A convicted iPhone thief explains how a vulnerability in Apple’s software got him fast cash—and then a stint in a high-security prison
5 min
RUSH CITY, Minn.—Before the guards let you through the barbed-wire fences and steel doors at this Minnesota Correctional Facility, you have to leave your phone in a locker. Not a total inconvenience when you’re there to visit a prolific iPhone thief.
I wasn’t worried that Aaron Johnson would steal my iPhone, though. I came to find out how he’d steal it.
“I’m already serving time. I just feel like I should try to be on the other end of things and try to help people,” Johnson, 26 years old, told me in an interview we filmed inside the high-security prison where he’s expected to spend the next several years.
For the past year, my colleague Nicole Nguyen and I have investigated a nationwide spate of thefts, where thieves watch iPhone owners tap their passcodes, then steal their targets’ phones—and upend their financial and digital lives.
Johnson, along with a crew of others, operated in Minneapolis for at least a year during 2021 and 2022. In and around bars at night, he would befriend young people, slyly learn their passcodes and take their phones. Using that code, he’d lock victims out of their Apple accounts and loot thousands of dollars from their bank apps. Finally, he’d sell the phones themselves.
It was an elaborate, opportunistic scheme that exploited the Apple ecosystem and targeted trusting iPhone owners who figured a stolen phone was just a stolen phone.
Last week, Apple announced Stolen Device Protection, a feature that likely will protect against these passcode-assisted crimes.
Yet even when you install the software, due in iOS 17.3, there will be loopholes. The biggest loophole? Us. By hearing how Johnson did what he did, we can learn how to better secure the devices that hold so much of our lives.
Johnson isn’t a sophisticated cybercriminal. He said he got his start pickpocketing on the streets of Minneapolis. “I was homeless,” he said. “Started having kids and needed money. I couldn’t really find a job. So that’s just what I did.”
Soon he realised the phones he was nabbing could be worth a lot more—if only he had a way to get inside them. Johnson said no one taught him the passcode trick, he just stayed up late one night fiddling with a phone and figured out how to use the passcode to unlock a bounty of protected services.
“That passcode is the devil,” he said. “It could be God sometimes—or it could be the devil.”
According to the Minneapolis Police Department’s arrest warrant, Johnson and the other 11 members of the enterprise allegedly accumulated nearly $300,000. According to him, it was likely more.
“I had a rush for large amounts at a time,” he said. “I just got too carried away.”
In March, Johnson, who had prior robbery and theft convictions, pleaded guilty to racketeering and was sentenced to 94 months. He told the judge he was sorry for what he did.
Here’s how the nightly operation would go down, according to interviews with Johnson, law-enforcement officials and some of the victims:
Pinpoint the victim. Dimly lit and full of people, bars became his ideal location. College-age men became his ideal target. “They’re already drunk and don’t know what’s going on for real,” Johnson said. Women, he said, tended to be more guarded and alert to suspicious behaviour.
Get the passcode. Friendly and energetic, that’s how victims described Johnson. Some told me he approached them offering drugs. Others said Johnson would tell them he was a rapper and wanted to add them on Snapchat. After talking for a bit, they would hand over the phone to Johnson, thinking he’d just input his info and hand it right back.
“I say, ‘Hey, your phone is locked. What’s the passcode?’ They say, ‘2-3-4-5-6,’ or something. And then I just remember it,” Johnson described. Sometimes he would record people typing their passcodes.
Once the phone was in his hand, he’d leave with it or pass it to someone else in the crew.
Lock them out—fast. Within minutes of taking the iPhones, Johnson was in the Settings menu, changing the Apple ID password. He’d then use the new password to turn off Find My iPhone so victims couldn’t log in on some other phone or computer to remotely locate—and even erase—the stolen device.
Johnson was changing passwords fast—“faster than you could say supercalifragilisticexpialidocious,” he said. “You gotta beat the mice to the cheese.”
Take the money. Johnson said he would then enrol his face in Face ID because “when you got your face on there, you got the key to everything.” The biometric authentication gave Johnson quick access to passwords saved in iCloud Keychain.
