Atlantic City Hotels: Own Face Costs Star Hotel Guest $1,250

Full Episode Transcript

Police in Atlantic City say two women held a man down in a casino hotel room. Then they used his own face to unlock his phone. Within minutes, they'd spent twelve hundred and fifty dollars through his Apple Pay.

Trusted by Investigators Worldwide

Run Forensic-Grade Comparisons in Seconds

Detailed facial comparison reports. Results in seconds.

Get Started

7-day refund guarantee**

If you've ever unlocked your phone by glancing at

If you've ever unlocked your phone by glancing at it, this story is about you. That little glance feels like a lock only you can open. It feels safe. This case shows the one situation where that feeling stops being true. Police say the suspects were a middle school teacher and a woman from Cape May. Authorities charged them in October with theft and conspiracy after the robbery at Harrah's in Atlantic City. According to the charges, they restrained the guest and held his phone up to his face. The phone did exactly what it was built to do. So here's the question. If your face is the key, what protects you when someone else controls your face?

Start with how phones usually defend against fake faces. Security engineers call it liveness detection. That's a check that the face in front of the camera belongs to a real, living person. It's not a photo. It's not a video replay. It's not a mask. That check matters, because it's often weak. Testing reported by Biometric Update looked at two hundred and eight smartphones. Roughly two thirds of them could be fooled by a simple printed photo. Newer testing showed some improvement, about thirteen percent better than the year before. Still, plenty of phones fall for a paper picture. Now picture the Atlantic City room. Nobody needed a printed photo. Nobody needed a mask. The real man was right there, so the phone saw a real, live face. The system didn't fail. It worked perfectly. The victim was the one who couldn't say no.

That's the gap security experts keep pointing to. Facial recognition is getting very good at confirming who you are. It has no way to tell whether you're choosing to unlock the phone or being forced to. Apple Pay had the same blind spot. It accepted the face, and it approved the payments. For the people who design these systems, that's a hard design problem. For the rest of us, it means the lock on our phone only protects us from strangers who aren't standing next to us.

The Bottom Line

Is this a one-off? A skeptic could say yes. The scenario is narrow. A man meets strangers, goes to a private room, and gets robbed by people who know how Apple Pay works. The simple lesson, that skeptic says, is to be careful about private meetings with people you don't know. That's fair. It's also true. But the article points to similar schemes in New York City. Victims there were lured away from bars and incapacitated. Then robbers used their faces to open their phones and drain thousands of dollars. Different city. Same method. That looks less like bad luck and more like a playbook.

The technology didn't get tricked. It did its job, and that's the problem. A face lock proves your face is present. It can't prove you're free.

Here's the whole story in plain terms. Two women allegedly forced a man to unlock his phone with his own face, and then they emptied his payment account. The phone wasn't fooled, because the real face was right there. Face unlock protects you from a thief who has your phone. It can't protect you from someone who has you. Whether you're a security pro or you just glance at your phone to check the time, your best protection starts before you're alone with anyone. It starts with trusting that uneasy feeling and keeping an exit plan. The written version goes deeper, link's below.

Atlantic City Hotels: Own Face Costs Star Hotel Guest $1,250

Can someone force you to unlock your phone with your face?