Robbers Accessed Drugged Gay Men's Bank Accounts Using Their Phones' Facial Recognition

A series of robberies and deaths in New York City involved perpetrators drugging victims at gay bars to incapacitate them. Once the victims were unconscious, the perpetrators used the victims' own faces to unlock their smartphones via facial recognition, subsequently accessing financial apps to steal funds.

Gay men in New York City were drugged by robbers who accessed their phones using facial recognition while they were unconscious to transfer funds out of their bank accounts.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 2 Privacy & Security
  • Primary risk subdomain: 2.2 AI system security vulnerabilities and attacks

The criminals exploited a security vulnerability in the smartphone's facial recognition system, which allowed unauthorized access to the device while the victim was unconscious.

Additional risk subdomains

  • 4.3 Fraud, scams, and targeted manipulation: The perpetrators used the biometric bypass to gain unauthorized access to financial apps and steal tens of thousands of dollars from the victims.

Causal factors

  • Entity: Human
  • Intent: Intentional
  • Timing: Post-deployment

The harm was caused by human criminals who intentionally drugged victims and exploited the deployed facial recognition system to rob them.

EU AI Act risk tier

  • Risk tier: 2 High Risk

High Risk: The incident involves facial recognition technology, which has significant implications for personal safety, security, and fundamental rights, and is explicitly categorized under high-risk applications.

AI system and alleged parties

  • AI system: facial recognition technology
  • AI purpose: Face Recognition; Identification
  • Behaviour type: Tool
  • Alleged developer: Apple
  • Alleged deployer: Apple
  • Alleged harmed parties: Julio Ramirez, gay men in New York City

Harm severity

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Substantial
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Minor, indirect Negligible
  • Financial: direct Minor, indirect Negligible
  • Environmental: direct Negligible, indirect Negligible
  • Malicious content: direct Negligible, indirect Negligible
  • Differential treatment: direct Minor, indirect Minor
  • Civil rights: direct Minor, indirect Negligible
  • Democracy: direct Negligible, indirect Negligible
  • Privacy: direct Minor, indirect Negligible
  • Psychological: direct Negligible, indirect Minor
  • Epistemic: direct Negligible, indirect Negligible
  • Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Physical

Reported: The report explicitly describes severe physical harm, including multiple fatalities and physical illness from drugging.

Directly caused: N/A

Indirectly caused: Two men, Julio Ramirez and John Umberger, died from drug overdoses administered by the perpetrators to facilitate the robbery. Other survivors experienced severe physical symptoms including vomiting and uncontrollable eye spasms.

Inferred additional harm: It is highly likely that other victims suffered physical harm or non-fatal overdoses from being drugged that were not officially linked to this pattern of crimes.

Property

Reported: The report explicitly describes the theft of physical property.

Directly caused: Perpetrators stole physical property including smartphones, wallets, identification cards, watches, and cash from the victims.

Indirectly caused: N/A

Inferred additional harm: Other victims likely had personal belongings and mobile devices stolen during similar unrecorded attacks.

Financial

Reported: The report describes multiple incidents of financial theft totaling over $80,000, with an average loss of approximately $10,000 per reported occurrence.

Directly caused: Perpetrators stole $20,000 from Julio Ramirez, over $20,000 from John Umberger, $2,000 from a March 2020 survivor, $2,000 from a May 14 survivor, $25,000 from a December survivor, and $11,000 from a July survivor, averaging about $10,000 per occurrence.

Indirectly caused: N/A

Inferred additional harm: Total financial losses are likely much higher when accounting for other unreported or unlinked victims of the same robbery crew.

Differential treatment

Reported: The report explicitly describes targeted attacks against a specific demographic group.

Directly caused: The perpetrators specifically targeted gay men at popular LGBTQ+ nightlife venues in New York City.

Indirectly caused: Victims faced skeptical treatment and bias from police officers who initially dismissed their accounts as voluntary drug use or irresponsible partying.

Inferred additional harm: N/A

Civil rights

Reported: The report explicitly describes severe violations of fundamental human rights.

Directly caused: The incidents violated the victims' right to life (resulting in two deaths) and the right to security of person through forced drugging and robbery.

