A privacy feature built for coercive situations has become the act at the center of a federal criminal case. Prosecutors accuse U.S. citizen Sam Tunick of supplying a code that erased his phone while agents were trying to seize it. The case turns a security tool into evidence and then asks whether the attempted seizure was lawful in the first place. The alleged encounter occurred at Atlanta's Hartsfield-Jackson airport on January 24, 2025.
Federal agents detained Tunick and questioned him about alleged child exploitation images, according to The Verge. His lawyers dispute that account of the encounter's purpose. Their motion describes the questioning as a pretext for examining Tunick's connections to Atlanta's Stop Cop City movement. Neither assertion about the investigation's purpose has been adopted as a court finding.
The defense says agents did not show a warrant, would not let Tunick consult a lawyer and failed to advise him of his rights. Prosecutors counter that a warrant was unnecessary because he had not yet been admitted into the United States. That disagreement is not a side issue: it reaches the authority the government says Tunick intended to obstruct.
A Duress Password Does Not Act Like a False Unlock Code
Tunick's phone ran GrapheneOS, a privacy-focused operating system with a duress PIN and password feature. GrapheneOS documentation says entering the configured code at a device-credential prompt will irreversibly wipe the phone and any installed eSIMs. The code can work at the lockscreen or another operating-system prompt that requests device credentials. The project distinguishes PIN entry from password entry and says the process needs no reboot and cannot be interrupted once it begins. A duress code therefore does not open a decoy screen or merely deny access; it triggers deletion.
Prosecutors allege Tunick supplied that code instead of the ordinary passcode requested by agents. If proved, the sequence would connect a human choice to the software's automatic response: the user enters the credential, and the operating system performs the wipe. The government still must establish more than the fact that data disappeared. It must connect the code, the purpose behind entering it and the authority agents were exercising.
This distinction matters beyond one operating system. Security software routinely converts a short user action into a much larger technical result: locking storage, deleting encryption material or removing accounts. A criminal case cannot describe that chain only as something the phone did. It must identify who initiated the function, what that person understood it would do and what government action was under way at the time.
The Word “Lawful” Sits Inside the Charge
The reported charge relies on 18 U.S.C. Section 2232. The provision covers knowing destruction, damage, disposal or other action taken to prevent or impair the government's lawful authority to take property into custody. It allows a prison term of up to five years. The wording makes conduct and intent necessary, but it also places the legality of the government's custody claim inside the offense.
Tunick's suppression motion attacks that point by challenging the detention and seizure. His lawyers say the phone access was sought under false pretenses and that evidence flowing from the encounter should be excluded. The government's warrant argument takes the opposite route, treating the airport encounter as one in which border authority had not ended. A ruling on those positions was not included in the source report.
Intent is a separate unresolved layer. A configured duress password is designed to erase data when a user enters it, but its existence alone does not prove why it was used in a particular encounter. Prosecutors must prove the required purpose; the defense can challenge both that purpose and the authority Tunick allegedly tried to impair. The software documentation establishes the mechanism, not the verdict.
The case is therefore narrower and harder than a debate over whether people should protect their phones. The irreversible wipe is the clearest fact in the sequence. Everything that gives it criminal meaning comes before it: what agents were authorized to do, what Tunick knew and what he intended when the code was entered. If those questions are collapsed into the phone's erased state, a security feature's successful operation becomes a substitute for proving the charge.