Federal Case Against Atlanta Activist Marks First Criminal Prosecution Over Phone-Wiping Duress Password
Samuel Tunick faces federal destruction-of-property charges after wiping his encrypted GrapheneOS phone during an airport border search.
A federal prosecution unfolding in Georgia marks a critical legal test for digital privacy at international borders, as an Atlanta activist becomes the first person charged with a crime for triggering a self-destruct password during a warrantless device search.
Samuel Tunick was indicted under 18 U.S.C. § 2232, a rarely used federal statute that prohibits knowingly destroying or deleting property to prevent its seizure by government authorities. The charges stem from an incident on January 24, 2025, at Hartsfield-Jackson Atlanta International Airport, where Customs and Border Protection officers intercepted Tunick as he returned from the Dominican Republic.
According to court filings, Customs and Border Protection agents directed Tunick into secondary inspection and demanded access to his smartphone. Under the established border search exception to the Fourth Amendment, federal officials assert broad authority to inspect electronic devices brought into the United States without obtaining a judicial warrant. Defense attorneys state that officers denied Tunick access to legal representation and failed to read him his Miranda rights during the interrogation.
When officers requested his passcode, court records state that Tunick provided a sequence that triggered an automated wipe mechanism. The device screen went blank, flashed several times, and rebooted, leaving the hardware entirely stripped of its digital contents before federal agents could inspect the data.
The government’s indictment specifically accuses Tunick of providing a passcode that caused the phone to delete its contents prior to seizure.
The phone was running GrapheneOS, an open-source, security-focused Android variant built for Google Pixel devices. Popular among investigative journalists, security researchers, and privacy advocates—and publicly endorsed by whistleblower Edward Snowden—GrapheneOS introduced a dedicated duress password feature in June 2024. Designed specifically for forced coercion scenarios, entering a secondary code immediately deletes master encryption keys, rendering stored data permanently unrecoverable.
Privacy rights groups, including the Electronic Frontier Foundation, have frequently highlighted how border search rules lag behind modern cryptographic protections. While physical searches at borders have decades of legal precedent, applying anti-destruction statutes to cryptographic deletion presents unprecedented legal questions regarding forced self-incrimination and digital property rights.
This is not the first time GrapheneOS has complicated law enforcement operations; in 2023, court proceedings highlighted the operating system’s ability to resist court-ordered surveillance software. However, Tunick’s case represents the first known effort by U.S. prosecutors to treat cryptographic device wiping during a border inspection as a criminal act of evidence destruction.
Tunick has entered a plea of not guilty to the federal charges. A decision from the presiding federal judge on a defense motion to suppress evidence in the case is expected no earlier than late October.
