DW Documentary (2026) ¦ Searching for Clues: Donations for Terrorism?

Germany’s money trail to conflict zones – Why terrorism financing remains hard to prove

Between 2023 and 2026, investigators and prosecutors in Germany have repeatedly confronted the same uncomfortable reality: despite high-profile raids, arrests, and sophisticated financial-tracing tools, bringing people to conviction for financing Islamist terrorism remains unusually difficult. The story emerging from a lengthy federal trial in Düsseldorf, first investigated in mid‑2023, exposes the practical, legal, and technological fault lines that allow funds to flow from European donors to armed groups and displaced communities in Syria and beyond.

How small sums add up – crowdfunding, micro-donations and social media

The modern financing model for Islamist groups relies heavily on small donations aggregated through social media, messaging apps and, increasingly, cryptocurrencies. Investigators describe micro-donation campaigns as a modern form of traditional crowdfunding: many donors give modest amounts, but the aggregate can be substantial and continuous. Channels on social media and similar platforms are used to solicit funds under the guise of humanitarian appeals, orphan sponsorship, or emergency relief. The legal and practical challenge is that many of these individual contributions are innocuous on their face, and proving criminal intent or that the funds reached an armed group is difficult once they cross porous transfer points.

Informal transfer systems – how hala and hawala bypass banks

A major enabler of cross-border flows to conflict zones is the hala or hawala system, an informal trust-based banking network with deep roots in the Middle East. While hala provides a legitimate remittance service for diaspora communities, its informal nature – account settlement based on trust rather than actual physical transfers, minimal records, and reliance on personal networks – makes it an attractive channel for people seeking to move money without leaving an audit trail. In Germany only a small fraction of hala operators apply for formal authorization; most operate illegally and deliberately destroy transactional records, creating near‑insurmountable evidentiary gaps for prosecutors.

Bastian Schwind-Wagner _Follow

"Terrorism financing exploits gaps in law, informal transfer systems, and emerging technologies to move both small and large sums with minimal traceability. Effective disruption requires combining sharper legal tools with real‑time financial and digital intelligence to link donors, channels, and end‑recipients.

Policymakers must balance civil liberties with stronger obligations on platforms and informal remittance operators to preserve evidence and report suspicious flows. Improved international cooperation, crypto‑forensics capacity, and targeted legal reforms will make prosecutions more achievable and reduce the funding lifelines of extremist networks."

Legal thresholds and evidentiary gaps – the courtroom problem

The Düsseldorf trial highlights a central legal hurdle: German criminal law requires prosecutors not only to show that money was transferred, but to prove it reached a prescribed terrorist organization and was intended to support criminal acts. Paragraph 129a section 5 and related provisions demand a chain of proof linking donor, transfer, recipient, and the recipient’s membership in or use of funds for terrorist activities. Defense strategies emphasize the thinness of the evidence in many cases – for example, that a transfer to Turkey was for charitable purposes or that a recipient’s membership in an armed group is unproven. Even sophisticated indicators such as text messages or receipts can fall short of the probable‑cause standard required for conviction. The net result is that many investigations do not progress to indictment, and only a handful of financing cases reach convictions.

Technological change – both opportunity and obstacle

Cryptocurrencies add a complex dimension. On one hand, crypto transactions are often traceable in real time on public blockchains, providing investigators with rapid intelligence about account balances, transaction flows, and wallet linkages. This has enabled successful tracing in cases where funds moved through transparent chains. On the other hand, terrorists and their facilitators have shifted toward privacy coins and advanced mixing techniques – such as Monero and Zcash or layered swaps and private wallets – deliberately designed to obscure transaction provenance. These developments create a cat‑and‑mouse dynamic: investigative tools can be powerful against transparent crypto flows, but as operators adopt privacy-enhanced instruments, proving a link between a donor’s funds and a militant organization becomes harder.

The human logistics problem – cash couriers, smuggling and camps

Where formal transfer services or crypto fail, money still moves physically. Cash couriers remain essential for delivering larger amounts into territories without functional banking systems. Smugglers and trusted couriers take personal risks, but their existence reflects the simple fact that many conflict zones still lack reliable financial infrastructure. Inside displaced persons camps and areas formerly controlled by Islamist groups, hala offices and clandestine transfer points distribute small sums for daily needs while larger sums are smuggled in, sometimes through breaches in camp perimeters. These physical networks are difficult to monitor and even harder to document legally.

Regulatory and platform responsibility – where law falls short

Investigators argue that the current regulatory framework leaves dangerous blind spots. Digital platforms and intermediaries – social media, messaging apps, and online donation sites – are not generally required under EU law to proactively monitor content or transactions for signs of terrorist financing unless an imminent physical threat is explicit. The Digital Services Act limits blanket monitoring obligations, which means platforms often act only after referrals or when a clear, narrow threat is identified. Financial institutions have mandatory reporting requirements and supervised controls; investigators want similar obligations for large digital intermediaries so that suspicious fundraising linked to terrorism would trigger timely cooperation and evidence preservation.

Reform proposals – criminalizing attempts and aligning with international models

German authorities have sought legal reforms to make prosecution more feasible. One proposal from the Justice Ministry would criminalize attempts to send money with the intention to support terrorism and extend provisions that focus on the purpose behind transfers rather than requiring proof of fund delivery. More far‑reaching observers point to the U.S. material support statutes as a model: a strict liability approach that criminalizes providing even seemingly minor assistance to designated organizations. Adopting comparable rules in Germany and across the EU would reduce the evidentiary burden on prosecutors but raises complex questions about civil liberties and the definition of lawful humanitarian support.

Case studies – Gaza now and the Austrian fundraiser

Recent investigative wins show both the possibilities and limits of current tools. Investigators traced a large online fundraising operation that used QR codes and crypto wallets to collect millions of dollars in small donations, some allegedly channeled to Hamas. Crypto analytics provided a near real‑time trail that helped link the fundraiser to sanctioned entities and prompted arrests and sanctions in multiple jurisdictions. Yet even in this high-profile example, the fundraiser changed platforms and used layered financial conduits, illustrating how resilience and adaptability among financiers prolong the cycle of investigation and prosecution.

Practical implications for compliance and enforcement

For compliance officers, the lesson is twofold:

1. monitor for patterns consistent with micro-donation campaigns and repeated small transfers toward atypical endpoints;
2. bolster cooperation with digital platforms and crypto analytics providers to preserve ephemeral evidence.

Law enforcement agencies must invest in cross-border crypto tracing capabilities and in regulatory tools that compel better cooperation from non‑bank intermediaries.

For policymakers, the imperative is to recalibrate legal standards so that intent and reasonable linkage to terrorist purposes can be prosecuted without requiring near‑perfect proof that funds physically reached an armed actor.

Conclusion – an evolving battlefield where money is the target

Terrorist financing has become a hybrid problem of law, finance, technology, and social behavior. Informal trust networks, micro-donations enabled by social media, and the twin edges of cryptocurrency together make detection and prosecution complex. Germany’s experience shows that raids and arrests, while necessary, are not sufficient: legal reform, platform accountability, improved financial investigation tools, and international cooperation are all needed to close the gaps. Until law and enforcement adapt more quickly than the financiers, the money supply will remain a vulnerable lever that extremist networks can exploit.