A federal charge over a wiped phone and unverified claims of coordinated European messaging have placed a privacy-focused operating system at the center of two separate fights over what users can legally do to protect their own data.
A Privacy OS Caught Between Two Pressure Fronts
Two distinct and unresolved situations are testing GrapheneOS from opposite sides of the Atlantic.
GrapheneOS is simultaneously defending its reputation in Europe and watching a US federal prosecution scrutinize whether its core privacy features cross a legal line.
The two situations are distinct. One involves public allegations the project has made but that remain unverified. The other involves a federal criminal charge against an individual user, with a not-guilty plea and unresolved legal questions about border-search authority.
What GrapheneOS Is Alleging in Europe
GrapheneOS has made serious public allegations about coordinated messaging in Europe, but those claims have not been independently confirmed.
GrapheneOS has publicly alleged, via a Mastodon statement, that a “major state sponsored misinformation and smear campaign” is targeting the project in the Netherlands and Germany. The project claims the campaign misrepresents GrapheneOS by associating it primarily with criminal use.
GrapheneOS also alleges that some European companies misrepresent the OS by conflating it with modified or commercially managed Android devices. Those allegations are attributed here to GrapheneOS and should be read as such: they are the project’s claims, not independently verified facts.
The available reporting does not confirm that any European government has adopted a coordinated policy targeting GrapheneOS. It also does not independently substantiate allegations about specific named companies acting in concert with state authorities. Those questions remain open.
What GrapheneOS Actually Is
GrapheneOS is a legitimate, openly developed operating system, and one of its optional security features is now central to a federal case.
GrapheneOS is an open-source, Android-based mobile operating system built around privacy and security. It runs primarily on Google Pixel hardware.
Its security model includes hardened application isolation, regular platform updates, and optional features. One of those optional features sits at the center of a federal prosecution in the United States.
The Tunick Case: What the Government Alleges
Prosecutors allege that a traveler used a GrapheneOS security feature to delete his phone’s data during a border search, and the charge carries a maximum penalty of five years’ imprisonment.
On January 24, 2025, Samuel “Sam” Tunick was stopped at Hartsfield-Jackson Atlanta International Airport after returning from the Dominican Republic. Prosecutors allege that Tunick entered a passcode on his phone that triggered the device to delete its contents before federal agents could seize the data. Secondary reporting identifies the device as running GrapheneOS, though the indictment refers to deletion of the contents of a Google Pixel and does not name the operating system or use the word “duress.”
Reporting on the case describes the phone’s screen going blank, flashing, and appearing to restart after the passcode was entered. The government has charged Tunick under 18 U.S.C. § 2232(a), a statute that addresses the destruction or removal of property to prevent or impair a lawful seizure. The maximum penalty is five years’ imprisonment.
Tunick has pleaded not guilty. The prosecution’s allegation is not a conviction, and the case remains unresolved.
How the Duress Feature Works
A GrapheneOS duress password is a distinct optional credential that wipes device data instead of unlocking the phone.
A duress password is a separate credential from the ordinary device unlock code. When entered at the credential prompt, it is designed to delete the device’s data rather than unlock the phone.
The feature is optional. Its existence does not establish that GrapheneOS is built for criminal use; that conclusion would require evidence about why specific users activate it and how they use it. Users interested in broader device security practices may also want to review guidance on how to stay safe from physical access threats.
The Legal Arguments on Both Sides
The defense is seeking suppression of evidence, while the government argues that border-search authority applied before Tunick formally entered the country.
Tunick’s lawyers reportedly argue that agents demanded phone access, denied his requests to contact counsel, and lacked lawful authority to conduct the search. They are seeking suppression of the evidence gathered.
The government’s position is that border-search authority applied because Tunick had not yet formally entered the United States at the time of the stop. The central legal question is whether the alleged deletion occurred at a moment when the government’s intended seizure was “lawful” under § 2232(a).
Reporting on the case describes it as an apparent first known prosecution involving this type of phone-wipe feature. This case may become an early test of how that statute applies in this context.
What Remains Unresolved
The European allegations and the Tunick prosecution share a backdrop, but neither thread has reached a settled conclusion.
The two threads share a context: a legitimate, openly developed privacy tool is facing legal and political pressure from multiple directions at the same time. Broader patterns of state-level digital surveillance have emerged in other contexts as well, including reports of a surveillance app built to target political activists, and concerns about apps secretly tracking users without their knowledge.
What is not established matters as much as what is. No court has found Tunick guilty. No independent reporting has confirmed that European governments are coordinating to target GrapheneOS or that specific named companies are functioning as state proxies. Verified evidence that any specific commercial device is intentionally backdoored has not been produced.
GrapheneOS sits at a troubling intersection. A privacy feature designed for users under coercion has become the subject of a federal prosecution, and the project’s allegations about coordinated European messaging remain serious claims without independent corroboration. Both situations deserve scrutiny. Neither is settled.
