On July 21, a popular crypto personality known online as “29” or @wrss29 claimed that he lost approximately $14,000 worth of Solana (189 SOL) after a group of women at a Bali beach club accessed his unlocked phone.
While this story quickly went viral on X, amassing millions of views, another user published details identifying the victim as Ronnie Magrehbi, a man with a documented criminal record that includes federal fraud charges and an armed robbery arrest.
The original thread described a night of drinking that ended in theft and swift police action. Magrehbi’s account has not directly addressed the identity claims. The episode has sparked widespread discussion in crypto communities about security, irony, and the speed with which online histories surface.
The Alleged Beach Club Theft
According to the July 21, 2026, post by @wrss29, the incident occurred at a beach club in Bali. After his friends left, Magrehbi stayed and socialized with a group of Australian women. He bought multiple rounds of shots. One woman asked to add herself on Instagram. He handed over his already unlocked phone. She kept it longer than expected. Shortly afterward, the women said they were going to the restroom and left.
When he checked his Phantom wallet, 189 SOL had been transferred to an unknown address. He alerted friends and contacted police. The thread claimed that 8 to 12 undercover intelligence officers responded, spread out across nearby venues, identified the group through surveillance-style photos, coordinated positions, and arrested them.
Magrehbi shared short videos showing the club atmosphere, toasts with shots, and later confrontation footage. He stated the women faced possible criminal charges and deportation while he remained out the funds.
The post warned readers never to surrender an unlocked phone to strangers, even for simple tasks like adding a contact. It received strong engagement, with many users sharing personal security tips and criticizing the lack of basic phone locks such as Face ID.
Identity Unmasked on X
Connecting @wrss29 to Ronnie Magrehbi and the earlier alias Ronny Fargo, on July 22, @StarPlatinum_ published a thread including two images: a promotional photo of a young man next to a white Lamborghini labeled as “Ronny Fargo, the E-Commerce Consultant,” and a screenshot of the Bali robbery thread. It listed prior accusations, including Department of Justice charges and crypto rug pulls.
The thread described Magrehbi as one of crypto’s “darkest names” and detailed alleged involvement in account takeovers, extortion, and memecoin scams. Engagement grew rapidly as users cross-referenced the information with older investigations. The post framed the Bali incident against this background, prompting replies that ranged from surprise to pointed comments about karma.
Criminal and Crypto Record
Public records show Magrehbi, from Florida, faced charges in January 2020 at age 19 for armed robbery and burglary in Miami Beach. Police reported that four men in a white Mustang robbed a victim at gunpoint on New Year’s Day, taking a jacket and bag containing cash and a passport. After forcing the victim from the car and fleeing, the vehicle crashed during a police pursuit. Magrehbi and another man were arrested; firearms and stolen items were recovered.
Later in 2020, federal authorities in New Jersey charged Magrehbi with conspiracy to commit wire fraud and conspiracy to commit computer fraud and abuse. Prosecutors alleged he and an associate gained unauthorized access to social media accounts of professional athletes, including an NFL player.
In one case, Magrehbi allegedly obtained control of an Instagram and email account, demanded ransom payments, received funds, and failed to restore full access. Explicit content was reportedly posted as leverage. Court records indicate a guilty plea was entered.
In 2025, Magrehbi’s online activity drew renewed scrutiny in the Solana ecosystem. Investigations linked the “wheres29” and “29” accounts to multiple Pump.fun memecoin launches that referenced real GoFundMe campaigns for children battling cancer.
The pattern reportedly involved impersonating family members, holding spaces to solicit donations, attracting liquidity, and then rug-pulling. Some attributed posts mocked victims or celebrated profits. He has also been connected to a livestreamed rug pull involving an Uber driver and admissions regarding wallet-draining techniques.
Business filings tied the Ronny Fargo name to e-commerce branding attempts. Photo and account history matched across personas.
Reactions and Broader Implications
The overlap between the Bali victim narrative and Magrehbi’s record produced sharp online commentary. Many users highlighted the contrast between his security warning and his alleged history of taking advantage of others. Discussions touched on physical security risks for crypto users, the speed of doxxing-style revelations, and whether sympathy was warranted given prior actions.
Some observers noted that victims of the alleged earlier scams and account takeovers received no comparable dramatic resolution. Others warned against vigilante-style unmasking while acknowledging that the underlying records were public. As of July 23, 2026, no updates have confirmed recovery of the SOL or final legal outcomes for the women arrested in Bali.
The story underscores persistent challenges in crypto. Traders often focus on on-chain risks while overlooking real-world vulnerabilities such as unlocked devices in social settings. Viral personal stories can spread before background checks occur. Once identities link through court documents, news archives, and on-chain patterns, context changes rapidly.
Also read: Solana Co-Founder Defends AI Training on Public Online Content
