On March 27, 2024, the United States Treasury’s Office of Foreign Assets Control (OFAC) and the United Kingdom’s Office of Financial Sanctions Implementation (OFSI) jointly sanctioned the entity Gaza Now, along with several associated individuals and digital wallets, for their role in facilitating cryptocurrency-based fundraising for Hamas. The coordinated action represents one of the most significant transatlantic enforcement efforts targeting terror-linked crypto networks and exposes the growing intersection of digital asset tools and illicit finance.
The Exploit Mechanics
According to blockchain analytics firm Chainalysis, Gaza Now operated as a media outlet that leveraged its platform to solicit cryptocurrency donations supporting Hamas activities. The fundraising apparatus relied on a network of digital wallets across multiple blockchains, including Bitcoin, Ethereum, and Tron. These wallets received contributions that were then laundered through mixing services, decentralized exchanges, and nested exchanges before reaching their final destinations.
The mechanics of the operation reveal a systematic approach to obscuring the flow of funds. Donations were initially collected through publicly shared wallet addresses on social media and messaging platforms. Once received, the crypto assets were routed through several intermediary wallets, with some funds passing through privacy-enhancing tools designed to break the on-chain trail. The use of Tron-based wallets proved particularly popular due to the network’s low transaction fees, which made micro-donations economically viable for the operators.
With Bitcoin trading at approximately $69,455 and Ethereum at around $3,500 on this date, the total value of tracked transactions through these wallets represented a material amount of funding. The U.S. Department of Justice concurrently unsealed charges detailing how cryptocurrency was used to finance operations tied to the October 7 attacks, with some donations received within days of the event.
Affected Systems
The sanctions targeted specific wallet addresses across multiple blockchain networks. OFAC added these addresses to its Specially Designated Nationals (SDN) list, which effectively freezes any U.S.-controlled assets associated with them and prohibits American persons from transacting with them. Most major cryptocurrency exchanges and compliance-oriented service providers automatically screen against the SDN list.
The affected systems extend beyond the immediate wallet addresses. Several decentralized finance protocols and automated market makers that had processed transactions from the flagged wallets faced scrutiny from compliance teams. The Treasury Department’s action also implicated virtual asset service providers (VASPs) that may have facilitated conversions between crypto and fiat currencies without adequate know-your-customer (KYC) procedures.
The Mitigation Strategy
The joint OFAC-OFSI action demonstrates a multi-layered mitigation approach that blends traditional sanctions with blockchain-specific enforcement tools. First, the public designation of wallet addresses enables real-time screening by compliant exchanges and wallet providers. Second, the coordination between U.S. and U.K. authorities significantly expands the reach of enforcement, as most major cryptocurrency businesses operate in or serve customers from both jurisdictions.
Blockchain analytics companies like Chainalysis and TRM Labs played an essential role in the investigation, providing the on-chain tracing that connected Gaza Now’s public-facing activities to the underlying wallet networks. Their tools allowed investigators to follow the money across multiple blockchains, through mixers and exchanges, ultimately mapping the entire fundraising infrastructure. This public-private partnership model has become the standard for crypto-related sanctions enforcement.
Lessons Learned
The Gaza Now sanctions offer several critical lessons for the cryptocurrency industry. First, the speed and transparency of blockchain transactions remain a double-edged sword. While the public nature of most blockchains makes tracing possible, the availability of privacy tools and jurisdictional arbitrage means that determined actors can still move significant sums before detection occurs.
Second, the transatlantic coordination between OFAC and OFSI signals that regulators are increasingly aligned on crypto enforcement. Projects and platforms operating in either the U.S. or European markets must implement robust sanctions screening, not just for individual wallet addresses but for patterns of behavior that may indicate attempts to circumvent controls.
Third, the case underscores the importance of proactive compliance infrastructure for all VASPs. Exchanges and custodians that fail to implement comprehensive transaction monitoring, wallet screening, and suspicious activity reporting face not only regulatory penalties but also the risk of becoming unwitting participants in illicit financing networks.
User Action Required
For individual cryptocurrency users and businesses, the enforcement action serves as a reminder to verify that any platform you interact with maintains current sanctions screening. If you operate a business that accepts cryptocurrency payments, implement automated OFAC screening for incoming transactions. For developers building on-chain applications, consider integrating compliance-aware features that can flag or freeze transactions involving sanctioned addresses. The blockchain security landscape continues to evolve, and the Gaza Now case makes clear that regulatory enforcement capabilities are advancing just as rapidly as the technology they oversee.
