
A self-proclaimed crypto scammer has reported the theft of 189 SOL, equivalent to approximately €12.800, while at a beach club in Bali. The incident occurred after he handed his unlocked mobile phone to a group of people he had just met.
The incident at the beach club
Ronnie Magrehbi, known on social media for boasting about carrying out scams like Rug Pull, He claims to have been the victim of the theft of his funds. During a party in Indonesia, he claims he handed his unlocked mobile device to a young woman so she could follow him on Instagram. Upon getting his phone back, he noticed the group had disappeared and his Solana (SOL) assets had been transferred from his mobile wallet to an unknown address. The speed of the Solana network, known for processing transactions in seconds, made the transfer of the 189 SOL irreversible before he could react.
Police intervention and arrests in Bali
After noticing the unauthorized transfer, Magrehbi confronted the suspects and recorded the situation with his device. He then contacted local authorities to report the incident. The operation culminated in the intervention of twelve undercover officers who located and arrested the alleged perpetrators. In videos released from the police station, the complainant insists that they must face legal consequences for not respecting the country's laws, a statement that many social media users have described as ironic given his own history.
The complainant's extensive criminal record
The paradox of this case lies in Magrehbi's own past, who operates under the alias "29" on social media platforms. In January 2020, at just 19 years old, he was charged with armed robbery after assaulting an individual. Later, he faced charges of wire fraud after allegedly hijacking the social media accounts of professional NFL and NBA players to demand ransom payments.
His track record in the crypto ecosystem is equally controversial. In 2025, he sparked outrage by launching memecoins who apparently exploited the image of sick children, later boasting about the rewards obtained at the expense of users who decided to purchase those tokens. Furthermore, he has admitted in interviews to using malware to empty other users' addresses, which adds a layer of moral complexity to their current role as a victim.
The importance of safety and regulation
This incident underscores the critical need to protect personal devices and access credentials. Leaving a phone unlocked with direct access to a financial app exposes assets to unnecessary risks. In a regulated environment under regulations such as MiCA, centralized platforms implement strict security controls, audits, and verification processes to protect users.
To build your portfolio responsibly, it's essential to use platforms that offer high standards of protection and transparency. If you decide buy SUN or other digital assets, make sure to use a secure environment and always maintain control of your credentials by enabling two-factor authentication (2FA) and biometric locks on your applications.
FAQ
How did the theft of funds in Solana occur?
The user handed their unlocked mobile phone to a stranger at a beach club. In that brief moment, a transfer of 189 SOL was made from their custody app to an external address they did not control, resulting in the loss of access to those funds.
What security measures failed in this case?
The main mistake was relinquishing physical control of an unlocked device that contained direct access to funds. Financial applications must be protected with biometrics or additional PIN codes to prevent third parties from authorizing transactions, even if the phone is unlocked.
Where can I learn more about how to protect my assets?
Education is the best tool for managing risk. You can access free resources at Bit2Me Academywhere you'll find detailed guides on best security practices, key management, and how to use your secure exchange to store your assets with peace of mind.
Managing digital assets requires responsibility and common sense, especially in public settings. While blockchain technology offers transparency and traceability, security at the access point—the user's device—remains the most vulnerable link if proper precautions are not taken.
Maintaining device privacy and using additional security layers are essential steps for any user in the crypto ecosystem. Cases like this serve as a reminder that asset custody requires a constant commitment to good security practices and risk management.
Investing in cryptoassets is not fully regulated, may not be suitable for retail investors due to high volatility and there is a risk of losing all invested amounts.


