Atlanta Activist’s GrapheneOS Wipe at Border Puts Privacy Tools on Trial

Federal prosecutors charged Atlanta activist Samuel Tunick after his GrapheneOS-equipped Pixel wiped during a warrantless border search. The case, tied to Cop City protests, tests whether using a duress PIN equals destroying property to thwart seizure. Experts call it unprecedented. A judge will rule on suppression by October.
Atlanta Activist’s GrapheneOS Wipe at Border Puts Privacy Tools on Trial
Written by Maya Perez

Sam Tunick stepped off a flight from the Dominican Republic at Atlanta’s Hartsfield-Jackson airport. He had spent days whale-watching and relaxing on a friend’s boat. Federal agents waited. They pulled him aside for what they called a routine secondary inspection. Hours later his Google Pixel phone sat blank. Its data gone. Now prosecutors want to send him to prison for it.

The case, unfolding in federal court in Georgia, tests a little-known statute. Title 18, United States Code, Section 2232(a) makes it illegal to destroy property to thwart government seizure. Prosecutors say Tunick handed over a passcode that triggered an automatic wipe. They call it deliberate obstruction. His lawyers call it a constitutional violation dressed up as border security. The dispute has drawn sharp attention from privacy advocates. They see the first known prosecution centered on a specific feature in GrapheneOS.

Border Agents Demand Access

Tunick returned on January 24, 2025. Unbeknownst to him, a Homeland Security agent had circulated his name and photo three hours earlier. The email flagged “suspected terrorism activities.” The reason? His ties to protests against Cop City, the $109 million Atlanta police training center that opened last spring. Local and national groups opposed the project over fears of police militarization and forest loss amid the climate crisis.

Agents moved him to a room equipped with camera and microphone. Questions quickly turned to child sexual abuse material. Tunick’s attorneys later argued this line of inquiry served as pretext. The real target, they said, was his connection to the Defend the Atlanta Forest movement. He asked four times for a lawyer. Each request was denied. No Miranda warning. No warrant produced. Agents insisted they needed no such formalities at the border.

Larry Findley, a Customs and Border Protection officer, testified the team was simply “looking for anything that’s prohibited.” They pressed Tunick to unlock the device. When he provided a passcode the screen went blank, flashed several times and the phone appeared to restart. Data erased. The government later seized the wiped handset anyway.

A motion to suppress filed by Tunick’s federal public defenders lays out these events in detail. CourtListener docket shows the filing argues the detention and search violated his rights. Prosecutors counter that border exceptions permit such inspections. A judge is expected to rule on the motion by late October.

The single-count indictment contains an odd typo: “Untied States Code” instead of “United.” It accuses Tunick of knowingly deleting digital contents “for the purpose of preventing and impairing the Government’s lawful authority to take said property into its custody and control.” Recent filings clarify he did not enter the code himself. He supplied it. Agents typed it in. The phone still wiped.

GrapheneOS offers users the option to set a duress PIN. The code looks ordinary but, once accepted, triggers an immediate and irreversible factory reset with no confirmation dialog. The project, built for Google Pixel hardware, focuses on hardening Android against exploits and surveillance. Its developers emphasize user control over personal data. They do not comment on ongoing legal cases.

Experts who follow digital rights had never encountered this exact charge. “It’s concerning – and sends the message that GrapheneOS is criminal by default,” Christophe Boutry, a cybersecurity and surveillance researcher based in France, told The Guardian. Boutry and Bill Buddington, senior staff technologist at the Electronic Frontier Foundation, both noted the absence of precedent. Boutry added that authorities in France and Spain have begun profiling Pixel users on the assumption they run GrapheneOS. In Catalonia, police reportedly treat such devices as indicators of drug or gang activity.

“The main goal of the operating system is protection of privacy,” Boutry said. “They’re our phones and the state can’t tell us how to use them.”

Marlon Kautz of the Atlanta Solidarity Fund put the stakes plainly. “We all have a right to secure our private data against unconstitutional searches. And we should – especially in a time of rising authoritarianism.”

State prosecutors in Georgia have struggled to convict Cop City opponents. Several cases collapsed. Federal authorities have stepped in with this indictment and another announced last month. The phone wipe sits at the center. Without the data, investigators lost whatever evidence the device once held. Prosecutors now argue the act of erasure itself constitutes the crime.

But what if the duress PIN had never been configured? What if Tunick had simply refused? The border search powers remain broad. Courts have long granted agents latitude at ports of entry that they lack inland. Yet the motion questions where that latitude ends when it collides with the right to counsel and protection from unreasonable seizure.

Privacy tools have grown more sophisticated. Full-disk encryption, remote wipe, hardware-backed keys. Governments respond with demands for passwords and new legal theories. This prosecution reframes a defensive mechanism as offensive obstruction. And it does so against the backdrop of political protest.

TechSpot first reported the charges in detail, noting the unusual focus on the operating system. Its coverage highlighted potential precedent that could chill adoption of hardened mobile platforms. Android Authority followed days later, stressing the duress feature’s design for exactly these high-risk encounters. The July 24, 2026 article quoted court documents showing agents entered the code themselves.

Boing Boing framed the story as agents unwittingly triggering the wipe after a warrantless demand. The site pointed to the indictment’s claim that deleting data to prevent seizure equals felony conduct. Similar discussions spread quickly on X in recent days, with users linking back to the original TechSpot piece and debating border privacy rights.

Tunick has not spoken publicly about the specifics. His legal team focuses on suppression. If the motion succeeds the wiped phone and any statements may be excluded. The government would lose its central evidence. If it fails the case proceeds toward trial on the destruction charge. Either outcome will shape how courts view self-destruct features in the hands of citizens facing state scrutiny.

Broader questions linger. Should border agents be allowed to compel passcodes without probable cause? Does configuring a duress PIN demonstrate intent to obstruct or simply prudent data hygiene? And can an open-source project built for security find itself painted as a tool for evasion?

The answer may not arrive until October. By then the phone will have been powered off for more than a year and a half. Its memory long gone. The legal memory, however, could last much longer.

Subscribe for Updates

InfoSecPro Newsletter

News and updates in information security.

By signing up for our newsletter you agree to receive content related to ientry.com / webpronews.com and our affiliate partners. For additional information refer to our terms of service.

Notice an error?

Help us improve our content by reporting any issues you find.

Get the WebProNews newsletter delivered to your inbox

Get the free daily newsletter read by decision makers

Subscribe
Advertise with Us

Ready to get started?

Get our media kit

Advertise with Us