skip to Main Content
Home » Terrorism Financing » Hamas Cryptocurrency Donations Update | Seizures by Israel’s National Bureau for Counter Terror Financing (NBCTF)

Hamas Cryptocurrency Donations Update | Seizures by Israel’s National Bureau for Counter Terror Financing (NBCTF)

CipherTrace Cryptocurrency Intelligence Update: 07/16/2021

On July 1, Israel’s National Bureau for Counter Terror Financing (NBCTF) released a seizure order listing several cryptocurrency addresses across several blockchains associated with donation campaigns carried out by designated terrorist organization Hamas. In addition to  bitcoin and Ethereum, the seizure order demonstrates that Hamas  also collected donations in Tether, TRON, Cardano, XRP, and DOGE, indicating their attempts to break out from reliance on bitcoin after the US Department of Justice announced the seizure of $2 million in cryptocurrency from prominent terrorist groups, including al-Qaeda, ISIS, and Hamas in August 2020.

This action comes on the heels of the armed conflict between Israel and Gaza in May of this year which resulted in an uptick in reported cryptocurrency donations to Hamas. This is the first terrorism financing-related cryptocurrency seizure in Israel and highlights the importance of blockchain analysis in tracing the flow of funds to identify bad actors and counter terrorism financing.

CipherTrace analysts identified further movement of funds belonging to al Qassam Brigades—the military wing of Hamas and OFAC-sanctioned entity—that have not been previously analyzed and not yet seized by the NBCTF.

It appears that al Qassam Brigades [Hamas] withdrew some donation funds from their accounts at a large, global exchange between June 6 – 9, consolidated and redistributed a portion of those funds back into new deposit addresses, likely linked to new accounts, at the same global exchange. One plausible explanation for this transfer pattern is to attempt to avoid additional governmental scrutiny  and or further seizure of their funds.

June 6 – 9 withdrawals from exchanges moved into a private wallets belonging to Hamas
Funds redistributed into exchanges, private addresses, and dark markets

Further analyses on additional Hamas clusters find that on June 14, funds moved through addresses not previously identified and then distributed into two additional identified global exchanges around July 2.

Hamas consolidation cluster and flow of funds to exchanges

This May, CipherTrace reported on donations made to Syrian terrorist organization al-Ikhwa, which were ultimately sent to al Qaeda, following intelligence gleaned from independent journalist group MagniF!le and their investigation into Syrian terrorist groups’ telegram channels.  According to MagniF!le’s research, Hay’at Tahrir al-Sham (HTS) and other terror organizations in the region have accepted more than $250,000 in donations through BitcoinTransfer channel since 2018 in an effort to fund its independent exchange offices in Idlib and other “liberated” provinces in Syria.

CipherTrace further analyzed al-Ikhwa and other extremist group clusters to identify additional connections to the NBCTF seizures.

Donations sent to al-Ikhwa and Leave an Impact Before Departure (LIBD) in 2019 were ultimately sent to al-Qaeda controlled addresses before being deposited into an identified global exchange. The deposit address at this exchange is linked to Mahmoud Madhat Ahmed Baroud, according to the NBCTF seizure notice.

2019 al-Ikhwa & LIBD donations sent to al-Qaeda, and then to Mahmoud Baroud’s exchange address

CipherTrace Intelligence continues to monitor the donation funds which remained in private wallets or other addresses that had not yet moved.

List of addresses identified by the NBCTF

Below is the full list of cryptocurrency addresses named in the NBCTF announcement.

