The Weaponization of Advocacy: A Comprehensive Analysis of Terrorist Co-optation, Illicit Finance, and State-Sponsored Influence Operations Utilizing the Free Palestine Slogan
1. Introduction: The Evolution of Hybrid Warfare in the Digital Age
The contemporary geopolitical landscape is increasingly defined by the convergence of kinetic warfare and information operations, a phenomenon often categorized under the umbrella of "hybrid warfare." Within this paradigm, the slogan "Free Palestine" and its digital iterations—most notably the hashtag #freepalestina—have transcended their origins as expressions of political solidarity or human rights advocacy. While these symbols remain central to legitimate civil society discourse, they have been systematically co-opted and weaponized by a constellation of malign actors. This report provides an exhaustive forensic analysis of how designated terrorist organizations, specifically Hamas and the Palestinian Islamic Jihad (PIJ), alongside state-sponsored actors from the Islamic Republic of Iran and the Russian Federation, utilize this slogan as a vector for terrorist financing, radicalization, and the destabilization of Western democratic institutions.
The strategic utility of the #freepalestina hashtag lies in its "dual-use" nature. For the vast majority of global users, it represents a call for Palestinian self-determination and an end to humanitarian suffering. However, for terrorist operatives and state intelligence services, this widespread legitimacy provides an ideal camouflage—a "human shield" in the information domain—behind which illicit financial transactions, recruitment drives, and psychological warfare operations are conducted. Intelligence assessments and financial data derived from the U.S. Department of the Treasury, the UK Office of Financial Sanctions Implementation (OFSI), and cybersecurity firms such as Graphika, Microsoft Threat Intelligence, and TRM Labs reveal a highly organized infrastructure designed to exploit this ambiguity.
This report posits that the digital environment following the October 7, 2023, attacks on Israel has fundamentally shifted the operational doctrine of Palestinian terrorist groups. No longer viewing media merely as a propaganda tool, organizations like Hamas now treat the information space as a primary theater of conflict, equal in strategic importance to the physical battlefield.1 By flooding the web with content tagged #freepalestina, these groups have successfully integrated their violent narratives into mainstream discourse, facilitating a global fundraising network that leverages cryptocurrency to evade sanctions and utilizing Western non-governmental organizations (NGOs) to launder their ideology.
The analysis that follows is structured to dissect these mechanisms in detail. It begins by examining the doctrinal foundations of Hamas's "media jihad," proceeds to a forensic accounting of the illicit financial networks operating under the guise of humanitarian aid, explores the complex web of NGO co-optation in Europe, and concludes with an investigation into the algorithmic amplification of these narratives by foreign state actors and bot networks.
2. The Doctrine of "Media Jihad": Strategic Communications of Hamas and PIJ
To understand the widespread misuse of the #freepalestina hashtag, one must first comprehend the strategic doctrine that governs the communications of Palestinian terrorist factions. This is not a chaotic or organic outpouring of sentiment but the result of decades of strategic planning and institutional adaptation.
2.1. Historical Context and the Hamas-PIJ Convergence
Historically, the relationship between Hamas and Palestinian Islamic Jihad (PIJ) has been characterized by a complex oscillation between fierce rivalry and pragmatic cooperation. In the late 1980s and early 1990s, ideological rifts were prominent, largely stemming from PIJ’s affinity for Iranian Khomeinism and the concept of wilayat al-faqih (rule by the jurisprudent), which contrasted with Hamas’s roots in the Sunni Muslim Brotherhood.1 However, the digital age has necessitated a convergence of their operational strategies.
Intelligence reports indicate that as early as October 2004, Hamas activists responsible for media operations held closed-door meetings to discuss the dominance of PIJ’s propaganda. In videotaped proceedings obtained by intelligence agencies, Fathi Hamad, a Hamas Shura Council member responsible for communications, expressed frustration at PIJ’s success in "infiltrating the media" and controlling the agenda.1 This realization catalyzed a shift in Hamas’s strategy, moving from a focus on social welfare (dawa) as the primary recruitment tool to a more aggressive, media-centric approach that prioritized narrative dominance.
Over the past four years, and particularly following the "Sword of Jerusalem" conflict in 2021, this cooperation has deepened. The two groups have coordinated their messaging to present a unified "Resistance" front. This "media jihad" doctrine posits that every kinetic action—a rocket launch, an ambush, or the taking of hostages—must be accompanied by a sophisticated media product designed to amplify its psychological impact.2 The #freepalestina hashtag serves as the unifying banner for this joint output, allowing disparate groups with varying ideologies (Islamist, Marxist-Leninist PFLP, etc.) to aggregate their content into a single, overwhelming data stream.
