Global Disruption of Three Terror Finance Cyber-Enabled Campaigns

The Justice Department on Thursday announced the dismantling of three terrorist financing cyber-enabled campaigns, involving the al-Qassam Brigades, Hamas’s military wing, al-Qaeda, and Islamic State of Iraq and the Levant (ISIS).


Largest Ever Seizure of Terrorist Organizations’ Cryptocurrency Accounts

The Justice Department on Thursday announced the dismantling of three terrorist financing cyber-enabled campaigns, involving the al-Qassam Brigades, Hamas’s military wing, al-Qaeda, and Islamic State of Iraq and the Levant (ISIS). 

This coordinated operation is detailed in three forfeiture complaints and a criminal complaint unsealed today in the District of Columbia.  These actions represent the government’s largest-ever seizure of cryptocurrency in the terrorism context.

These three terror finance campaigns all relied on sophisticated cyber-tools, including the solicitation of cryptocurrency donations from around the world.  The action demonstrates how different terrorist groups have similarly adapted their terror finance activities to the cyber age. 

Each group used cryptocurrency and social media to garner attention and raise funds for their terror campaigns.  Pursuant to judicially-authorized warrants, U.S. authorities seized millions of dollars, over 300 cryptocurrency accounts, four websites, and four Facebook pages all related to the criminal enterprise.

Funds successfully forfeited with a connection to a state sponsor of terrorism may in whole or in part be directed to the United States Victims of State Sponsored Terrorism Fund (http://www.usvsst.com/) after the conclusion of the case.

“It should not surprise anyone that our enemies use modern technology, social media platforms and cryptocurrency to facilitate their evil and violent agendas,” said Attorney General William P. Barr.   “The Department of Justice will employ all available resources to protect the lives and safety of the American public from terrorist groups.  We will prosecute their money laundering, terrorist financing and violent illegal activities wherever we find them.  And, as announced today, we will seize the funds and the instrumentalities that provide a lifeline for their operations whenever possible.  I want to thank the investigators from the Internal Revenue Service, Department of Homeland Security, Federal Bureau of Investigation, and the prosecutors from the D.C. United States Attorney’s Office and National Security Division for their hard and innovative work in attacking the networks that allow these terrorists to recruit for and fund their dangerous actions.”

“Terrorist networks have adapted to technology, conducting complex financial transactions in the digital world, including through cryptocurrencies. IRS-CI special agents in the DC cybercrimes unit work diligently to unravel these financial networks,” said Secretary of the Treasury Steven T. Mnuchin.  “Today’s actions demonstrate our ongoing commitment to holding malign actors accountable for their crimes.” 

“The Department of Homeland Security was born after the September 11, 2001 terrorist attacks and, nearly 20 years later, we remain steadfast in executing our critical mission to safeguard the American people, our homeland, and our values,” said Acting Secretary of Homeland Security Chad F. Wolf.  “Today’s announcement detailing these enforcement actions targeting foreign terrorist organizations is yet another example of the Department’s commitment to our mission. After launching investigations that identified suspected online payments being funneled to and in support of terrorist networks, Homeland Security Investigations skillfully leveraged their cyber, financial, and trade investigative expertise to disrupt and dismantle cyber-criminal networks that sought to fund acts of terrorism against the United States and our allies.  Together with our federal law enforcement partners, the Department will utilize every resource available to ensure that our Homeland is and remains secure.”    

“These important cases reflect the resolve of the D.C. United States Attorney’s Office to target and dismantle these sophisticated cyber-terrorism and money laundering actors across the globe,” stated Acting United States Attorney Michael R. Sherwin.  “While these individuals believe they operate anonymously in the digital space, we have the skill and resolve to find, fix and prosecute these actors under the full extent of the law.” 

“IRS-CI’s ability to trace funds used by terrorist groups to their source and dismantle these radical group’s communication and financial networks directly prevents them from wreaking havoc throughout the world,” said Don Fort, Chief, IRS Criminal Investigation.  “Today the world is a safer place.”