Ali Ismail Shafiq Abualkas

  • 13iQsrwBYdrLpnitG5EV79o3PeHjH8XUBc​
  • 15soXrE3NJBMkkQhrccXonTT9bpjpPvE67​​
  • D5hkVKXQvJnw9nEvd36eRipxJgu1ts8ydx​
  • 0xc077bbfcf9b5b9eec0dd105e15b65ebc2a030600​
  • 12sDU3FyYJXc2oRzE6XXuuhVHCBJvaoCC8​
  • TRU6fdxpMMDdEykV1fPvcqtMNRLeyw6Ymt​
  • 0xad92a818e26fc3dbce7a1972308a4a86f54dd683​
  • TG7YAAmZ5ALicdhuxKoE3DqnuBPj2zgG1Q​

Mahmoud Madhat Ahmed Baroud

  • 1GALPyvUDDXqA6H2eHQ9Y1yidfQ6T1Drvn​
  • 0x99d29380a2e37c04e4fe75111b7d410674a6cab3​
  • rEb8TK3gBgk5auZkwc6sHnwrGVJH8DuaLh​
  • LcCBQ7fKwTrNf3nM522dcDXWsktbx95fTv​
  • 1Gg25VzQkqCizXHNSNet4RoysLEe19su4s​
  • TJKofAGPQ2mSmnPwugN79p1Ceu39KBZyHC​
  • DDifCccot9tnVqh99qnQmFSXYX99jw2aD8​
  • GAHK7EEG2WWHVKDNT4CEQFZGKF2LGDSW2IVM4S5DP42RBW3K6BTODB4A​
  • 27f405bf5c5caf0db56316b76dfc3067846cffcf8f2ffda5d5f754114ec1db35b3f6310fb25b​
  • 12154055877559948854L​

Tareq Alla Mohammedali Baraaasi

  • 1Lm9BCDUKoBUk888DCXewM5p8bJyr83cEp​
  • 0x11069987e8507d0669c870b578cc9f9b4017d127​
  • bnb136ns6lfw4zs5hg4n85vdthaad7hq5m4gtkgf23​
  • D7i5trghauwmVDT8KBqnwaYDrDU7j2xgS8​
  • TMKe9i1J46K3YDx5NjtyRTg1VDjbBhyfyJ​

Mahmoud Mohammed Mahmoud Ayesh​

  • 164fawNZVwsR5SamAJypvCMtkMx4Xv1B3f​
  • 0xddd42d46a17b9a5b0c53c5ef2b79a6acb1b50333​
  • LQsYaykwDfsKXKkVnQUNhyoVQuhiDEQrZT​
  • 1481074704939202117L​
  • D7pCdGvzKPEtnuYnFVWtW4pTGTjD9v2Tuo​
  • DF6guxhXjjBPKMxFcy9LZQsMh8GnRRhbi2​
  • TVbaPNrc2UbGrGBKwjRjjn6UENoTBnkB2d​
  • SGP2HJQBCDEX4B4PH7TVIWJZ4YZZX5C5B3TQ24QA3USY7O5X2KO5V2FPXM​
  • 13ztYvFxVpioqRvr8YUz7UmJm36ERJhMBG​

Karem Munir Mohammed Abed

  • 1JpSBaUwrZaEgmsYka7mzm9t3Z4syyaw7A​
  • TU1TTeKBxtCVYNHrVrobBtvGAeJvuqyx6p​

Mohammed Ramadan Hasan Abukwaik

  • 1A7pDH1EdrkH9YZtsPnc8uzirBFnAN9Eay​
  • LdEaGBJzGRyZBEo8vqRAeKLwRAK4hXwWP5​
  • 0xebfe7a29ea17acb5f6f437e659bd2d472deedc54​
  • 1BPf9qr7M5xUgNHUYtrQtEKvUKcyERzXao​
  • t1SfdPR5gMz1QAMGJKGTNgzCauTEMnNU6GR​
  • TXVG2seoqhk4i1WpzG6t64YAW6SCUQfDhW​
  • DKQfVwp2hm54XeUhwMbyccmgHmrP6kL7uz​