2.2. "Flood the Web": The Post-October 7 Information Strategy
Following the October 7 massacre, Hamas implemented a "flood the web" strategy. This approach relies on the saturation of social media platforms with high volumes of content to overwhelm content moderation systems and dominate the "trending" algorithms of platforms like X (formerly Twitter), TikTok, and Telegram.3
The strategy is multi-layered:
Volume over Quality: The sheer quantity of posts tagged #freepalestina ensures that the hashtag trends globally, forcing the topic into the feeds of users who have no prior engagement with the conflict.
Genre Intentionality: Academic analysis of Hamas's media output reveals a high degree of intentionality in the genres of content produced. These range from "hostage videos" designed to exert psychological pressure on Israeli society and foreign governments, to "combat footage" aimed at projecting military competence to regional allies, to "victimhood narratives" tailored for Western liberal audiences.5
Visual Warfare: The use of graphic imagery is calculated. While Western media ethics often preclude the showing of bodies or extreme violence, Hamas and PIJ channels actively disseminate such content to incite anger and mobilize support. By tagging this graphic content with humanitarian hashtags, they bypass the "filter bubbles" of Western audiences.6
2.3. The Role of "Gaza Now" as a Propaganda Node
A critical component of this media ecosystem is the outlet known as "Gaza Now." While presenting itself as an independent news agency, intelligence and financial sanctions confirm it acts as a proxy for Hamas. With over one million followers on Telegram, "Gaza Now" serves as a primary dissemination node for Hamas propaganda.7
Unlike official Hamas channels, which are frequently banned by major social media platforms, "Gaza Now" operates in the gray zone of "news reporting." It creates a continuous feed of updates, blending legitimate news about airstrikes with glorification of terrorist acts and calls for violence. This content is then reposted by thousands of users across X and Instagram, often accompanied by the #freepalestina hashtag, effectively laundering terrorist propaganda through the accounts of unwitting activists.8
Table 1: Comparative Analysis of Terrorist Media Strategies
Feature
Hamas Strategy
PIJ Strategy
Convergence Point
Primary Objective
Governance legitimacy + Resistance
Pure military resistance
Unified "Resistance" narrative under #freepalestina
Key Themes
Resilience, civic administration, victory
Martyrdom, Iranian alliance
Victimhood-Revenge cycle post-Oct 7 9
Dissemination
Broad spectrum (TV, Social, Mosques)
Niche, high-intensity telegram channels
Coordinated hashtag flooding ("Media Jihad")
Target Audience
Palestinian public, International community
Radicalized youth, Iran
Global youth via TikTok/Instagram
The effectiveness of this strategy is evident in the rapid proliferation of the "victimhood-revenge" narrative in Europe, which has fueled a new wave of radicalization among adolescents exposed to this content on platforms like TikTok.9 The hashtag acts as the gateway drug; users searching for information on the humanitarian crisis are algorithmically fed content that progressively normalizes the extremist ideologies of Hamas and PIJ.
3. Financial Warfare: The "Gaza Now" Nexus and Cryptocurrency Laundering
While the informational aspect of the #freepalestina hashtag is damaging, its role in facilitating terrorist financing represents a direct material threat to global security. The hashtag serves as a marketing tool for illicit fundraising campaigns that solicit cryptocurrency donations under the guise of humanitarian aid.
3.1. The Designation of the Gaza Now Network
On March 27, 2024, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC), in coordination with the UK’s Office of Financial Sanctions Implementation (OFSI), imposed comprehensive sanctions on "Gaza Now" and its founder, Mustafa Ayash.7 These actions were taken in response to the network’s material support for Hamas following the October 7 attacks.
Mustafa Ayash (also known as Mostafa Moin Mahmoud Ayash), a Palestinian national with Austrian residency papers, founded "Gaza Now" as a digital media entity.10 However, investigations revealed that the platform’s primary function post-October 7 was to solicit funds for Hamas. Ayash utilized the massive reach of the "Gaza Now" Telegram channel—amplified by the #freepalestina hashtag—to post cryptocurrency wallet addresses, urging followers to donate to "the resistance" or vaguely defined relief efforts.7
Crucially, the network extended into the United Kingdom through a sophisticated web of corporate entities designed to provide a veneer of legitimacy. Aozma Sultana, a UK national, was designated for her role as the director of two companies: Al-Qureshi Executives and Aakhirah Limited.10 These companies were not merely passive shells; they actively partnered with "Gaza Now" in joint fundraising efforts.