“As the primary law enforcement agency charged with defeating terrorism, the FBI will continue to combat illicit terrorist financing regardless of platform or method employed by our adversaries,” said FBI Director Christopher Wray. “As demonstrated by this recent operation, the FBI remains committed to cutting off the financial lifeblood of these organizations that seek to harm Americans at home and abroad.”

“Homeland Security Investigations continues to demonstrate their investigative expertise with these enforcement actions,” said ICE Deputy Director and Senior Official Performing the Duties of the Director Matthew T. Albence.  “Together with law enforcement partners, HSI has utilized their unique authorities to bring to justice those cyber-criminal networks who would do us harm.”

Al-Qassam Brigades Campaign

The first action involves the al-Qassam Brigades and its online cryptocurrency fundraising efforts.  In the beginning of 2019, the al-Qassam Brigades posted a call on its social media page for bitcoin donations to fund its campaign of terror.  The al-Qassam Brigades then moved this request to its official websites, alqassam.net, alqassam.ps, and qassam.ps.

The al-Qassam Brigades boasted that bitcoin donations were untraceable and would be used for violent causes.  Their websites offered video instruction on how to anonymously make donations, in part by using unique bitcoin addresses generated for each individual donor.   

However, such donations were not anonymous.  Working together, IRS, HSI, and FBI agents tracked and seized all 150 cryptocurrency accounts that laundered funds to and from the al-Qassam Brigades’ accounts.  Simultaneously, law enforcement executed criminal search warrants relating to United States-based subjects who donated to the terrorist campaign. 

With judicial authorization, law enforcement seized the infrastructure of the al-Qassam Brigades websites and subsequently covertly operated alqassam.net.   During that covert operation, the website received funds from persons seeking to provide material support to the terrorist organization, however, they instead donated the funds bitcoin wallets controlled by the United States.

The United States Attorney’s Office for the District of Columbia also unsealed criminal charges for two Turkish individuals, Mehmet Akti and Hüsamettin Karataş, who acted as related money launderers while operating an unlicensed money transmitting business.   

Al-Qaeda Campaign

The second cyber-enabled terror finance campaign involves a scheme by al-Qaeda and affiliated terrorist groups, largely based out of Syria.  As the forfeiture complaint details, these terrorist organizations operated a bitcoin money laundering network using Telegram channels and other social media platforms to solicit cryptocurrency donations to further their terrorist goals.  In some instances, they purported to act as charities when, in fact, they were openly and explicitly soliciting funds for violent terrorist attacks.  For example, one post from a charity sought donations to equip terrorists in Syria with weapons:

Undercover HSI agents communicated with the administrator of Reminder for Syria, a related charity that was seeking to finance terrorism via bitcoin donations.  The administrator stated that he hoped for the destruction of the United States, discussed the price for funding surface-to air missles, and warned about possible criminal consequences from carrying out a jihad in the United States.

Posts from another Syrian charity similarly explicitly referenced weapons and extremist activities:

Al-Qaeda and the affiliated terrorist groups together created these posts and used complicated obfuscation techniques, uncovered by law enforcement, to layer their transactions so to conceal their actions.  Today’s complaint seeks forfeiture of the 155 virtual currency assets tied to this terrorist campaign.   

ISIS Campaign

The final complaint combines the Department’s initiatives of combatting COVID-19 related fraud with combatting terrorism financing.  The complaint highlights a scheme by Murat Cakar, an ISIS facilitator who is responsible for managing select ISIS hacking operations, to sell fake personal protective equipment via FaceMaskCenter.com (displayed below)

The website claimed to sell FDA approved N95 respirator masks, when in fact the items were not FDA approved.  Site administrators claimed to have near unlimited supplies of the masks, in spite of such items being officially-designated as scarce.  The site administrators offered to sell these items to customers across the globe, including a customer in the United States who sought to purchase N95 masks and other protective equipment for hospitals, nursing homes, and fire departments.

The unsealed forfeiture complaint seized Cakar’s website as well as four related Facebook pages used to facilitate the scheme.  With this third action, the United States has averted the further victimization of those seeking COVID-19 protective gear, and disrupted the continued funding of ISIS. 

The claims made in these three complaints are only allegations and do not constitute a determination of liability.  The burden to prove forfeitability in a civil forfeiture proceeding is upon the government.  Further, charges contained in criminal complaint are merely allegations, and the defendants are presumed innocent unless and until proven guilty beyond a reasonable doubt in a court of law.

