Bitcoin donations to ISIS soared day before Sri Lanka bombings

Sri Lanka in lockdown Photo: Reuters
Sri Lanka in lockdown Photo: Reuters

Israeli blockchain intelligence company Whitestream tells "Globes" how ISIS used Canadian based CoinPayments platform to convert bitcoin to money.

Bitcoin's anonymity, availability and the ease with which unsupervised international money transfers can be achieved have made it the favored means of financing for terrorist organizations including ISIS. "Globes" can reveal that an investigation conducted by Israeli blockchain intelligence startup Whitestream has found that on the day prior to the Easter bombings in Sri Lanka, there were exceptionally large transfers in the bitcoin wallets that ISIS uses to raise contributions. Militant Islamic terror group ISIS took responsibility for last month's Sri Lankan bombings, which claimed the lives of over 250 people.

Whitestream found that on the day before the bombings, there was a sharp rise of hundreds of percent in the bitcoin balance held by CoinPayments, a company through which donations to ISIS are changed into bitcoin from regular currency. On April 20, the day before the Easter attacks, the balance in the main wallet of CoinPayments rose from just $500,000 to $4.5 million.

The following day on which the lethal attacks took place, the wallet's balance dropped back to $500,000, the same as the average daily monthly balance during the previous nine months. CoinPayments is a commercial company registered in the Cayman Islands and operating out of Canada, which allows its customers to receive cryptocurrency payments and convert them into dollars.

Earlier this week, ISIS released a video in which its leader Abu Bakr Al-Baghdadi was seen for the first time in five years in which he briefs the terror organization's activists about the hit taken by ISIS in Syria and links it to the attacks in Sri Lanka.

Whitestream said, "In the past two years, ISIS has been running a mass funding campaign to raise donations in bitcoin. The aim of the campaign is to contribute to the organization's technological division, which deals with the media, advertising and computer infrastructure sectors. The main efforts are carried out through a dedicated website. The domain address is frequently changed to prevent tracking by authorities around the world."

"Hamas also converts money on the same platform"

Whitestream, founded by Itsik Levy and Uri Bornstein, has developed software to decode the behavior of blockchain users based on the dispersed data on which bitcoin relies. The software is designed for agencies seeking to prevent money laundering and financing terror using cryptocurrency.

In investigations carried out by Whitestream over the past six months, it has managed to monitor several bitcoin donations to ISIS including the financial movements on the day before the Sri Lankan bombings.

Whitestream said, "CoinPayments admits that there wallet was involved but denies that it is connected to ISIS. It's possible that the company is not aware about the usage of their wallets, erhaps because ISIS uses straw companies in order to transfer the money.

Whitestream adds, "This is not the first time that the name of CoinPayments has been connected to a terrorist organization. Last February, we saw that Hamas also sent some of their donations that they had received in bitcoin to this platform, probably in order to convert it from regular money. Terrorist organizations are in the habit of exploiting unregulated commercial platforms and work through them. Whitestream works with Israel's Ministry of Defense's National Council for Fighting Terror Financing is order to thwart and halt these money transfers."

Levy told "Globes" about the process by which Whitestream identifies usage by ISIS of a bitcoin wallet. "Firstly we identified a certain bitcoin address that received several donations at different times, and we succeeded in verifying that two of the donations came from the address that was presented on ISIS's donations website. Even though the amount on this address was only several dollars, through this wallet we were able to identify that ISIS collects the donations via CoinPayments. This address is just a junction, which reveals the link between CoinPayments and ISIS's donations. Our assumption is that the terrorist organization probably possesses many bitcoin addresses through CoinPayments, with every donation sent to a different address. On the day before the Sri Lanka terror attacks we identified two relatively big transactions at this address with bitcoins worth about $9,800."

Levy said that it is just a matter of time until Hezbollah in Lebanon's starts raising money through bitcoin in the way that ISIS and Hamas do.

Three months ago, Whitestream uncovered how Hamas uses the Coinbase cryptocurrency exchange in the US, the largest such exchange, to convert cryptocurrency donations into money. It now seems that ISIS is using a similar method.