Disclaimer: This article is for informational purposes only and does not constitute legal, financial, or investment advice. Always consult qualified professionals for compliance and regulatory matters.
the US-UK coordination on this is the real precedent. usually sanctions are unilateral and funds just move to jurisdictions that dont enforce. joint action closes more exits
Dmitri V. the joint US-UK action actually closed some jurisdictional gaps. unilateral sanctions just push funds to friendlier venues
OFAC sanctioning 4 wallets that handled 200M while recovering under 500K tells you everything about the effectiveness of retroactive sanctions. the money is gone by the time the designation drops
sanctions_gap_ the gap between traced and recovered is the entire enforcement problem. OFAC designates wallets and by the time exchanges freeze anything the funds are 6 hops deep
Tron being chosen for micro donations because of sub cent fees is the double edge sword of cheap blockchains. same properties that enable remittances also enable this kind of fundraising
Petra N. you cant have permissionless cheap transactions and also prevent bad actors from using the same rail. every compliance proposal that tries to do both ends up killing the utility for legitimate users
the Tron detail matters. sub-cent fees and massive USDT volume means these micro-donations blend right into legitimate remittance traffic. almost impossible to filter
Tron picked because fees are fractions of a cent and USDT volume is massive there. blends right in with legitimate remittance traffic
aml_drone_ exactly. Tron processes billions in USDT daily for remittances. the same properties that make it useful for cheap transfers make surveillance impossible without killing legitimate use
the OFAC designation listed 4 wallets and Chainalysis traced 200M through them. but the actual seized amount was under 500K. the gap between traced and recovered is the real story
chainalysis_void_ the recovery gap exists because by the time OFAC designates, funds have moved through 6+ hops. sanctions are retroactive branding not prevention
Yael H. six hops before designation drops is the standard now. sanctions are a press release not a recovery mechanism
The use of Tron for Hamas fundraising is a clear example of why regulators are so focused on stablecoin flows. With low fees and high speed, it’s the perfect rail for micro-donations. Tracing these funds through DEXs is going to require some serious blockchain forensics.
These joint US-UK sanctions on Gaza Now are a big move. Using Tron for micro-donations because of the low fees is an interesting detail. It shows how bad actors adapt to different blockchain environments to bypass traditional financial systems.
geopolitical_joe the US-UK coordination is the real precedent here. unilateral sanctions just push funds to jurisdictions that ignore them
the tron detail is key. low fees and high throughput make it the default for micro-transactions that need speed. same reason tether volume dominates on tron
tether on tron processes billions daily. the same rail that enables cheap remittances also enables this. cant have one without the other
The legal implications here for anyone interacting with these wallets are massive. OFAC and OFSI don’t mess around. If you’re using DEXs, you really have to be careful about who you’re inadvertently transacting with.
Low fees on Tron are a blessing and a curse. While it’s great for regular users, it clearly makes it easier for these types of fundraising campaigns to operate. Sanctions are necessary, but tracing these funds through mixers is always going to be a challenge.
Seeing mixing services and DEXs being used for laundering isn’t surprising, but the link to the October 7 financing is serious. The DOJ charges show they are getting better at tracing these ‘nested exchanges.’ It’s a constant cat-and-mouse game.
nested exchanges are the real blind spot. you can sanction wallets all day but if the funds move through an exchange within an exchange the trace goes cold
chain_sleuth_ nested exchanges are the real blind spot. OFAC can sanction wallets all day but funds hit a CEX-within-CEX and the trail dies
nested exchanges are the real problem. chainalysis can trace on-chain but once funds hit a nested cex the trail dies. OFAC knows this too
chain_sleuth_ nested exchanges are where every trace goes to die. OFAC can sanction wallets but the real gap is the CEX-within-CEX problem
Chainalysis said the laundering went through mixers and DEXs but the actual volume was a fraction of what OFAC claimed. the Treasury numbers always conflate all wallet activity with terror financing to justify broader sanctions
chainalysis_skeptic_ the mixing services angle is overblown. most of the traced funds went through nested exchanges on Binance and Huobi. the real issue is exchange compliance not DeFi