The Mechanism of Deception:
The UK Charity Commission launched a statutory inquiry into Aozma Sultana and her companies, suspecting that funds solicited from the public for "emergency medication, food, and shelter" were in fact misappropriated for terrorist financing.11 Sultana’s subsequent conviction for failing to comply with information requests regarding her assets underscores the opacity of these financial flows.12 By partnering with UK-registered companies, "Gaza Now" attempted to lower the risk profile of their transactions, making it easier to move funds through the formal banking system before converting them into cryptocurrency or funneling them to Gaza via informal hawala networks.
3.2. Cryptocurrency Layering and the Shift to TRON
The financial forensics of the "Gaza Now" network reveal a significant evolution in terrorist financing methodologies. While early campaigns often utilized Bitcoin (BTC), recent investigations by firms like TRM Labs and Elliptic, as well as seizures by Israel’s National Bureau for Counter Terror Financing (NBCTF), indicate a decisive shift toward the TRON blockchain and the Tether (USDT) stablecoin.10
Why TRON and USDT?
Terrorist organizations prefer TRON for several tactical reasons:
Speed and Cost: TRON transactions are faster and significantly cheaper than Bitcoin, making them suitable for high-volume, low-value donations solicited via social media.13
Liquidity: USDT is a stablecoin pegged to the US dollar, protecting the terror group’s funds from the volatility inherent in assets like Bitcoin.
Obfuscation: The proliferation of USDT on TRON allows for easier integration with non-compliant exchanges and "over-the-counter" (OTC) brokers in jurisdictions with weak Anti-Money Laundering (AML) controls, such as Lebanon, Turkey, and Gaza.14
Layering Techniques:
The "Gaza Now" network did not simply receive funds into a static wallet. Instead, they employed "layering" techniques. Funds received from donors were rapidly moved through a chain of intermediary addresses—sometimes dozens of hops in minutes—to obscure the origin and destination of the assets.15 This digital "shell game" is designed to frustrate blockchain analytics tools.
Table 2: Select Sanctioned Cryptocurrency Addresses Associated with Gaza Now
Asset Type
Wallet Address
Authority
Network Context
Bitcoin (XBT)
3Q8H2ZWMtc4R1M3mkmhnTjCoYKTeCFigDP
OFAC 10
Primary donation address used in early post-Oct 7 campaigns.
USDT (TRON)
TH96tFMn8KGiYSLiwcV3E2UiaJc8jmcbz3
OFAC 16
High-volume address leveraging TRON's low fees.
USDT (TRON)
TGJVc32ig2u8tQsYMLE7KXHT5NDQroaVNU
OFAC 16
Identified in social media solicitations.
Ethereum (ETH)
0xE950DC316b836e4EeFb8308bf32Bf7C72a1358FF
OFAC 16
Used for ERC-20 token donations.
The seizure of over 40 TRON addresses by the NBCTF, all linked to Hamas and PIJ, represents the largest such action against crypto-terrorism financing to date.13 This enforcement action explicitly disrupted a scheme intended to launder millions of dollars, proving that the #freepalestina fundraising drives were not grassroots humanitarian efforts but organized financial operations of a designated terror group.14
3.3. The "Buy Cash Money" Hub
Further illustrating the integration of local financial infrastructure with global crypto networks is the case of Buy Cash Money and Money Transfer Company (BuyCash). This Gaza-based money service business was targeted by a U.S. Department of Justice forfeiture action for serving as a critical financial hub for Hamas.17
BuyCash exemplifies the "on-ramp/off-ramp" problem in terrorist financing. While social media campaigns raise digital assets, these must eventually be converted into fiat currency or tangible goods to be useful for operations in Gaza. BuyCash facilitated these conversions, interacting with other sanctioned entities like the Mujahideen Brigades.18 The connection between social media hashtags soliciting crypto and physical cash transfer shops in Gaza forms a closed loop of terror financing that exploits the goodwill of international donors.
4. The European Front: NGO Co-optation and the "Humanitarian" Cover
The operational environment in Europe provides a unique set of opportunities for terrorist organizations. By exploiting the freedom of association and the robust civil society landscape, groups like Hamas and the Popular Front for the Liberation of Palestine (PFLP) have established a network of NGOs that serve as fronts for fundraising, political lobbying, and operatives' employment.
