Central Asian Jihadists’ Use of Cryptocurrencies in Bitcoin

On August 13, 2020, the US Justice Department announced that it seized $2 million in Bitcoin and other types of cryptocurrency from accounts of three Salafi-Jihadi extremist groups, including al Qaeda and the Islamic State, relied on to finance their organizations and violent plots. According to their statement, the U.S. authorities seized over 300 cryptocurrency accounts, four websites, and four Facebook pages all related to Sunni-Jihadi militant organizations. Indeed, the disclosed criminal case documents indicate that this was the largest-ever seizure of cryptocurrency by US intelligence agencies in the context of terrorism.

US counterterrorism agents analyzed transactions of cryptocurrency on the blockchain, a secure form of public ledger for the online funds, and employed undercover operations as well as search warrants on email accounts to establish a money trail of Sunni terror groups that was detailed in an 87-pages of the Washington DC federal court report

The banner calling for donations to Katibat Tawhid wal Jihad. A screenshot from Telegram, May 18, 2020

The revealed papers indicate, in some instances, al Qaeda and its affiliated terrorist groups in Syria acted under the cover of charities ‘Al Sadaqah’ and ‘Reminder for Syria’. In this regard, it should be noted that some al Qaeda-linked Central Asian Salafi-Jihadi groups also have frequently acted under the umbrella of the charity ‘Al Sadaqah’ for bitcoin money laundering and have solicited cryptocurrency donations via Telegram channels to further their terrorist goals.

But that doesn’t mean that Islamist terrorist groups from the post-Soviet space raised funds precisely through this charity ‘Al Sadaqah’ of al Qaeda, whose accounts were seized by the US Justice Department. It has become a tradition in the Islamic world that charity organizations and foundations widely give to themselves the names ‘Al Sadaqah’ and ‘Zakat’, as the Quranic meaning of these words (Quran 2:43; 63:10;9:103)exactly corresponds to the purposes of “voluntary charity”. Analysis of the finance campaigns of al Qaeda-affiliated Central Asian militant groups demonstrates that they frequently raised cryptocurrency donations through charities called ‘Al Sadaqah’ and ‘Zakat’.

In order to explore the scale of the Central Asian Salafi-Jihadi Jamaats’ crowdfunding campaigns, we analyzed their social media activities where they raised Bitcoins, dollars, Russian rubles and Turkish lira over the past two years.The methods and sources of the Uzbek and Uighur Islamist militants’ crowdfunding campaigns in bitcoins are about the same as those of their parent organizations, the global Sunni terrorist groups ISIS and al Qaeda.Due to the inclusion in the list of terrorist groups, they carry out sophisticated cyber-operations for solicitation of cryptocurrency donations.

Before “mastering” the complex technology of cyber-tools in order to raise bitcoin funds in cyberspace, Central Asian jihadists used the simple ‘hawala’ money transfer system (informal remittance system via money brokers).Sometimes they have resorted to conventional ‘hand-to-hand’ cash transfer channels, where trust, family relationships or regional affiliations play an important role.

The banner requesting to provide Uzbek jihadists with modern military gear and equipment. A screenshot from Telegram, March 3, 2020.

According to a UN report, Central Asian Salafi-Jihadi terrorist group Katibat Tawhid wal Jihad (KTJ), Katibat Imam al Bukhari (KIB) and the Islamic Jihad Group (IJG) leading jihad in Syrian Idlib province have close financial ties with its cells in Afghanistan. The UN Security Council’s Sanctions Monitoring Team states that “regular monthly payments of about $ 30,000 are made to Afghanistan through the hawala system for KTJ.”

The UN report asserts that “similarly to KTJ, KIB sends financial assistance, from its cell in Istanbul, through the hawala system to Afghanistan. Funds are brought in by informal money exchangers for Jumaboi from Maymana, the capital of Faryab. The original source of this income is the smuggling of fuel, food and medicine from neighboring Turkmenistan.”According to the UN report, “suffering material losses, the Islamic Movement of Uzbekistan (IMU)and Tajik militant group JamaatAnsarullah (JA) are forced to engage in criminal activity, including transportation of drugs along the northern route in Afghanistan.”For the Uighur jihadists of Turkestan Islamist Party (TIP) from China’s Xinjiang province operating under the umbrella of Hayat Tahrir al-Sham (HTS) in northern Syria, “funding comes primarily from the Uighur diaspora” in Turkey, Central and Southeast Asia.

Dark Web & Bitcoin: New Endeavor of Central Asian Terrorists

With the development of digital cryptocurrencies as Bitcoin, Central Asian jihadists actively began to exploit this innovative financial transaction system to support their attacks and other terrorist activities. It is known that al Qaeda-backed Salafi-Jihadi groups of the post-Soviet space are seeking to purify Islam of any innovations (Bid’ah) and strictly following the Sharia law. They live similarly to how the Islamic prophet Muhammad and his companions lived in the seventh-century and always oppose any form of Bid’ah, considering it to be shirk and heresy. However, the Uzbek and Uighur Wahhabis did not shy away from using bitcoin innovation.