Mohammed Nasser Ibrahim Abulaila

  • 1DrhHEkv42JVwiDQNi28JFdSuiSGgPNXwP​
  • LLuDSfYfCXL24rhCGMLgguHWLvQHzHPm78​
  • 0xc0d227bd0580bad9435ca0b884ebee7ff8da71c9​
  • 1EnX6BuJiGWydqXJT9BN5dSvfLg3QW4Mdz​
  • 3177043342364495742L ​
  • D8jJNUtbmC9z1nfY8QRJ2GNWYFQz5btGot​
  • 66413449033389c6d27e9515284a9d8fd0eacf6e2c69e916b7f5451deeb4723a68c2b78e4974
  • SNwdHP6Qpkk6exSAqMG4GdTRkQRAu28SSS​
  • THuvw2pY2GSBmDewHKzahQum2yUWHJeJKh​

Other addresses

  • 1QH9hfeSSb2iftcVpgpQp3NsFD174crFoW​
  • 1EfmRn6Bp3cjrTBubaH8MzRRc2ikSjNGXw​
  • 1Lm9BCDUKoBUk888DCXewM5p8bJyr83cEp​
  • 19D1iGzDr7FyAdiy3ZZdxMd6ttHj1kj6WW​
  • 3FWSkG5NmyXF3rqMav7piXiJUDYzKpgFRT​
  • 17QAWGVpFV4gZ25NQug46e5mBho4uDP6MD​
  • 1QAV9VoTVw7XoyqiTjmNHaKSkNc9QWfqAh​
  • 3HQJ9ta7TmYNRjkby3nbMGdHzNCCiXs3Ui​
  • 18yzhmcgHtRVoEX3doCrqhis6fFU1dHFUE​
  • 0xe090669ee62e02f4437b89058a073dc7874aed8f​
  • 179bzhS4FY7qLDza9YjuorhWyXVVYZu2YH​
  • 1LPTaRfyoNwvwAtmYzcetZLjBfUxVkJrr4​
  • bc1qg9h7s7hn4t9m7uw26gnwfm7xfxk77fkj878sg3​
  • 19XVEDZCGVMA9WCF1qUayxtnjUnyD7zDDQ​
  • 1uLdz4wXrcXjCy2CqLWuJUiE85Y7SJ1ge​
  • 1ULEqcd5te8AWqFpH7HD4KvJZ1AKcJPam​
  • 1348ThkNoDupq1bws95diMiL8haGs61K7M​
  • 1EVTZmTMqZPMzGxsug9TXBtvPJZH8dXSCK​
  • 1EDcKCRypUTFoTZbxDWF9MBAT4W7XUGB32​
  • 1EYya5dfNvuYDwpeboGKBtkXzJcEHMCQXR​
  • 1LhRW1msre1cFgT7fBY2BRrZ4ANMPwVj9u​
  • 31yqH1jVEPDJ7x9L648Ec5umM2G3zNDoe5​
  • bc1qwsqdcas3llkcx53sx4lqrcrdpxmr5s4eke6d8y​
  • 3MhdvQccMd5zAh92WrW7SpcHXwfW1uiamD​
  • 1GC2SjzCyCwxo1uxTi28oqn9L3mJj7bLPs​
  • 1C6hetVWVXZnS6P2BYBNu5Y1ZJ57JyXGac​
  • TC71Nb9mtcv4vPezL8KEKvUs3aKoYwiJZa​
  • TAHg5ZFkxaJq5wE6pGpM8mY5Q1YEvz6W3G​
  • D9KKhKM68nRaYtQJJAA82cKhd3bGWqCW46​
  • DNmxLVUn5AuzoDo2CSc7P13wcMSvZ4nsYY​
  • RPW95tQG7y47QTqS6cNA4EQ5mBmATrG91o​
  • 3c61d17a6a55c7434afa3cb43e4dcef2819f38cff2484a6c1e2fffaf089548e2db3328145343​
  • DdzFFzCqrht4k4DfGDtBaqv6boi1jjyzW2QyEFA2imphJipAcAfdEUyFeMZJtBjjiQJBFYk8JZHffuqgUK9

 

Back To Top