IRS-CI Cyber Crimes Unit (Washington, D.C.), HSI’s Philadelphia Office, and FBI’s Washington D.C., New York, and Los Angeles field offices are investigating the case. Assistant U.S Attorneys Jessi Camille Brooks and Zia M. Faruqui, and National Security Division Trial Attorneys Danielle Rosborough and Alexandra Hughes are litigating the case, with assistance from Paralegal Specialists Brian Rickers and Bria Cunningham, and Legal Assistant Jessica McCormick.  Additional assistance has been provided by Chainalysis and Excygent.

Blogs to Follow:

Justice.gov (August 2020) Global Disruption of Three Terror Finance Cyber-Enabled Campaigns

Pensacola NAS Investigation Update

Law enforcement officials discovered contacts between Mohammed Saeed Alshamrani and operatives of al-Qaida after FBI technicians succeeded on their own in breaking into two cellphones that had previously been locked and that the shooter, a Saudi Air Force officer, had tried to destroy before he was killed by law enforcement.


Today, the Department of Justice and the Federal Bureau of Investigation announced additional findings about the shooting on Dec. 6, 2019 at Naval Air Station Pensacola.

This was a tragic day for our military and our deepest condolences are still with the friends and families of Ensign Joshua Watson, Airman Mohammed Haitham, Airman Cameron Walters, and with the eight others wounded in this terrorist attack.

Law enforcement officials discovered contacts between Mohammed Saeed Alshamrani and operatives of al-Qaida after FBI technicians succeeded on their own in breaking into two cellphones that had previously been locked and that the shooter, a Saudi Air Force officer, had tried to destroy before he was killed by law enforcement.

The new information provided by Director Wray and Attorney General Barr underscores the threats to our nation posed by al-Qa’ida (Al-Qaeda) and its affiliates and highlights the necessity of the security measures we take every day to protect the American people, our interests and our friends – as well as those that defend our nation.

”The Department of Defense is incredibly grateful for the diligent work by the FBI team investigating this horrific attack that took the lives of three American patriots,” said Secretary of Defense Dr. Mark. Esper. ”Based on the FBI findings, and in addition to already executed protective measures, the Department will take further prudent and effective measures to safeguard our people.”  

In response to this terrorist attack, the Department of Defense took immediate action, ordering a stop to all International Military Student operational training at U.S. installations and directing a review of all vetting and security procedures. 

In January Secretary Esper went to Pensacola and met with Navy leadership and with flight training students and first responders to hear first-hand the accounts of those on the scene. 

Within two weeks of the tragedy, the Secretary approved an extensive list of findings and recommendations and directed immediate implementation across all the military Services. These include additional measures for background checks and new physical security procedures, specifically:

  • New restrictions on IMS possession and use of firearms and ammunition.
  • New control measures for limiting IMS access to military installations and U.S. government facilities.
  • New standards for training and education on detecting and reporting insider threats.
  • Establishment of new vetting procedures that include capabilities for continuous monitoring of IMS while enrolled in U.S.-based training programs.
  • Acknowledgement of willingness to abide by these standards, committing to full compliance with all U.S. laws on-and off-duty.

We continue to work with the FBI as they uncover more information pertaining to the terrorist, his links with al-Qaida (Al-Qaeda), and the methods he used to conceal this from us. At the same time, we continue to review our procedures to identify any additional vetting and security measures we can adopt.

Despite this tragic event, our military partnerships and the international military student program remain strong and are a vital component of our National Defense. 

Security cooperation directly contributes to U.S. national security and foreign policy objectives by helping allies and partners improve their defense capabilities and enhance their ability to participate in missions alongside U.S. forces. 

We will continue to work closely with them to counter the threats of international terrorism and protect our freedom.