Savings, checking, cryptocurrency apps—he was looking to transfer large sums of money out. And if he had trouble getting into those money apps, he’d look for extra information, such as Social Security numbers, in the Notes and Photos apps.
By the morning, he’d have the money transferred. That’s when he’d head to stores to buy stuff using Apple Pay. He’d also use the stolen Apple devices to buy more Apple devices, most often $1,200 iPad Pro models, to sell for cash.
Sell the phones. Finally, he’d erase the phone and sell it to Zhongshuang “Brandon” Su who, according to his arrest warrant, sold them overseas.
While Johnson did steal some Android phones, he went after iPhones because of their higher resale value. At bars, he’d scope out the scene—looking for iPhone Pro models with their telltale trio of cameras. He said Pro Max with a terabyte of storage could get him $900. Su also bought Johnson’s purchased iPads.
Su pleaded guilty to receiving stolen property and was sentenced to 120 days at an adult corrections facility in Hennepin County, Minn. Neither Su nor his lawyer responded to requests for comment.
On a good weekend, Johnson said, he was selling up to 30 iPhones and iPads to Su and making around $20,000—not including money he’d taken from victims’ bank apps, Apple Pay and more.
A week after my trip to Minnesota, Apple announced Stolen Device Protection. The security setting will likely foil most of Johnson’s tricks, but it won’t be turned on automatically.
If you don’t turn it on, you’re as vulnerable as ever. Switching it on adds a line of defence to your phone when away from familiar locations such as home or work.
To change the Apple ID password, a thief would need Face ID or Touch ID biometric scans—that is, your face or your finger. The passcode alone won’t work. And the process has a built-in hourlong delay, followed by another biometric scan. This same slow process is also required for adding a new Face ID and disabling Find my iPhone.
Some functions, such as accessing saved passwords in iCloud Keychain or erasing the iPhone, are available without the delay but still require Face ID or Touch ID.
A criminal might still be motivated to kidnap a person with lots of money, then slowly break through these layers of security. However, the protections will likely dissuade thieves who just want to grab phones and flee the scene.
So what loopholes remain? A thief who gets the passcode could still buy things with Apple Pay. And any app that isn’t protected by an additional password or PIN—like your email, Venmo, PayPal and more—is also vulnerable.
That’s why you should also:
The most obvious is Johnson’s advice: Watch your surroundings and don’t give your passcode out.
If this crime has taught us anything, it’s that a single device now contains access to our entire lives—our memories, our money and more. It’s on us to protect them.
—Nicole Nguyen contributed to this article.
Copyright 2020, Dow Jones & Company, Inc. All Rights Reserved Worldwide. LEARN MORE
BNW Developments has established a Sydney presence, joining Arada and Sobha Realty among the growing number of UAE developers pursuing Australian buyers and development opportunities.
The Australian leather house has opened an immersive four-day pop-up in Manhattan, unveiling its Bloom Collection and redefining what a product launch can look like.
Strong family financial planning can help reduce taxes and support younger generations. From intrafamily loans and asset gifts to inheritance disclaimers, strategic cooperation can create meaningful financial benefits—when families have the trust and structure to make it work.
4 min
Happy is the family whose members—parents, grandparents and grown children—trust each other enough to cooperate on shared goals, especially financial ones. When that is truly the case, Uncle Sam’s tax rules can help as well.
This matters especially now that mortgage rates are above 7%, and many families are looking for ways to help younger members. If the elders have resources and are confident younger ones can cooperate, a family loan could make homeownership possible while providing the elders with a useful income stream.
Other strategies can actually lower taxes, such as when funding 529 plans or Roth IRAs, or when someone inherits a traditional IRA with required withdrawals larger than they will need.
Here are three strategies useful for functional families.
It is perfectly legal for families to lend money to a relative for a down payment or even a private mortgage.
But it is important not to cut corners, says Ryan McKeown, a CPA with Modern Wealth Enhancement in Minnesota. If the loan is for a down payment, be honest with the mortgage provider and have a formal agreement. The lender owes tax on the interest payments received.
