The U.S. Justice Department seized more than $560,000 in cryptocurrency connected to Hama’s fundraising efforts, and disrupted parts of the group’s online infrastructure. This operation pulled together five related cases covering March 2025 through August 2026. The details highlight how FBI investigators tracked crypto movements across wallets, exchanges, and blockchain networks while also targeting fundraising sites and communication channels linked to Hamas.
Investigators kept going back to blockchain records from early access, letting them spot new wallet addresses, accounts, and other links in the group’s financial web. Even when Hamas switched up their methods and wallet addresses, the blockchain’s record stayed open.
How the Investigation Started
The investigation began in March 2025, when officials seized about $201,400, mostly in stablecoins, from a network that had moved over $1.5 million since October 2024. Using blockchain analytics, they tracked the flow from those donation addresses to a central operational wallet.
A key break in the case was a recurring gas wallet. Investigators discovered many crypto addresses operated by Hama’s armed wing, the al-Qassam Brigades, all using the same gas wallet to carry out transactions. This connection tied together addresses that otherwise looked unrelated.
The investigation kept moving through 2025. By June 2025, with a new affidavit, blockchain analysis traced the original donations as they passed through more wallets and accounts. Watching the funds move gave officials a better idea of how Hamas was shifting its crypto.
Investigators also found more accounts they believed were tied to the network. One pointed to an OTC broker in Lebanon, while another showed transaction patterns matched to money mule activity.
Hamas Changed its Crypto Methods
After the first seizure in early 2025, Hamas switched their approach. By October 2025, investigators saw in court filings that the group had started using crypto bridging service to try to launder money by moving it across different blockchains. They also shifted to single use donation wallets.
These moves made things tougher for law enforcement, but officials kept following the money’s path. According to the affidavit, authorities also froze some assets.
Despite the changes, a lot of the system looked familiar. Hamas still used gas wallets, donation addresses, and consolidation wallets. Investigators saw them relying on different OTC brokers and crypto exchanges, too.
This mix of changing addresses and repeating behaviour played a big role in the investigation. While individual wallets could be replaced, the way funds moved between different parts of the network provided investigators with additional links.
FBI Seizes the al-Qassam Fundraising Site
By July and August 2026, the probe went further than just crypto transactions. U.S. authorities used what they’d learned earlier to target the online side of Hamas’s fundraising and communication efforts.
The FBI seized domains and servers for AlQassam.ps, the group’s main fundraising site. Taking control of the live site let investigators intercept donations in real time and collect identifying information on thousands of people who tried to donate.These five actions led U.S. authorities to seize more than $560,000 in cryptocurrency. The three main seizure warrants took place in March, June, and October 2025, while actions against online infrastructure came in July and August 2026.
This progression shows how the investigation grew from tracking specific crypto addresses to exposing the larger online system behind the fundraising. The findings from earlier blockchain records pointed authorities toward more pieces of the network and tied financial actions directly to these digital channels.
What Blockchain Records Revealed
These cases show how blockchain analysis lets investigators map out a growing financial network. It started with individual donation addresses but eventually revealed more wallets, consolidation points, crypto exchanges, and suspected money facilitators.
Chainalysis Reactor, the blockchain investigation software mentioned, helped analysts break down transactions and see the links between wallets and services. In this operation, the technology let investigators trace funds through all the stages: operational wallets, consolidation hubs, cross chain transactions, and exchange accounts.
Switching addresses doesn’t hide old transactions in blockchains. Investigators can revisit past activity, compare it to new transfers, and spot new connections as the network grows.
US Attorney Jeanine Pirro said Hamas’s networks are not secure and that authorities would keep working to cut off the group’s financing.
