Hamas and Cryptocurrency: The Evolution of Terror Financing and the Global Effort to Stop It

On July 1, 2021, the Israeli National Bureau of Counterterrorism Finance (NBCF), released a copy of an administrative seizure for Bitcoin, Doge, Tron, and other cryptocurrency addresses controlled by agents of Hamas.

The announcement by the NBCF revealed the growing sophistication of terrorist financing campaigns, which are now using multiple chains and currencies to evade sanctions and detection by law enforcement. A senior Hamas official reported to the Wall Street Journal last month that its fundraising strategies continue to evolve as more restrictions are being placed on it. This evolution will likely involve a continued shift to multi-asset donations and increasingly sophisticated laundering methods. Ari Redbord, a former national security prosecutor and now head of legal and government affairs at TRM says, "After last year's seizure of Hamas fundraising sites by the U.S. Department of Justice, FBI, DHS and IRS-CI, the organization's crypto fundraising campaign took an obvious hit. That said, the group clearly shifted its cryptocurrency fundraising away from the U.S. platform and developed new techniques for obfuscating transactions."

‍

Tracing terrorist financing in TRM

TRM Forensics is the only blockchain analytics tool that enables the seamless tracing of funds across multiple blockchains while visualizing multi-layer relationships. TRM's cross chain engine uniquely allows investigators to trace the type of multi-chain terrorist financing used by Hamas in its attempt to obfuscate the flow of illicit proceeds.

The below graph shows the on-chain flow occurring between addresses associated with Hamas on the Tron and Dogecoin blockchains.

‍

‍

*Graph does not reflect the full scope of detail available in the TRM platform

‍

Background on crypto-based terrorist financing

Since at least early 2019, the Izz-Al Din-Al Qassam Brigades, Hamas' military arm, has attempted to use cryptocurrencies as an alternative fundraising method to support its military operations. Hamas initially tested cryptocurrency fundraising by soliciting Bitcoin donations on its Telegram channel before shifting to direct fundraising on its website, alqassam.net.

‍

‍

"Bitcoin is cryptocurrency that cannot be traced."

The DOJ announced in 2020 that the IRS, HSI, and FBI successfully seized over 150 cryptocurrency accounts that laundered funds to and from accounts attributed to the al-Qassam Brigades. During this same time period, law enforcement successfully seized and covertly operated alqassam.net. While in control of the bitcoin donation wallets, federal agents received funds from persons believing they were providing material support to Hamas.

This latest seizure represents the ability of law enforcement, through cross-border cooperation and public private partnerships, to thwart attempts by terrorist financiers and other threat actors to take advantage of the speed and global reach of cryptocurrency. We commend the extraordinary efforts of the Israeli government and look forward to working with our law enforcement partners around the globe to assist investigations in terror financing and other emerging threats.

‍

Crypto addresses from the Israeli seizure are reflected in TRM's coverage

All addresses identified in the Israeli seizure notice were uploaded into TRM's risk engine. For further information on how these updates may affect your platform as a TRM customer, or for more information on TRM's multi-chain support offering, please contact us directly via hello@trmlabs.com.

13iQsrwBYdrLpnitG5EV79o3PeHjH8XUBc

15soXrE3NJBMkkQhrccXonTT9bpjpPvE67

0xc077bbfcf9b5b9eec0dd105e15b65ebc2a030600

12sDU3FyYJXc2oRzE6XXuuhVHCBJvaoCC8

D5hkVKXQvJnw9nEvd36eRipxJgu1ts8ydx

TRU6fdxpMMDdEykV1fPvcqtMNRLeyw6Ymt

0xad92a818e26fc3dbce7a1972308a4a86f54dd683

TG7YAAmZ5ALicdhuxKoE3DqnuBPj2zgG1Q1GALPyvUDDXqA6H2eHQ9Y1yidfQ6T1Drvn

0x99d29380a2e37c04e4fe75111b7d410674a6cab3

1Gg25VzQkqCizXHNSNet4RoysLEe19su4s

TJKofAGPQ2mSmnPwugN79p1Ceu39KBZyHC

DDifCccot9tnVqh99qnQmFSXYX99jw2aD8

27f405bf5c5caf0db56316b76dfc3067846cffcf8f2ffda5d5f754114ec1db35b3f6310fb25b

LcCBQ7fKwTrNf3nM522dcDXWsktbx95fTv

12154055877559948854L

1Lm9BCDUKoBUk888DCXewM5p8bJyr83cEp

0x11069987e8507d0669c870b578cc9f9b4017d127

binanceiost

D7i5trghauwmVDT8KBqnwaYDrDU7j2xgS8

TMKe9i1J46K3YDx5NjtyRTg1VDjbBhyfyJ

164fawNZVwsR5SamAJypvCMtkMx4Xv1B3f

0xddd42d46a17b9a5b0c53c5ef2b79a6acb1b50333

1481074704939202117L

D7pCdGvzKPEtnuYnFVWtW4pTGTjD9v2Tuo

DF6guxhXjjBPKMxFcy9LZQsMh8GnRRhbi2

LQsYaykwDfsKXKkVnQUNhyoVQuhiDEQrZT

TVbaPNrc2UbGrGBKwjRjjn6UENoTBnkB2d

SGP2HJQBCDEX4B4PH7TVIWJZ4YZZX5C5B3TQ24QA3USY7O5X2KO5V2FPXM

13ztYvFxVpioqRvr8YUz7UmJm36ERJhMBG

1JpSBaUwrZaEgmsYka7mzm9t3Z4syyaw7A

‍