If the loan is for a private mortgage, both sides should have legal representation with a formal written agreement, including payment terms. The lender owes tax on the interest, and the borrower often can deduct it if he or she itemizes.
To avoid IRS trouble, the interest rate shouldn’t be lower than the agency’s Applicable Federal Rate at the time of the loan. Currently that is about 5% for loans longer than nine years; about 4.5% for loans three to nine years; and about 4% for loans three years or less. Currently, traditional mortgage rates are generally above 7%.
In addition, the lender could use the $19,000 annual gift-tax exemption (described below) to forgive some or all of the interest or principal annually. If both lenders and borrowers are married, that is up to $76,000 a year. There is no tax for the borrower on such forgiveness, because it is from a gift.
If you’re going this route, McKeown advises against having a fixed plan to forgive the debt. Instead, do it in one-off letters specifying the amount—and keep careful records. Otherwise the IRS might try to treat the loan as a taxable gift.
Powerful tax-saving moves for families often use gift-tax provisions. Under current law, anyone can give anyone else up to $19,000 of assets annually, free of gift tax. That means a married couple with three grandchildren could give them a total of $114,000 in 2026.
The gifts can be cash or other assets, like stock. For noncash gifts, the cost basis—which is the starting point for measuring taxable gain after a sale—“carries over” to the recipient. So if someone buys $1,000 of stock and gives it away when it is worth $5,000, the recipient’s cost basis is $1,000. If the recipient later sells the shares for $8,000, the taxable gain is $7,000.
Here’s an example showing how gifts could save a family taxes. Grandma is a widow of modest means, while her child and spouse have prospered. The couple has two children, and they want to contribute $5,000 to a 529 college-savings plan for each—but they need to sell stock to do it. Their tax rate on the sale would be 18.8%, and they would need to sell about $11,000 of stock.
However, Grandma’s federal tax rate on the stock sale is 0%. If the couple gives $10,000 of shares to Grandma, she could sell them, pay no tax, and fund the grandchildren’s 529 plans. This saves about $1,000 of tax.
These moves are legal, and they could be used in other ways, such as to help a young person fund a Roth IRA.
But trust among family members is essential: Under the law, givers can’t put conditions on a gift. Grandma could use her stock proceeds to take a cruise, but she makes 529 contributions instead.
Mark Sellner, a retired tax attorney and CPA living in Sarasota, Fla., uses this strategy. His children sell stock he gives them and fund 529 plans for his grandchildren.
The family’s tax savings aren’t huge, but he likes other benefits. The sales by his children don’t boost his adjusted gross income, which in turn could raise his Medicare Irmaa premiums or his 3.8% surtax on net investment income.
Sellner doesn’t worry about his children using the funds for another purpose.
“There can’t be any strings attached to gifts. Of course, it is up to us to decide whether to make them in the future,” he says.
Two caveats: The “kiddie tax” applies to most children under age 24, and it is levied at the parents’ rate on investment income above $2,700 in 2026. Consider this before making gifts to a young person.
Investors who give away stock also forgo the step-up, an important provision that exempts assets held at death from capital-gains tax.
Sellner knows he’s losing a step-up, but says, “The children could use a little more now. Why should they wait 20 years to get it?”
A disclaimer is a highly useful strategy in which one heir renounces an inheritance in favor of another heir. Assuming family members cooperate, this can save taxes.
Here’s one example. Dad died and had a large traditional IRA that he left to Mom. She has enough assets and income to cover her expenses, and she lives in a state with a stiff estate tax. The inherited IRA would put her estate over the threshold.
Also surviving are three young-adult children. If Mom disclaims all or part of Dad’s IRA within nine months of his death, that amount could go directly to the children. They will have 10 years to empty the account, and the family as a whole will likely save estate and income taxes.
Disclaimers have many key details, especially regarding beneficiary documents. Although heirs have great freedom in choosing what assets to disclaim, the rules about who gets disclaimed property are rigid. It is best if the original owner names tiers of heirs so that if one disclaims, the next recipient is clear.