4.1. The PGNL and Amin Abou Rashed: A Case Study in The Netherlands
A prominent example of this phenomenon is the Palestinian Community in the Netherlands (PGNL) and its key figure, Amin Abou Rashed. Often described in Dutch media as a "Hamas fundraiser," Abou Rashed was arrested in June 2023 on suspicion of funneling approximately €5.5 million to Hamas, with some estimates suggesting the total could be as high as €11.9 million.19
Profile of an Operative:
Amin Abou Rashed is a known entity in the counter-terrorism community. He was designated by Israel as a terrorist and Hamas member in 2013 and later by the U.S. Treasury in 2025.21 His modus operandi involves the creation and management of charitable organizations that outwardly focus on Palestinian rights and humanitarian aid. He previously operated through the Al-Aqsa Foundation, which was outlawed in the Netherlands for its support of Hamas.23 Undeterred, he shifted operations to new entities like the PGNL and the European Palestinians Conference (EPC), of which he served as president.19
The Evidence of Ties:
The connection between Abou Rashed and Hamas leadership is not speculative. Photographic evidence documents him meeting with Ismail Haniyeh, the late leader of Hamas, as well as other senior officials like Basem Naim, during visits to Gaza.19 These meetings often occurred under the auspices of "Miles of Smiles" convoys or other humanitarian delegations, effectively using aid missions as cover for strategic coordination with terror leadership.
Operational Impact:
The PGNL, under Abou Rashed's influence, has been a key organizer of protests in the Netherlands, utilizing hashtags like #freepalestina and the domain free.palestina.nl. However, these are not merely peaceful protests. Following the violent attacks on Israeli soccer fans in Amsterdam in November 2024, investigations revealed that PGNL, along with affiliated groups like "utrecht4palestine," used Instagram to mobilize activists with rhetoric preparing for "grave violence".19 This incident underscores how organizations linked to Hamas financing networks can transition from fundraising to direct incitement of violence on European streets.
4.2. The PFLP's Network of Designated NGOs
Parallel to Hamas's activities, the PFLP has cultivated a sophisticated network of NGOs in the West Bank and Gaza. A landmark report by NGO Monitor identified at least 50 Palestinian NGO officials with ties to the PFLP, a Marxist-Leninist group designated as a terrorist organization by the US, EU, Canada, and Israel.25
In October 2021, Israel designated six of these NGOs—Al-Haq, Addameer, Defense for Children International – Palestine (DCIP), Bisan, Union of Agricultural Work Committees (UAWC), and Union of Palestinian Women's Committees (UPWC)—as terrorist entities.25 A seventh, Health Work Committees (HWC), had been designated previously.
The "Halo Effect" and Funding:
These organizations have received over €200 million in funding from European governments and the EU over the past decade.25 They utilize the #freepalestina hashtag and human rights terminology to create a "halo effect," presenting themselves as indispensable civil society actors. This branding allows them to access diplomatic corridors and funding streams that the PFLP could never access directly.
However, the personnel overlap is undeniable. Convicted terrorists who have served prison sentences for PFLP-related activities often hold senior positions in these NGOs. For example, Samer Arbid, the accountant for UAWC, was indicted for commanding the PFLP cell that carried out the bombing murder of 17-year-old Israeli civilian Rina Shnerb in 2019.25 These NGOs serve a dual purpose: providing employment and financial stability for PFLP operatives while simultaneously running delegitimization campaigns (such as BDS) against Israel that align with the group's political objectives.26
5. State-Sponsored Malign Influence: The Russia-Iran Axis
The information war surrounding the #freepalestina hashtag is not limited to non-state actors. State-sponsored influence operations (IO) from Russia and Iran have aggressively weaponized the conflict, viewing the polarization it causes as a strategic asset to weaken Western societies.
5.1. Russia's "Doppelganger" Campaign
The Russian Federation has deployed a massive disinformation campaign known as "Doppelganger" (associated with the Social Design Agency and Structura National Technologies) to exploit the Gaza war.27
The Mechanism of "Typosquatting":
The core tactic of Doppelganger is the creation of clone websites that mimic legitimate, trusted media outlets. Operatives register domains that closely resemble authentic ones (e.g., l-monde.fr instead of lemonde.fr) and populate them with fabricated articles that appear to be written by real journalists. These fake articles are then disseminated via thousands of bot accounts on social media.27
Strategic Narratives:
In the context of the Israel-Hamas war, Doppelganger's narratives are designed to fracture Western alliances.