Published by Globes, Israel business news - en.globes.co.il - on May 2, 2019

© Copyright of Globes Publisher Itonut (1983) Ltd. 2019

Sri Lanka in lockdown Photo: Reuters
Sri Lanka in lockdown Photo: Reuters
Elbit Systems wins $130m European rocket order

The order is for the supply of rockets for Elbit's Precise and Universal Launching System (PULS), which has an effective range of up to 300 kilometers.

Nvidia intensifies efforts to compete with Mobileye

"Globes" talks to Nvidia VP and automotive team head Ali Kani about the chipmaker's autonomous vehicle activities and assesses the threat to Mobileye.

Fitch ratings agency credit: Shutterstock Fitch reaffirms Israel's A rating with negative outlook

The ratings agency said, "The negative outlook reflects rising public debt, domestic political and governance challenges and uncertain prospects for the conflict in Gaza."

Tamar rig credit: PR Sovereign Wealth Fund earned handsome returns in 2024

Israel's Sovereign Wealth Fund, known as the Citizens' Fund, had assets worth about $2 billion at the end of 2024, the Ministry of Finance reports.

Fencing goes up Petah Tikva's Segula neighborhood  credit: NTA Work on Metro to begin in Petah Tikva

The first work on the Tel Aviv Metropolitan underground railways system will begin on the M2 line depot in Petah Tikva.

Startups credit: Shutterstock/NicoElNino IVC-LeumiTech: Tech fund raising jumps 24% in Q1

Israeli privately-held tech companies raised $2.13 billion in the first quarter of 2025, up 24% from the corresponding quarter of 2024, but down 12% from the preceding quarter.

Miri Regev and Yitzhak Rochberger credit: Yediot Ahronot/ Reuven Kapuchinsky and Amit Shabi Ramat Hasharon wants railway station for the Mossad

Ramat Hasharon is pushing for a station in Glilot neat the Mossad headquarters, even though a new station is also planned for Glilot South, 1.6 kilometers away.

Prime Minister Benjamin Netanyahu credit: Reuven Kastro Police call Netanyahu for testimony as aides arrested

Jonatan Urich and Eli Feldstein are being held over alleged payments received from Qatar while working in the prime minister's bureau.

Highcon chairperson Shlomo Nimrodi  credit: PR Packaging tech co Highcon winding down

The company, which numbers Benny Landa and JVP among its investors, is laying off most of its workforce, having lost 99.9% of its value since its flotation.

MK Almog Cohen  credit: Danny Shem-Tov, Knesset Spokesperson's Office Netanyahu halts Nevatim airport bill

Legislation mandating construction of an airport at Nevatim, near Beersheva, is ready for final Knesset approval, but the prime minister blocked it after a security cabinet meeting.

Big banks CEOs credit: Oren Dai, Jonthan Bloom and Israel Hadari Israeli banks unveil NIS 3b customer benefits package

The benefits over two years meet the target set by the Bank of Israel to ease the burden for customers, while the banks are reporting record profits.

Eilat's old airport Photo: Shutterstock Building set to begin on former Eilat airport land

2,469 housing units will be built as well as 2,776 hotel rooms, 88,000 square meters of office space and 95,000 square meters of commercial space.

Gas station in Israel credit: Tali Bogdanovsky Gasoline prices in Israel to rise Monday night

The maximum price of government price controlled 95 octane gasoline at self-service pumps in Israel will rise on Monday at midnight April 1, 2025, by NIS 0.08 per liter to NIS 7.31 per liter.

Israeli apartments Credit: Shutterstock Apartments sold and rented

A selection of recent real estate deals in Israel in Givatayim, Ra'anana, Modiin-Maccabim-Reut, Gedera, Kiryat Shemona and Ashkelon.

Fencing goes up Petah Tikva's Segula neighborhood  credit: NTA The Metro is really happening

Although there are skeptics who doubt that the project will ever be realized, there are now enough signs on the ground to indicate that they are probably wrong.

Ben Gurion airport Terminal 1 credit: Shutterstock Ben Gurion airport's Terminal 1 reopens

Terminal 1 at Ben Gurion airport reopened yesterday to domestic flights, while international flights will start using the terminal from Sunday, March 30.

Minister of Interior Moshe Arbel credit: Cadya Levy Interior Minister: There is no deep state in Israel

Minister of Interior Moshe Arbel told the Globes Services conference that civil servants are dedicated employees who serve the public.

Twitter Facebook Linkedin RSS Newsletters גלובס Israel Business Conference 2018