GrapheneOS Duress PIN Case Reveals DHS Search Motive
A Privacy Feature Meets a Federal Charge
An ordinary privacy feature has led to a threat of five years in prison. New court documents also point to a different reason for the search than the one officers first gave.
US authorities stopped activist Samuel Tunick at the Atlanta airport. They said they were looking for child sexual abuse material. The records now show that suspicion of terrorist activity prompted the search instead.
What the Court Documents Show
404 Media revealed the new details on October 20. The court file includes internal US Department of Homeland Security (DHS) correspondence from January 2025. An officer of Homeland Security Investigations warned border agents in advance that Tunick was arriving. The officer asked them to send him for additional screening.
A Terrorism Notice, Then a Different Story
The internal notice said Tunick was being checked over alleged terrorist activity. Agents received his photo and flight details. They also received orders to seize his electronic devices, along with the passwords.
During questioning, however, officers from US Customs and Border Protection (CBP) spoke about another crime. They told Tunick that they planned to search his phone for illegal material involving children.
Defense Challenges the Search
Tunick’s lawyers argue that the abuse claim served as a pretext to examine his devices. At a hearing, CBP officer Larry Findley admitted he had no grounds to suspect Tunick of holding such material.
The defense now seeks to exclude the evidence from the search. The documents confirm suspicion of terrorism. They do not prove that the activist took part in any such activity.
The Duress PIN at the Center of the Case
The conflict centers on a Google Pixel running GrapheneOS. Border agents demanded that Tunick unlock the device. According to the prosecution, he entered a special code that triggered a data wipe.
Prosecutors believe he destroyed the contents on purpose, which blocked a lawful seizure of the phone.
How a Duress PIN Works
GrapheneOS lets users set a Duress PIN for situations of coercion. Instead of granting access, the system permanently erases user data, encryption keys, and installed eSIMs. Nobody can stop the process after the code goes in.
Protecting a phone during a seizure is a scenario the developers designed for. It does not exploit a vulnerability.
What Is at Stake
Tunick faces up to five years in federal prison. The charge concerns the alleged deletion of data. It does not concern terrorism or possession of illegal material.
The defense disputes the legality of the search and of the border agents’ actions. The trial continues, and the question of admissible evidence remains open. The outcome could shape how the law treats the protective features of smartphones during forced searches.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