Targeting Ukraine Support: One prominent fabrication claimed that Ukraine was selling Western-supplied weapons to Hamas. This lie was designed to erode U.S. and European support for Kyiv by linking the Ukrainian government to the atrocities of October 7.30
Antisemitic Provocations: The network was implicated in the artificial amplification of images showing Stars of David stenciled on buildings in Paris. France's foreign ministry condemned this as a Russian operation designed to simulate a resurgence of 1930s-style antisemitism and provoke fear and division within French society.27
The "Matryoshka" Campaign: A sub-campaign identified by the "Antibot4Navalny" collective, dubbed "Matryoshka," specifically targets fact-checkers and journalists. Bots spam these accounts with requests to "verify" fake news, overwhelming their capacity to debunk disinformation effectively.31
Table 3: Verified Doppelganger Targets and Tactics
Target Outlet
Tactic
Fabricated Narrative Example
Fox News
Website Cloning
Articles criticizing U.S. aid to Israel/Ukraine linkage.
Le Monde
Website Cloning
Fake reports on French mercenaries or internal unrest.
Walla (Israel)
Website Cloning
"Shifa Hospital as another defeat in the information war".32
Fact-Checkers
Spam/Harassment
"Matryoshka" campaign to exhaust verification resources.31
5.2. Iran's Cyber-Enabled Influence Operations
While Russia focuses on division, Iran's operations are more directly supportive of Hamas's military and political goals. Microsoft Threat Intelligence assesses that Iranian actors surged their activity post-October 7, employing a "reactive" but aggressive strategy.33
Key Threat Actors:
Cotton Sandstorm: Linked to the Islamic Revolutionary Guard Corps (IRGC), this actor has impersonated legitimate partners and even utilized the logo of the Al-Qassam Brigades (Hamas’s military wing) to spread false messaging about hostages and threaten Israeli citizens directly via text messages and emails.34
Cyber Avengers: This persona claimed responsibility for cyberattacks on Israeli critical infrastructure, including water and electricity systems, while simultaneously releasing propaganda videos glorifying these attacks. The messaging was synchronized with Hamas narratives regarding the siege of Gaza.33
Narrative Laundering:
A report by the Clemson Media Forensics Hub identified a sophisticated Iranian campaign on X that utilized targeted hashtags, including #freepalestina, to promote specific narratives. By injecting these hashtags into unrelated political discourses—such as the debate over Scottish independence—Iranian operatives engaged in "narrative laundering," attempting to align separatist movements in the West with the "resistance" axis in the Middle East.35 Furthermore, Graphika exposed an Iranian operation that masqueraded as an Israeli protest group, the "Black Flag" movement, to plant inflammatory messages criticizing the Israeli government, thereby attempting to influence domestic Israeli politics during wartime.36
6. Algorithmic Radicalization: The Virtual Caliphate and Youth Mobilization
The widespread use of #freepalestina serves as a powerful vector for online radicalization, particularly among youth demographics. While many users employ the hashtag to express genuine solidarity, the algorithmic nature of platforms like TikTok and X can rapidly funnel users from mainstream humanitarian content to extremist material.
6.1. Bot Networks and Artificial Amplification
The visibility of the pro-Hamas narrative is not entirely organic. Social media intelligence firm Cyabra uncovered a massive coordinated influence operation in the aftermath of October 7. Analyzing over 162,000 profiles participating in the online conversation, Cyabra found that approximately 25% (one in four) were fake accounts.37
These fake profiles form a "bot network" designed to artificially inflate the engagement metrics of specific posts. By retweeting and liking content tagged #freepalestina, these bots trick the platform algorithms into perceiving the content as "trending" or "viral." This "astroturfing" technique ensures that pro-Hamas propaganda reaches a global audience far larger than its organic support base would warrant.37
6.2. The "Virtual Caliphate" Complex
For vulnerable users, particularly adolescents, the hashtag serves as an entry point into a "radicalization funnel." Research on European lone-actor attackers suggests that the "victimhood-revenge" narrative disseminated by groups like Hamas resonates strongly with disenfranchised youth.9
The mechanism functions as follows:
Entry: A user engages with a benign video about humanitarian suffering in Gaza tagged #freepalestina.
Algorithmic Reinforcement: The platform's recommendation engine serves increasingly emotive and radical content to maximize engagement.
Radicalization: The user is exposed to content produced by terrorist organizations (often rebranded or reposted by intermediate accounts) that frames violence as the only legitimate form of resistance.