The first advertisements of Central Asian terrorist groups crowdfunding campaigns accepting bitcoin for Jihadi purposes in Syria appeared on the Telegram channel in 2017. In November of that year, a self-proclaimed charity group al-Sadaqah began a fundraising campaign on the internet from Western supporters to help the Malhama Tactical, the first private military contractor team from Central Asia working exclusively for jihadist groups in Syria.Al-Sadaqah in English on Telegram, explicitly relying on the English-speaking western sponsors, called on them to make bitcoin donations to finance the Malhama Tactical and the Mujahedeen fighting against the Assad regime in northeastern Syria.

As we have previously analyzed, Malhama Tactical is a private jihadi contractor operating in the Idlib-Aleppo region of Syria. The group, founded by an Uzbek jihadist Abu Salman (his real name is Sukhrob Baltabaev) from Osh City of Southern Kyrgyzstan in May 2016, is closely allied with Hayat Tahrir al-Sham (HTS), the strongest militant factions in northern Syria. The Malhama Tactical is known to have regularly conducted military training for jihadists of HTS, Ahrar al-Sham, Ajnad al Kavkaz and the Turkistan Islamic Party.After the death of Abu Salman in August 2019, Ali Ash-Shishani, the native of Russia’s North Caucasus became the new leader of Malhama Tactical.

In 2017-18, al-Sadaqah charity on Telegram called on followers to donate via a “Bitcoin wallet anonymously and safely for the Mujahedeen brothers of Malhama Tactical”. The charity group urged potential cryptocurrency contributions to benefit from “the ability to confuse the trail and keep anonymity”.

We do not know how much bitcoin money al-Sadaqah managed to raise for the activities of the Central Asian Muhajireen. But according to Malhama Tactical’s report on the internet, crowdfunding has been “fruitful.” In an effort to explain how donations were spent, Malhama Tactical has advertised extensively to followers on 17 October 2018, in a video posted on Telegram, that a new training camp had been built and purchased airsoft rifles, night vision devices and other modern ammunitions.

Since 2018, Uzbek and Uighur militant groups KTJ, KIB and TIP have begun an agitation campaign to fundraising bitcoin money on the Internet. Judging by the widespread call for Bitcoin donation online, their need for anonymous, secure, and hassle-free funding streams have made cryptocurrencies of some potential value to them. These properties are the anonymity of fundraising, the usability of remittance and transfer of funds, the security of attack funding, acceptance of funds, reliability, and volume of web money.

And every time they announced a crowdfunding campaign, they clearly declared for what purpose the collected bitcoins would be used. For example, al Qaeda-linked KTJ’s most recent call for bitcoin appeared on Telegram in May 2020 as a banner that asks to “Equip a jihadist”. The poster showed a masked jihadist and the exploitation of the Quran’s Hadith in Uzbek, calling on the believers to prepare and equip a fighter going on a raid for the sake of Allah.

Another picture shows a jihadist with a Kalashnikov AK-74 in his hand, over whose head enemy planes and helicopters fly. The picture gives a symbolic meaning about the empty-handed jihadists in Syria, fighting against the Russian and Syrian powerful military aircraft to protect the Islamic Ummah. Then goes on with KTJ’s call to make donations in bitcoins and rubles to purchasing equipment and ammunition for the Central Asian Mujahedeen in Syria. On the bottom it was displayed the long address of the virtual wallet for Bitcoin donations along with KTJ’s Telegram and web contacts promising the anonymity of potential donors.

On June 18, 2020, KTJ militants published the opinion of the well-known ideologue of modern jihadism Abu Qatada al-Falastini in Telegram from whom they asked whether the crowdfunding campaign of Bitcoin for the purposes of Jihad contradicts Islam. As it is known, there are still ongoing disputes among the world’s top Islamic scholars about whether cryptocurrencies, such as Bitcoin, are deemed Sharia-compliant.

Abu Qatada from a religious point of view justified the acceptability of using Bitcoin to protect the Islamic Ummah and wage holy Jihad, but at the same time warned against full confidence in Bitcoin. In his opinion, the enemies of Islam can destroy this cryptocurrency in the future, and if it loses its current value, and then the devout Muslims who have invested their savings in Bitcoin could go bankrupt. Abu Qatada al Falastini is a greatly respected Salafi thinker among Central Asian jihadists and he gave a pep talk to KTJ when it pledged bayat (Oath of Allegiance) to al Qaeda leader Ayman al Zawahiri in 2015.

On June 25, 2020, KTJ posted another Crypto Crowdfunding campaign announcement on its Telegram channel to provide Uzbek jihadists with modern military gear and equipment. For clarity, the group published a picture entitled “Perform jihad with your property” in Uzbek, which indicates the prices for military clothing and weapons. For example, the AK-47 Kalashnikov assault rifle costs $300, unloading vest for AK-47 cartridges – $20, Field Jacket – $50, Military Combat Boots – $30.In total, $400 will be needed on the full provision of one Mujahid with weapons and uniforms. On the upper side of the picture is a Hadith quote about “He who equips a fighter in Allah’s path has taken part in the fighting.”

