Federal Prosecutors Charge Man After GrapheneOS Phone Wipes During Airport Search

A federal case in Atlanta raises constitutional questions as prosecutors argue a privacy-focused mobile OS was used to destroy evidence during a warrantless airport search.

A federal case unfolding in Atlanta is drawing sharp attention from privacy advocates and legal experts — and it all started with a phone that wiped itself at an airport screening.

According to TechSpot, the U.S. Department of Justice is prosecuting Atlanta resident Sam Tunick under a federal statute that criminalizes destroying property to prevent its seizure. The "property" in question: data on a Google Pixel running GrapheneOS, the open-source, security-hardened Android fork designed by the GrapheneOS project.

The incident dates back to January 24, 2025. Tunick was stopped for questioning at Hartsfield-Jackson Atlanta International Airport after returning from the Dominican Republic. Federal agents had circulated his name internally under a "suspected terrorism activities" flag tied to his alleged association with the movement against Atlanta's Cop City project. During secondary screening, agents repeatedly asked him to unlock his phone. When he finally provided a passcode, the screen went blank, flashed several times, and the phone appeared to restart — wiping its data, according to defense filings.

Prosecutors are now treating the wipe as intentional evidence destruction. Tunick's defense argues the search itself was unconstitutional: agents allegedly denied his requests for a lawyer four times, never presented a warrant, and failed to read him his rights. A motion to suppress the evidence is pending.

A legal first. Experts say this may be the first time the destruction-of-property statute has been aimed at an operating system. "It's concerning — and sends the message that GrapheneOS is criminal by default," said Christophe Boutry, a cybersecurity and surveillance expert. Bill Buddington, senior staff technologist at the Electronic Frontier Foundation, told TechSpot he had not seen a similar case.

The case sits at the intersection of border search powers and digital privacy. U.S. courts have historically granted authorities broad search latitude at international airports, but this prosecution could set a precedent for how privacy-focused software is treated under the law.

On Hacker News, the story drew 878 points and over 675 comments, with discussion centering on the legality of compelled biometric unlocks, the distinction between device encryption and evidence destruction, and whether GrapheneOS's duress-passcode feature — which can be configured to wipe a device — could be construed as criminal intent.

A judge is not expected to rule on the suppression motion for several weeks.

Sources: TechSpot, Hacker News