Feds Bust Alleged ISIS Crypto Plot Involving Drones, RPGs and $2,000 Transfers

Federal authorities say they disrupted an alleged ISIS crypto scheme before it could turn into real-world violence, arresting three U.S. citizens accused of coordinating extremist support, online threats, and more than $2,000 in crypto and cash transfers.

• Three arrests in Kansas and California
• Material support to ISIS charges filed by federal prosecutors
• More than $2,000 moved through crypto and cash
• Drones, RPGs, and attacks on U.S. servicemembers allegedly discussed

The Department of Justice says Bisaam Ghafoor, 21, Elias Shamsaldeen, 21, and Bereen Dzayee, 25 were arrested in connection with a conspiracy to provide material support to ISIS. In plain English, that means federal prosecutors believe the men allegedly helped a terrorist group with money, planning, or resources — the kind of charge that carries serious prison time and, if proven, a very ugly meaning.

According to prosecutors, the alleged scheme ran from at least February 2025 through June 2026. During that period, the men allegedly used Discord chats, voice calls, encrypted apps, and other online platforms to coordinate activity, pledge allegiance to ISIS and its leader, discuss travel outside the United States, and talk about violent attacks against American personnel.

That’s not just obnoxious internet cosplay. Prosecutors appear to believe this was active planning, not empty chest-thumping from keyboard cowards with a fetish for chaos.

What prosecutors say happened

Federal investigators say the group moved more than $2,000 in crypto and cash to someone they believed was tied to ISIS. That money was allegedly meant to help buy weapons, drones, and rocket-propelled grenades, or RPGs.

One reported exchange involved putting Ghafoor’s name on a drone. Another allegedly discussed using drones against U.S. Special Forces. If that sounds like the plot of a low-budget terrorist fever dream, that’s because it is — except federal prosecutors say the digital trail showed enough intent to justify arrests.

The arrests were carried out in Kansas City, Kansas, San Diego, California, and Sacramento, California. The investigation involved FBI field offices in Kansas City, San Diego, Sacramento, Richmond, and Newark, showing how quickly these cases can spread across jurisdictions when the evidence lives online.

“Three U.S. Citizens Allegedly Discussed Violent Attacks and Tried to Develop a Cryptocurrency Scheme to Buy RPGs and Drones to Attack U.S. Servicemembers”

That quote captures the heart of the matter: prosecutors say the men weren’t just talking about extremism, they were allegedly trying to build a funding mechanism around it.

How crypto allegedly fit in

The crypto angle is going to grab headlines, but it needs to be handled carefully. This was not some giant laundering operation, and it was not a proof-of-concept for a “Bitcoin-funded caliphate” or whatever dumb fear-mongering headline a lazy outlet might spit out by lunchtime.

The reported amount — just over $2,000 — is small in the context of global terror financing. But small-dollar transfers can still matter when they’re used to buy equipment, travel, or early-stage supplies. A drone, a weapon, or transport costs money. Crime does not need a seven-figure budget to be dangerous; sometimes all it needs is a few bad actors, a group chat, and enough funding to get moving.

Crypto’s role here appears to be as one tool among several. The alleged communications took place on Discord and encrypted messaging apps, while the value transfer used crypto and cash. That combination is exactly why law enforcement keeps a close eye on digital finance and private communications: not because crypto is evil, but because it can move value quickly across borders with less friction than traditional banking.

That is the tradeoff. The same qualities that make Bitcoin and other cryptocurrencies useful for legitimate users — censorship resistance, borderless transfer, and reduced dependence on banks — can also be abused by criminals, scammers, and extremists. Freedom tech is freedom tech. Sometimes the assholes get there too.

Why “material support to ISIS” matters

“Material support” is a broad federal term that covers providing money, resources, logistics, or other assistance to a designated terrorist organization. It does not require a successful attack to have happened. If prosecutors can prove the defendants knowingly helped an outlawed group, the charge itself is enough to bring a major federal case.

That matters because modern terror investigations often focus on the point where rhetoric turns into logistics. Talking trash online is one thing. Discussing weapons, funding, targets, and travel is something else entirely. When encrypted chats, voice calls, and small-money transfers start lining up with violent intent, federal agencies tend to take the gloves off.

Law enforcement also leans heavily on digital breadcrumbs: account ties, metadata, device records, message timing, and the financial trail left behind by even modest crypto and cash transfers. Encrypted apps can make the process harder, but they do not make it impossible. They just force investigators to work smarter instead of pretending a bad guy is going to confess on Instagram.

What officials said

Acting Attorney General Todd Blanche said the arrests stopped a plot before anyone was hurt. FBI Director Kash Patel said the bureau moved to stop the suspects before any attack could happen.

“the arrests stopped a plot before anyone was hurt”

“the bureau moved to stop the suspects before any attack could happen.”

Those comments are what you’d expect from a federal takedown: blunt, confident, and meant to signal that the government believes it intervened before the situation became physically lethal. If the allegations are accurate, that intervention likely matters a great deal.

Why this matters for Bitcoin, crypto, and privacy

This case is a useful reminder that crypto is not some magical purity machine. It does not turn everyone into a saint, and it does not stop bad people from doing bad things. The technology is neutral; intent is not.

Critics will point to this and say, “See, crypto enables crime.” Sometimes they’re right — but only in the shallowest sense. Email enables fraud. Cell phones enable extortion. Cash enables bribery. None of that means the underlying technology is the cause of the crime. It means the technology is useful, and useful tools get abused.

Still, the abuse is real. Bitcoin and other digital assets can be moved faster and more privately than money through a conventional bank. That makes them attractive not only to activists and dissidents living under harsh regimes, but also to people who would happily use a toaster if it helped them fund violence. Pretending this side of crypto does not exist is childish. So is pretending every illicit use somehow invalidates the entire space.

The harder question is how much surveillance is too much. Privacy tools protect innocent users from overreach, data hoarding, and arbitrary financial gatekeeping. But those same tools can also shield criminal coordination. That tension is not going away. It’s the price of building open systems in a paranoid age.

For Bitcoin, the lesson is familiar: decentralization is a feature, not a bug. But decentralization does not come wrapped in moral approval. It enables freedom, yes. It also enables bad behavior. That’s not a reason to abandon the tech. It’s a reason to keep the conversation honest instead of turning every report into either a hype cycle or a smear campaign.

Key questions and takeaways

What are federal prosecutors alleging?
They say three men conspired to provide material support to ISIS, including discussing attacks on U.S. servicemembers and helping fund weapons-related planning.

Who was arrested?
Bisaam Ghafoor, Elias Shamsaldeen, and Bereen Dzayee.

How was crypto allegedly used?
Prosecutors say more than $2,000 in crypto and cash was moved to someone believed to be linked to ISIS, allegedly to help buy weapons, drones, and RPGs.

What platforms were used?
According to investigators, the men used Discord, voice calls, encrypted apps, and other online platforms.

Why does this matter for crypto?
It shows how digital assets can be used in illicit financing schemes, even if the amount involved is relatively small.

Does this mean crypto caused the crime?
No. The alleged crime is extremist violence and terror support. Crypto was allegedly one tool used in the scheme, not the root cause.

What’s the bigger takeaway?
Privacy and censorship resistance are powerful features, but they can be exploited. The challenge is defending freedom tech without pretending bad actors don’t exist.

The ugly truth is simple: modern extremist plots do not always look cinematic. Sometimes they look like group chats, encrypted messages, small transfers, and a handful of idiots trying to turn online fantasy into real-world harm. Federal authorities say they stopped this one before it crossed that line. Good. That’s exactly the kind of line that should be drawn hard.