TLDR
A crypto industry veteran says a stolen iPhone led to approximately $14,000 in losses after thieves accessed his cryptocurrency and financial accounts.
The incident highlights how an unlocked smartphone can expose several accounts through a single point of access.
The victim says securing his accounts immediately would have been more useful than chasing the thief.
A stolen iPhone became the starting point for hours of financial damage for Magnus Ahmad, a former cryptocurrency executive whose experience highlights a vulnerability beyond exchanges and blockchain protocols: the device people carry every day.
According to sources, Ahmad lost approximately $14,000 after thieves took his unlocked iPhone outside a bar in London’s Hackney neighborhood. His cryptocurrency wallets, payment cards and trading account were subsequently targeted.
The case illustrates how the damage from phone theft can extend far beyond replacing the handset. When financial services and account recovery tools sit on the same device, losing control of that device can create several problems at once.
For cryptocurrency users, Ahmad’s experience raises a practical security question: how much financial access should a phone provide during an ordinary night out?
Stolen iPhone Opens the Door to Multiple Financial Accounts
The theft occurred shortly after 1 a.m. on August 8, following what Ahmad described as an extended social encounter with two men who appeared friendly.
He told CoinDesk that the men had spent time talking with him earlier in the evening. Looking back, he believes they watched him enter his phone’s passcode on several occasions.
Outside The Dolphin pub, one of the men offered to enter his contact details into Ahmad’s phone. Ahmad handed over the unlocked iPhone 14 Pro Max, and a third man grabbed it and ran.
Ahmad pursued the thief but was unable to recover the device. Meanwhile, the financial consequences were already developing.
By 1:53 a.m., cryptocurrency was being converted and transferred from his MetaMask wallet, according to the report. His Phantom and Bybit accounts were also accessed.
By 3:22 a.m., six unauthorized card transactions had been completed. Ahmad said these included more than $2,000 in purchases at convenience-store chain Costcutter.
The attackers also accessed his eToro account and opened leveraged cryptocurrency positions representing nearly $44,000 in trading exposure. That figure was not a withdrawal: the positions produced additional trading losses and costs.
Ahmad’s estimated $14,000 total included approximately $9,500 in cryptocurrency, nearly $3,000 in unauthorized card charges and more than $800 in eToro losses and costs.
His larger bank balances and other cryptocurrency holdings remained intact after he froze cards and regained control of key accounts.
The stolen iPhone incident also left unanswered questions. Ahmad suspected that the thieves remotely locked his MacBook through his Apple account, but the cause of the laptop becoming unusable was not independently established.
Crypto Security Extends Beyond the Wallet
The broader lesson is that cryptocurrency security also depends on the everyday devices used to access funds.
Ahmad’s account describes a physical theft followed by unauthorized account activity. It does not establish that the underlying wallet services or trading platforms suffered a breach.
Other cases have exposed different weaknesses in the devices and software crypto holders trust. Bitcoinist previously reported on a crypto scammer who lost approximately $4.8 million in stolen Bitcoin after reportedly placing funds in compromised hardware wallets. Although the circumstances differ, that incident also illustrates how device security can affect control over digital assets.
Software downloads present another route to account compromise. In separate coverage of crypto theft involving malicious game mods, Bitcoinist detailed Kaspersky’s warning about malware disguised as gaming add-ons and cracked applications. The campaign targeted sensitive information, including credentials and cryptocurrency wallet data.
Together, these cases highlight how physical access, compromised hardware and malicious software can each expose cryptocurrency holdings.
For Ahmad, recovering control became an hours-long struggle. He told CoinDesk that chasing the thief cost time he could have spent securing his accounts from another device.
Apple’s guidance for a stolen iPhone recommends marking the device as lost as quickly as possible. Lost Mode locks the device, while Stolen Device Protection requires Face ID or Touch ID to turn Lost Mode off when that protection is enabled. Apple also warns users against removing a stolen device from Find My, because doing so removes Activation Lock.
Victims should also contact their financial institutions and mobile carrier and report the theft to police. Securing the device can help limit further exposure, but it does not guarantee the recovery of stolen cryptocurrency.
Ahmad now says he takes an older iPhone with a separate Apple account and fewer apps when going out. His approach reduces the number of services accessible through the device he carries.
The remaining concerns extend beyond money. Photographs of identity documents stored on his phone could create a continuing risk of identity fraud.
His experience leaves crypto holders with a clear consideration: protecting funds requires attention to the phone, account access and recovery arrangements—not only the wallet where assets are held.