This creates a "Virtual Caliphate Complex," where the ideological distinctions between different Islamist extremist groups (Hamas, ISIS, Al-Qaeda) blur under the unifying banner of defending the Ummah in Palestine.9 The CST in the UK has documented the real-world consequences of this digital incitement, recording incidents where convoys of cars drove through Jewish neighborhoods shouting "Free Palestine" alongside threats of sexual violence and antisemitic slurs.39 This demonstrates how the hashtag transforms from a political slogan into a tool of localized intimidation and harassment.
7. Campus and Civil Society: The Intellectual Battlefield
The co-optation of the #freepalestina slogan extends to the intellectual and academic spheres, where it is used to sanitize terrorist ideology for Western consumption.
7.1. Students for Justice in Palestine (SJP) and the "Day of Resistance"
Following the October 7 attacks, the National Students for Justice in Palestine (SJP) released a toolkit for its chapters across North American universities. This document framed the massacre of civilians not as a terrorist attack, but as a "historic win" for the "Palestinian resistance".40
The toolkit explicitly urged students to frame the events as part of a "unitary intifada" and to reject the distinction between civilians and soldiers in the context of "settler colonialism." By adopting this rhetoric, SJP chapters effectively laundered the violent ideology of Hamas into the language of academic decolonization theory. This intellectual cover allows for the celebration of violence under the guise of progressive activism, creating a hostile environment for Jewish and pro-Israel students on campus.40
7.2. The "Halo Effect" of Human Rights Language
Terrorist groups have learned that adopting the language of international law and human rights is the most effective way to neutralize Western opposition. By embedding their activities within the #freepalestina discourse, organizations like the PFLP-linked NGOs discussed in Section 4 can operate openly in Europe.
This phenomenon, described as the "halo effect," shields these organizations from scrutiny. Accusations of terror ties are often dismissed by supporters as politically motivated attacks on human rights defenders. This dynamic was evident when Israel designated the six PFLP-linked NGOs; despite the intelligence provided, many European governments initially hesitated to cut funding, citing the organizations' status as pillars of civil society.25 This hesitation is precisely the strategic outcome the terror groups seek to achieve by co-opting the language of advocacy.
8. Conclusion: The Convergence of Terror and Advocacy
The investigation into the ties between the #freepalestina hashtag and terrorist organizations reveals a disturbing reality: a slogan ostensibly dedicated to liberation has been systematically compromised by entities committed to violence, hatred, and destabilization.
The findings of this report demonstrate that:
Financial Exploitation is Systemic: The "Gaza Now" network and the activities of Amin Abou Rashed prove that the hashtag is utilized to fundraise for designated terrorist groups, actively circumventing international sanctions through cryptocurrency layering and complex corporate shells in the UK and Netherlands.
State Actors Weaponize the Cause: Russia and Iran are not passive observers but active participants. Through campaigns like "Doppelganger" and "Cotton Sandstorm," they utilize the hashtag to amplify disinformation, deepen societal rifts in the West, and advance their own geopolitical agendas.
The Digital Infrastructure is Manipulated: Through the deployment of massive bot networks (constituting up to 25% of the discourse), terrorist organizations have successfully inflated their support, drowning out moderate voices and creating a digital environment conducive to radicalization.
Civil Society provides Cover: The interpenetration of PFLP operatives within European-funded NGOs and the radical rhetoric of campus groups like SJP highlight a critical failure in due diligence, allowing terror-linked ideologies to flourish within Western institutions.
Implications for Policymakers:
The "dual-use" nature of the #freepalestina hashtag complicates enforcement, as it intertwines protected political speech with material support for terrorism. However, the financial and operational links detailed here—specifically regarding crypto wallets, sanctioned individuals, and state-sponsored bot networks—provide clear, actionable targets for intervention. Disrupting these specific nodes (e.g., seizing TRON wallets, prosecuting sanctions evaders like Aozma Sultana, and exposing Doppelganger domains) is essential to decoupling the legitimate grievances of the Palestinian people from the machinations of terrorist organizations that seek to exploit them for violent ends.
