organization continues to refine its fundraising playbook, law‑enforcement agencies must remain vigilant, adaptable, and collaborative to disrupt the flow of resources that sustain conflict and terrorism.