Indirectly caused: N/A

Inferred additional harm: Other victims likely suffered similar violations of their basic civil and human rights.

Privacy

Reported: The report explicitly describes severe violations of personal privacy.

Directly caused: Perpetrators violated the victims' privacy by bypassing facial recognition to access their personal smartphones, private emails, iCloud accounts, and financial applications without consent.

Indirectly caused: N/A

Inferred additional harm: Other victims likely had their highly sensitive personal data and private accounts compromised.

Psychological

Reported: The report describes psychological distress and fear spreading through the community.

Directly caused: N/A

Indirectly caused: The incidents caused widespread fear, anxiety, and a sense of vulnerability within the NYC LGBTQ+ community. Survivors also experienced trauma from being drugged, violated, and robbed.

Inferred additional harm: Widespread long-term trauma and anxiety among patrons of gay bars in the affected neighborhoods is highly likely.

People affected

  • Occurrences reported: 8
  • People reportedly harmed: 8
  • People reportedly exposed: 8

Potential causes

Technology

  • Flawed Biometric Authentication: Facial recognition allowed access to the device while user was unconscious.
  • Lack of Multi-Factor Security: Financial apps opened immediately without secondary PIN or password checks.

Data Inputs

  • Unconscious Biometric Input: The system accepted facial input data without verifying active consciousness.

Human Factors

  • Physical Incapacitation: Victims were drugged, preventing them from stopping unauthorized phone access.

Process and Methods

  • Insecure Password Reset Process: Attackers changed iCloud passwords using only the unlocked phone device.
  • Deficient Fraud Prevention: Apps allowed immediate draining of accounts without flagging anomalous activity.

Regulatory Environment

  • Inadequate Law Enforcement: Police initially dismissed the tech-facilitated robberies as simple overdoses.

Information quality

  • Classification confidence: High
  • Reason for confidence: The reports from reputable news organizations provide consistent, detailed accounts of the crimes, the specific mechanism of exploiting facial recognition, and the financial and physical harms suffered by the victims.
  • Ambiguities identified: The specific brand or model of smartphone and the exact technical implementation of the facial recognition (e.g., whether attention detection was enabled) are not explicitly named.
  • Alternative interpretations: The incident could be viewed purely as a physical crime (drugging and robbery) where facial recognition was incidental, but the systematic exploitation of the biometric unlock is central to how the financial theft was executed.

A series of localized robberies in New York City involved criminals drugging victims to bypass smartphone facial recognition security and steal funds. While resulting in tragic fatalities and targeted community victimization, the incident is a domestic criminal matter with minor national security implications, highlighting consumer biometric vulnerabilities rather than state-level threats.

  • Overall national security impact: Minor
  • Response level: Moderate
  • Scope: Single nation
  • Primary target: United States
  • Alleged perpetrator: Local criminals

Threat characteristics

  • Imminence: Long-term. This represents a localized criminal tactic and a consumer technology vulnerability rather than an imminent national security crisis.
  • Autonomy: Human-controlled. The facial recognition system acted strictly as a static biometric verification tool, with no autonomous decision-making or planning capabilities.
  • Novelty: Evolved capability. Represents an evolution of traditional theft where criminals exploit the physical state of victims to bypass increasingly common consumer biometric security systems.

Impact by dimension

  • Physical security: Negligible. The incident involves localized criminal poisonings and robberies, with no threats to critical infrastructure, military systems, or national-scale physical security.
  • Information security: Negligible. No classified systems, intelligence assets, or state-level information operations were involved or compromised.
  • Sovereignty: Negligible. The incident did not impact government decision-making, elections, or state sovereignty; it was handled as a local law enforcement matter.
  • Economic security: Negligible. While victims suffered individual financial losses totaling over $80,000, there was no impact on strategic industries, national financial systems, or technological competitive advantage.
  • Societal stability: Minor. The crimes targeted a specific demographic (gay men) and exploited biometric security, violating individual privacy and civil rights, but the impact remains manageable within standard local law enforcement procedures.
Explore in the interactive Incident Tracker