The US Department of Justice seized $2 million in cryptocurrency from Hamas terrorists. How did it happen
US authorities uncovered the infrastructure of BuyCash, a company that provided financial support to Middle Eastern terrorist organizations
30.07.2025
340
3 min
0
US authorities confiscated $2 million in cryptocurrency from the Palestinian company BuyCash, which provided financial services and was closely linked to the terrorist movement Hamas. GetBlock AML Research reveals details of an operation in which specialists managed to uncover a secret financial network of terrorists.
Background
BuyCash has been operating since 2014 and has positioned itself as a payment network. The company also provided cryptocurrency services and acted as a crypto exchange in the Middle East. BuyCash has repeatedly been mentioned in various investigations into the activities of terrorist organizations.
In 2021, Israel’s National Bureau for Counter Terror Financing (NBCTF) seized several crypto wallets that belonged to Hamas. These addresses were closely linked to the BuyCash infrastructure. In addition, Al-Qaeda and ISIS also used BuyCash’s services.
In 2023, the US Department of the Treasury’s Office of Foreign Assets Control (OFAC) imposed sanctions on BuyCash and its founder, Ahmed M. M. Alaqad. Restrictions were also imposed on intermediaries who oversaw BuyCash’s interactions with terrorist organizations.

BuyCash wallets subject to US sanctions
On-chain analysis
During the investigation into BuyCash’s activities, approximately 150 wallets were identified that were used by Hamas to collect funds. The terrorist group began actively collecting donations in cryptocurrency using the BuyCash infrastructure as early as 2021. The terrorists published wallet addresses for fundraising on Telegram. The cryptocurrency then passed through intermediate addresses and reached Hamas wallets.

Connection between BuyCash wallets and Hamas addresses
Withdrawal to fiat
The final destinations of the transfers were addresses of various crypto exchanges and exchangers for the purpose of withdrawing funds to fiat currencies. All funds that terrorists received as a result of donations were methodically transferred to centralized exchanges for withdrawal to fiat through intermediate addresses.

Connection between BuyCash wallets and the Binance address
A number of BuyCash wallets were seized by US authorities. Now, the US Department of Justice has filed a civil lawsuit to seize the assets stored at these addresses ($2 million) in favor of the US government.
Useful material?
Research
The blockchain has helped uncover the ties between cryptocurrency fundraising campaigns, exchangers in Syria, and intermediaries in several countries around the world. A telltale pattern has emerged in which the same addresses were used across multiple donation drives at once
Jun 24, 2026
Research
Four Iranian cryptocurrency exchanges accounted for roughly 78% of all digital asset volume tied to the country in 2025. They have now become the focal point of the largest U.S. sanctions campaign against Iran's cryptocurrency infrastructure.
Jun 5, 2026
Research
A financial system is already up and running on public blockchains, with loans, analogues of U.S. Treasuries, and automated capital markets. More than $551 billion has flowed through DeFi protocols — but most of that activity has nothing to do with the real economy and everything to do with the speculative build-up of risk.
May 29, 2026
Research
Around 97% of Chinese suppliers of chemicals used to make fentanyl accept payment in cryptocurrency. The volume of such transactions continues to grow alongside the global market for synthetic drugs
May 22, 2026
Research
For the first time, the new law makes blockchain analytics an officially mandatory tool of financial oversight in the United States. Authorities will also gain the power to restrict transactions with foreign crypto services tied to money-laundering risks.
May 20, 2026
Research
Working with cryptocurrencies requires more than just new technology — it demands a complete overhaul of internal processes. We explain how the financial sector is learning to control digital assets and detect threats
May 8, 2026
Telegram
Twitter