What if terrorism were financed with pocket change? What if the challenge was not wanting to see it, but being able to detect it? The sixteenth strategic analysis bulletin published by the Tunisian Financial Analysis Commission (CTAF), covering terrorism financing between 2020 and 2025, offers a blunt conclusion.
Terrorism financing in Tunisia does not look the way it is commonly imagined. No large opaque transfers, no sophisticated offshore networks, no massive money laundering schemes.
The introduction states clearly that the funds come from legitimate sources, salaries, personal income and donations and involve small sums that do not trigger the usual warning signs. The rest of the report confirms this point case after case. It is a crime financed with small change.
A crime without a signature
The bulletin explains that the funds used for terrorism financing are clean at their source. They come from wages, donations or personal savings. This is what distinguishes terrorism financing from money laundering.
Money laundering starts with illicit funds and seeks to make them appear legitimate. Terrorism financing does the opposite: it takes legitimate money and redirects it toward criminal purposes. There are no suspicious traces or irregularities at the origin of the funds.
The modest scale of the sums involved adds another layer of difficulty. The cases highlighted in the bulletin are revealing: an association account receiving a single transfer of 1,000 dinars; another case involving 2,000 dinars sent through fifteen money orders; and another totaling 60,943 dinars received through multiple small transfers. Nothing resembling classic criminal money flows, everything resembling ordinary financial activity.
The paradox of small amounts
This is the heart of the problem. Tunisia’s entire detection system was designed to identify large-scale transactions: thresholds exceeded, abnormal volumes, unusual movements. Terrorism financing, however, operates precisely below those thresholds, hidden within the background noise of routine microtransactions.
CTAF figures illustrate this clearly. Between 2023 and 2025, the most commonly used instruments were cash transactions (29%) and local interbank transfers (23%). The report particularly highlights the frequent use of small-value local bank transfers.
The profile of suspects also reflects this ordinariness. Workers accounted for the largest professional category at 15%, followed by unemployed individuals and homemakers.
The typical suspect was Tunisian (84%) and resident in Tunisia (74%). Terrorism financing, the report suggests, is domestic, modest and diffuse rather than imported or spectacular.
Detection systems therefore face a target that lacks nearly all the characteristics they are trained to identify. This is the central paradox highlighted by the bulletin.
Associations: the discreet link
This paradox is especially visible in the nonprofit sector, which the bulletin repeatedly points to. Among legal entities referred to prosecutors, associations accounted for 26%, tied with international trade activities as the most represented category. Nonprofit organizations appear in nearly all the case studies detailed by CTAF.
The mechanism is simple, which is precisely what makes it effective. Associations naturally receive donations, so incoming transfers do not immediately appear suspicious.
A charity account funded through checks and cash deposits, then used for hotel bookings and travel agencies in high-risk countries, may for a long time appear entirely legitimate. The nonprofit ecosystem provides ideal cover for small transactions, legitimizing and absorbing them into ordinary financial activity.
What the rarity of cases reveals
The scale of the phenomenon remains difficult to assess. Over six years, CTAF transmitted 104 suspicious transaction reports linked to terrorism financing, resulting in 69 formal reports, while overall suspicious activity reporting now exceeds 1,300 declarations annually. Terrorism financing accounts for only 1% to 2% of the total.
This figure can be interpreted in two ways. It may indicate that the threat remains limited. But it may also reflect the difficulty of detecting a phenomenon designed to stay invisible.
If detection systems rely mainly on transaction thresholds, and terrorism financing hides in small-value operations, then the low number of detected cases may reveal as much about the limits of detection as about the scale of the phenomenon itself.
The bulletin openly acknowledges this challenge. It notes that ordinary banking operations, cash deposits, transfers and checks, have become key channels for financing, and proposes concrete warning indicators for financial institutions.
The broader lesson is clear: as long as vigilance remains focused on transaction size, it will struggle against a form of crime that has turned discretion into its primary weapon. That is precisely the issue CTAF seeks to address with this bulletin. Terrorism, it warns, can be financed with small change. The challenge now is learning how to track it.