Works cited
Hamas and Islamic Jihad clash over 'media Jihad' | Royal United Services Institute - RUSI, accessed on November 22, 2025, https://www.rusi.org/publication/hamas-and-islamic-jihad-clash-over-media-jihad
Understanding Hamas's and Hezbollah's Uses of Information Technology - CSIS, accessed on November 22, 2025, https://www.csis.org/analysis/understanding-hamass-and-hezbollahs-uses-information-technology
Like, Follow, and Subscribe: The Potential Effect of Social Media on the 2024 Elections, accessed on November 22, 2025, https://scholarship.shu.edu/cgi/viewcontent.cgi?article=1061&context=pa
How China is defining the way governments manipulate their people via the internet, accessed on November 22, 2025, https://www.nzherald.co.nz/business/how-china-is-defining-the-way-governments-manipulate-their-people-via-the-internet/Y3B7KRSANALMZ6E2AJQR4K7NLU/
Hamas's Hostage Videos as a Tool of Strategic Communication - MDPI, accessed on November 22, 2025, https://www.mdpi.com/2673-5172/6/4/180
SOCIAL MEDIA AS THE DIMENSION OF CONTEMPORARY WAR - Academic Journals of Księgarnia Akademicka Publishing, accessed on November 22, 2025, https://journals.akademicka.pl/politeja/article/download/6387/5944
Treasury Sanctions Hamas-Aligned Terrorist Fundraising Network, accessed on November 22, 2025, https://home.treasury.gov/news/press-releases/jy2213
In Israel-Hamas conflict, social media become tools of propaganda and disinformation, accessed on November 22, 2025, https://dfrlab.org/2023/10/12/in-israel-hamas-conflict-social-media-become-tools-of-propaganda-and-disinformation/
From TikTok to Terrorism? The Online Radicalization of European Lone Attackers since October 7, 2023, accessed on November 22, 2025, https://ctc.westpoint.edu/from-tiktok-to-terrorism-the-online-radicalization-of-european-lone-attackers-since-october-7-2023/
Counter Terrorism Designations; Counter Narcotics Designation Removal | Office of Foreign Assets Control, accessed on November 22, 2025, https://ofac.treasury.gov/recent-actions/20240327
Regulator investigates fundraising activity over links to pro-Hamas media outlet - GOV.UK, accessed on November 22, 2025, https://www.gov.uk/government/news/regulator-investigates-fundraising-activity-over-links-to-pro-hamas-media-outlet
The UK's first anti-terrorism sanctions conviction - Rahman Ravelli, accessed on November 22, 2025, https://www.rahmanravelli.co.uk/expertise/sanctions/articles/the-uk-s-first-anti-terrorism-sanctions-conviction/
In Wake of Attack on Israel, Understanding How Hamas Uses Crypto | TRM Blog, accessed on November 22, 2025, https://www.trmlabs.com/resources/blog/in-wake-of-attack-on-israel-understanding-how-hamas-uses-crypto
District of Columbia | Justice Department Disrupts Hamas Terrorist Financing Scheme Through Seizure of Cryptocurrency, accessed on November 22, 2025, https://www.justice.gov/usao-dc/pr/justice-department-disrupts-hamas-terrorist-financing-scheme-through-seizure
Cyber Report April – June 2021 - International Institute for Counter-Terrorism, accessed on November 22, 2025, https://ict.org.il/wp-content/uploads/2022/02/CyberReport-Apr-Jun-2021-Reichman.pdf
U.S. Sanctions Gaza Now, Others for Hamas Crypto Fundraising - Chainalysis, accessed on November 22, 2025, https://www.chainalysis.com/blog/ofac-ofsi-gaza-now-sanctions/
United States Unseals Civil Action Filed Against Approximately $2M in Digital Currency Involved in Hamas Fundraising - Department of Justice, accessed on November 22, 2025, https://www.justice.gov/opa/pr/united-states-unseals-civil-action-filed-against-approximately-2m-digital-currency-involved
US DOJ Charges Hamas Leaders with October 7 Attacks, Details Hamas' Use of Cryptocurrencies | TRM Blog - TRM Labs, accessed on November 22, 2025, https://www.trmlabs.com/resources/blog/us-doj-charges-hamas-leaders-with-october-7-attacks-details-hamas-use-of-cryptocurrencies
Dutch-based organizations with ties to Hamas behind the November pogrom in Amsterdam | NOS, accessed on November 22, 2025, https://bijlagen.nos.nl/artikel-21619122/Dutch-based_organizations_with_ties_to_Hamas_behind_the_November_pogrom_in_Amsterdam_12.11.2024.pdf
Dutch Authorities Catch Hamas Financier Red-Handed - FDD, accessed on November 22, 2025, https://www.fdd.org/analysis/2023/08/01/dutch-authorities-catch-hamas-financier-red-handed/