Defense.gov (May 2020) Naval Air Station Pensacola Investigation Update

Justice Department Secures Denaturalization of Convicted Terrorist Who Sought to Help al Qaeda Destroy the Brooklyn Bridge

U.S. District Court for the Southern District of Illinois entered an order revoking the naturalized U.S. citizenship of convicted terrorist, Iyman Faris. Faris, a native of Pakistan, was convicted in 2003 of providing material support


Court Denaturalizes Iyman Faris Based on His Provision of Material Support to al Qaeda in Early 2000s, Which Included a Personal Meeting with Usama bin Laden at Terrorist Training Camp Months After Taking Oath of Allegiance to the United States

On Feb. 3, Judge Staci M. Yandle of the U.S. District Court for the Southern District of Illinois entered an order revoking the naturalized U.S. citizenship of convicted terrorist, Iyman Faris. Faris, a native of Pakistan, was convicted in 2003 of providing material support to al Qaeda and sentenced to 20 years in prison.

Among other actions in support of al Qaeda, in 2002, Faris evaluated the practicality of a plot to collapse the Brooklyn Bridge in New York using gas cutters, communicating his assessment to al Qaeda via coded messages. In its order revoking his U.S. citizenship, the court found that Faris was ineligible for naturalization and unlawfully procured his citizenship through willful misrepresentation of material facts.

“A top priority at the Department of Justice is protecting our national security, and one of the things we do in support of that goal is tirelessly pursue denaturalization of known and suspected terrorists,” said Assistant Attorney General Jody Hunt for the Department of Justice’s Civil Division. “What Faris did is unconscionable – he pretended to support the United States and the Constitution to naturalize while he actively supported Usama bin Laden and senior al Qaeda leadership in their plans to attack the United States. The denaturalization of Faris and of others who similarly defraud the United States helps defend the integrity of the immigration system, promote the rule of law, and make America safer.”

“Iyman Faris is a traitor to the oath he took renouncing foreign allegiances and pledging to defend the Constitution and our American way of life. He was a wolf in sheep’s clothing who took advantage of American generosity with plans to terrorize and murder. He does not deserve the honor of being an American citizen,” said U.S. Attorney Steven D. Weinhoeft for the Southern District of Illinois. “Becoming a naturalized citizen is a privilege. The process must be guarded for the safety of our nation and to protect and recognize the sacrifices, determination, and honor of those who earn that privilege honestly.”

Faris, 50, was convicted in 2003 in the Eastern District of Virginia of providing, and conspiring to provide, material support to al Qaeda, a designated foreign terrorist organization.

Among other actions underlying that conviction, in 2000, Faris traveled to Afghanistan where he met Usama bin Laden and other high-ranking members of al Qaeda at an al Qaeda training camp, researched information about ultralight airplanes for a senior al Qaeda leader, and arranged for airline tickets to be issued to al Qaeda operatives.

In its Feb. 3 order, the U.S. District Court for the Southern District of Illinois granted the government’s motion for summary judgment revoking Faris’s U.S. citizenship on multiple bases.

The court found that Faris’s admitted affiliation with al Qaeda within five years after naturalizing established that he was not attached to the principles of the Constitution and well-disposed to the good order and happiness of the United States at the time he naturalized in 1999.

The court also found that Faris was ineligible for naturalization based on his lies to immigration officers while under oath and his fraudulent entry into the United States in 1994 by using another person’s passport and visa.

Faris is currently serving his criminal sentence at the U.S. Penitentiary at Marion, Illinois, with a projected release date in August 2020. Because of the Court’s order, Faris is no longer a U.S. citizen and may be subjected to removal proceedings.

This case was investigated by the Civil Division’s Office of Immigration Litigation, District Court Section (OIL-DCS) National Security and Affirmative Litigation Unit (NS/A Unit), U.S. Immigration and Customs Enforcement, and the Federal Bureau of Investigation, with consultation and support from U.S. Citizenship and Immigration Services.

The case was jointly prosecuted by Chief Tim Belsan and Counsel for National Security John Inkeles and Ed White (ret.) of OIL-DCS’s NS/A Unit and Assistant U.S. Attorney Nicholas J. Biersbach of the U.S. Attorney’s Office for the Southern District of Illinois.

Justice.gov (February, 2020) Justice Department Secures Denaturalization of Convicted Terrorist Who Sought to Help al Qaeda Destroy the Brooklyn Bridge

Help me maintain this news reporting blog by donating here.