In a recent filing submitted to the United States Department of Justice, investigators disclosed a set of internal communications from the military wing of Hamas that detail explicit instructions given to potential donors on how to move digital currency without attracting the attention of law‑enforcement agencies. The guidance, which was uncovered as part of a broader probe into the financing of terrorism, underscores the group’s sophisticated approach to leveraging emerging financial technologies while attempting to sidestep the regulatory scrutiny that typically accompanies traditional banking channels. According to the DOJ documents, Hamas’ military faction explicitly warned its supporters not to send cryptocurrency directly through Binance, the world’s largest crypto exchange by trading volume. Instead, the organization suggested that donors employ a variety of alternative platforms—namely Trust Wallet, Bybit, OKX, Kast and Redotpay—to transfer assets to an external wallet that operates on the TRON blockchain.
By directing funds to a TRON address, the group appears to be exploiting the network’s reputation for low transaction fees, rapid settlement times, and relative anonymity compared with more heavily monitored chains such as Bitcoin or Ethereum. The filing notes that the advice was disseminated through encrypted messaging services and that the language used was deliberately vague, describing the recommended steps as “safer” and “less traceable.” The documents also reference a series of internal codes that correspond to specific wallet addresses, each linked to a different operational cell within Hamas’ broader financial network. By distributing the flow of cryptocurrency across multiple platforms and wallets, the group aims to fragment the transaction trail, making it more difficult for analysts to piece together a coherent picture of the money’s ultimate destination. The decision to avoid Binance is particularly noteworthy.
Binance, despite its global reach, has been under increasing pressure from regulators in the United States, the European Union and other jurisdictions to tighten its anti‑money‑laundering (AML) procedures. The platform’s recent implementation of stricter Know‑Your‑Customer (KYC) requirements and its cooperation with law‑enforcement agencies have made it a less attractive conduit for illicit actors who seek to conceal the provenance of their funds. By steering donors away from Binance, Hamas is attempting to bypass a platform that is now more likely to flag suspicious activity and report it to authorities.
Trust Wallet, Bybit, OKX, Kast and Redotpay, on the other hand, are either decentralized or operate with comparatively lax KYC standards, especially for users who do not wish to disclose personal identification. Trust Wallet, for example, is a non‑custodial mobile wallet that allows users to retain full control over their private keys, meaning the service provider has no direct visibility into the transactions conducted through the app.
Bybit and OKX are major derivatives exchanges that, while they have introduced KYC protocols for higher‑volume accounts, still permit smaller transactions to be executed with minimal verification. Kast and Redotpay are lesser‑known services that cater to niche markets and have historically attracted users seeking privacy. The choice of the TRON blockchain as the final destination for the funds also reflects a strategic calculation.
TRON’s architecture supports a high throughput of transactions and offers a suite of token standards that can be used to issue custom assets. Moreover, the TRON network’s governance model and its relative lack of stringent compliance mandates have made it a favored venue for actors seeking to move value quickly and with limited oversight. The DOJ filing highlights that the external TRON wallet referenced in the Hamas instructions is linked to a series of smart contracts designed to automatically convert incoming tokens into stablecoins, which can then be withdrawn and used to purchase goods, services, or even fiat currency through peer‑to‑peer marketplaces. Beyond the technical specifics, the documents provide insight into the broader financial ecosystem that Hamas has cultivated over the past several years.
The organization has increasingly turned to digital assets as a complement to its traditional fundraising mechanisms, which include charitable fronts, diaspora contributions, and illicit activities such as smuggling and extortion. Cryptocurrency offers several advantages: it can be transferred across borders instantly, it bypasses conventional banking sanctions, and it can be hidden behind layers of obfuscation that are difficult for investigators to penetrate. U.S. authorities have been tracking the flow of crypto to terrorist groups since at least 2017, when the Department of the Treasury’s Office of Foreign Assets Control (OFAC) first added several digital‑currency‑related entities to its sanctions list.
Since then, the DOJ, in coordination with international partners, has built a growing body of case law and investigative techniques aimed at disrupting these channels. The recent filing adds to a series of indictments that have targeted individuals and entities accused of facilitating the movement of digital assets to Hamas and its affiliates. In practical terms, the guidance issued by Hamas’ military wing demonstrates an awareness of the evolving regulatory landscape. By explicitly naming Binance—a platform that has publicly pledged cooperation with law‑enforcement agencies—the group signals that it is monitoring the compliance posture of major exchanges and is willing to adapt its tactics accordingly.
The recommendation to use multiple, less‑scrutinized platforms also reflects a risk‑mitigation strategy designed to spread exposure and reduce the likelihood that a single takedown or freeze would cripple the organization’s funding pipeline. Analysts caution that while the shift toward decentralized wallets and alternative exchanges complicates enforcement, it does not render the financing network invulnerable.
Blockchain analytics firms possess sophisticated tools capable of tracing token movements across chains, identifying clustering patterns, and linking wallet addresses to known entities. Even in the absence of KYC data, transaction metadata—such as timing, amounts, and network hops—can be used to construct a probabilistic profile of the actors involved. The DOJ’s decision to make the filing public serves multiple purposes. It alerts the financial industry to the specific tactics employed by Hamas, encouraging exchanges and wallet providers to tighten their own monitoring procedures.
It also signals to potential donors that the organization’s operational security is not impenetrable, potentially deterring some from contributing. Finally, the disclosure contributes to the broader narrative that terrorist financing is increasingly digital, requiring a coordinated response that blends traditional investigative work with cutting‑edge cyber‑forensics.
In summary, the United States Department of Justice has revealed that the military wing of Hamas is actively advising its supporters to avoid direct crypto transfers through Binance, instead favoring a suite of alternative platforms—Trust Wallet, Bybit, OKX, Kast and Redotpay—to route funds to a TRON‑based wallet. This approach leverages the privacy and speed advantages of the TRON network while attempting to stay ahead of regulatory scrutiny.
The documents underscore the evolving sophistication of terrorist financing strategies in the digital age and highlight the ongoing challenge faced by governments and the private sector in disrupting these illicit financial flows.