Netherlands arrests two for Hamas fundraising - The Jerusalem Post, accessed on November 22, 2025, https://www.jpost.com/israel-news/article-748039
Amin Abu Rashid - Wikipedia, accessed on November 22, 2025, https://en.wikipedia.org/wiki/Amin_Abu_Rashid
Jaarverslag Binnenlandse Veiligheidsdienst 2001 - AIVD, accessed on November 22, 2025, https://www.aivd.nl/binaries/aivd_nl/documenten/jaarverslagen/2002/05/28/jaarverslag-bvd-2001/jaarverslag_bvd_2001.pdf
September 2024 - Gov.il, accessed on November 22, 2025, https://www.gov.il/BlobFolder/reports/hamas_and_pflt_terror_groups_affiliated_activists_in_europe_sep_24/en/Research_Reports_Hamas%20and%20the%20PFLP%20Terror%20Groups%20Affiliated%20Activists%20in%20Europe_Sep%2024.pdf
Report shows overwhelming evidence of ties between Palestinian NGOs and PFLP terror group - NGO Monitor, accessed on November 22, 2025, https://ngo-monitor.org/press-releases/report-shows-overwhelming-evidence-of-ties-between-palestinian-ngos-and-pflp-terror-group/
TERRORISTS IN SUITS - Gov.il, accessed on November 22, 2025, https://www.gov.il/BlobFolder/generalpage/terrorists_in_suits/en/De-Legitimization%20Brochure.pdf
Doppelganger (disinformation campaign) - Wikipedia, accessed on November 22, 2025, https://en.wikipedia.org/wiki/Doppelganger_(disinformation_campaign)
Justice Department Disrupts Covert Russian Government-Sponsored Foreign Malign Influence Operation Targeting Audiences in the United States and Elsewhere, accessed on November 22, 2025, https://www.justice.gov/archives/opa/pr/justice-department-disrupts-covert-russian-government-sponsored-foreign-malign-influence
Misinformation in the Gaza war - Wikipedia, accessed on November 22, 2025, https://en.wikipedia.org/wiki/Misinformation_in_the_Gaza_war
Semi-annual-Russia-Report-12-07-2023.pdf - Microsoft, accessed on November 22, 2025, https://www.microsoft.com/content/dam/microsoft/final/en-us/microsoft-brand/documents/Semi-annual-Russia-Report-12-07-2023.pdf
Master of Puppets: Uncovering the DoppelGänger pro-Russian influence campaign, accessed on November 22, 2025, https://blog.sekoia.io/master-of-puppets-uncovering-the-doppelganger-pro-russian-influence-campaign/
Russian Influence Campaign Against Israel: Strategic and Cognitive Implications - INSS, accessed on November 22, 2025, https://www.inss.org.il/wp-content/uploads/2024/05/No.-1852.pdf
Iran surges cyber-enabled influence operations in support of Hamas - Microsoft, accessed on November 22, 2025, https://www.microsoft.com/en-us/security/security-insider/threat-landscape/iran-surges-cyber-enabled-influence-operations-in-support-of-hamas
Microsoft Digital Defense Report 2024, accessed on November 22, 2025, https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/final/en-us/microsoft-brand/documents/Microsoft%20Digital%20Defense%20Report%202024%20%281%29.pdf
What's Hiding Under the Kilt? - Iranian Trolls for Scottish Independence, accessed on November 22, 2025, https://www.clemson.edu/centers-institutes/watt/hub/images/hiding-under-the-kilt1.pdf
Foreign Interference and Iranian Influence on Social Networks in Israel - INSS, accessed on November 22, 2025, https://www.inss.org.il/publication/iranian-influence/
Disinformation - Hamas-Israel War - Cyabra, accessed on November 22, 2025, https://cyabra.com/reports/disinformation-hamas-israel-war/
1 of 4 Pro-Hamas Profiles Are Fake: The Online Battlefront - Cyabra, accessed on November 22, 2025, https://cyabra.com/blog/1-of-4-pro-hamas-profiles-are-fake-the-online-battlefront/
The Month of Hate: Antisemitism & extremism during the Israel-Gaza conflict - CST, accessed on November 22, 2025, https://cst.org.uk/data/file/4/a/The_Month_of_Hate.1626263072.pdf
Contents - Congress.gov, accessed on November 22, 2025, https://www.congress.gov/118/meeting/house/117305/documents/HHRG-118-JU10-20240515-SD003.pdf
Congressional Testimony - Ways and Means Committee, accessed on November 22, 2025, https://waysandmeans.house.gov/wp-content/uploads/2023/11/Greenblatt-Testimony.pdf
Israel/Palestine: UN experts call on governments to resume funding for six Palestinian CSOs designated by Israel as 'terrorist organisations' | OHCHR, accessed on November 22, 2025, https://www.ohchr.org/en/press-releases/2022/04/israelpalestine-un-experts-call-governments-resume-funding-six-palestinian