A month later, the group’s Telegram channel reported that it had managed to raise $4,000, for which 8 sets of weapons and uniforms were purchased for the Uzbek Mujahedeen. Also, KTJ’s media representative announced that the group is stopping the fundraising campaign for this project.

Other projects of the Central Asian Salafi-Jihadi groups were the Bitcoin crowdfunding campaign for the purchase of motorcycles for Inghimasi fighters (shock troops who  penetrate into the enemy’s line with no intent to come back alive), cameras, portable radios, sniper rifles and night vision devices. For each project, a separate closed account was opened on the website of jihadist groups in Telegram, after which the Bitcoin and Monero accounts, as well as contact information, were closed.

Another crowdfunding project posted on January 29, 2020, in Telegram, called ‘Helping captive Muslim sisters’ and claims to raise money to free Kyrgyz, Tajik and Uzbek ISIS women hold in the al-Hol refugee camp in northeast Syria controlled by the US-backed Syrian Democratic Forces. The KTJ jihadists posted pictures of Central Asian women with their children holding posters “We need help” in Kyrgyz, and asked the fellow Muslim believers to raise money to ransom them from the captivity of the Kurdish communists. It was not clear to us how much money was raised as a result of the crowdfunding campaign since this channel was later blocked by the Telegram administrator.

The annual largest crowdfunding project for the Central Asian Salafi-Jihadi groups is being implemented on the eve of the Muslim holidays of Eid al-Fitr and Eid al-Adha, during which believers pay Zakat (obligatory tax) and Sadaqah (voluntary alms).According to the Quran, recipients of the Zakat and the Sadaqah include the poor and needy, debtors, volunteers in jihad, and pilgrims.

The websites of the Central Asian Jihadist Jamaats revealed that their crowdfunding campaign to raise funds for the jihad was particularly active during Ramadan. Ramadan is known as a holy and generous month, but this year was especially generous to notorious al Qaeda-linked Central Asian extremist groups. KTJ, KIB, Uighur’s TIP and Russian-speaking North Caucasian militant group Liwa al Muhajireen wal Ansar (LMA), that pledged allegiance to HTS, have boosted their military budget during Ramadan.

To avoid the risk of being blocked or tracked, they created a temporary mirror group called ‘Zakat’, where the donation money was received. Zakat’s wallet received donations from Central Asian labor migrants in Russia in the amount of $150 to $220 each time to purchase livestock, which was then slaughtered in sacrificial prayer on behalf of the donors. After Ramadan and the holidays of Eid al-Fitr and Eid al-Adha, the ‘Zakat’ mirror group in Telegram was closed.

The Central Asian Islamist extremist groups have asked their supporters to make Bitcoin donations mainly at the following two virtual wallet addresses:

– 3HoWzYwaBbTg7sKGtHz3pAZxdHZoXUJRvG;

– 12SxsxvrE8zrtRveSeFJYA6sgbJZbyHDGk.

Our analysis confirmed that multiple transactions were made to these bitcoin addresses. In addition, other transactions were made in digital currencies, the addresses of which were blocked on Telegram.

Conclusion

In conclusion, the significance of the crowdfunding campaigns in bitcoin should not be given exaggerated importance, even though they have improved the position of the Central Asian Salafi-Jihadi groups in Syria and Afghanistan, and boosted their budget. Central Asian Salafi-Jihadi terrorist groups’ technical abilities are not currently suited to bypass the financial controls of international counterterrorism organizations and discreetly conduct money laundering.

The history of their activities has shown that small Uzbek, Uighur and Russian-speaking Islamist extremist groups from the post-Soviet space and China have been assimilated with more powerful global Sunni terrorist organizations such as ISIS, al Qaeda and HTS. And accordingly, their potential for crowdfunding campaigns in bitcoin should be viewed through the prism of their global parent organizations.

In any case, the governments of Central Asia and Russia do not have sufficient mechanisms and leverage to combat illegal cryptocurrency transactions on the dark web by global Salafi-Jihadi movements waging jihad in the Middle East. As noted at the beginning of this article, such opportunities to monitor and investigate jihadist crowdfunding activities are available to the US government and financial institutions. For example, the U.S. Treasury“ has access to unique financial data about flows of funds within the international financial and commercial system,” which is invaluable for tracking illicit flows of money.

Consequently, Central Asian governments must rely not only on Moscow but also actively cooperate with Western counter-terrorism and financial institutions to disrupt the Salafi-Jihadi group’s external crypto crowdfunding sources.

Uran Botobekov
Uran Botobekov
Doctor of Political Science (PhD), expert on Political Islam. Modern Diplomacy Advisory Board, Member. SpecialEurasia, Team Member.