On July 21st, a well-known figure in the crypto world nicknamed “29” (or @wrss29 online) reported losing around $14,000 worth of Solana tokens – about 189 SOL – after someone at a Bali beach club gained access to his phone while it was unlocked.
The story spread rapidly on X, gaining millions of views, but another user soon revealed the victim’s identity as Ronnie Magrehbi. Records show Magrehbi had a history of criminal activity, including charges of federal fraud and an arrest for armed robbery.
The story began with a night of drinking that led to someone getting robbed, and the police quickly responded. While Magrehbi shared what happened that night, they haven’t confirmed or denied claims about their identity. This incident has caused a lot of conversation within the crypto world, focusing on online security, the unexpectedness of it all, and how easily past information can be found online.
Show
The Alleged Beach Club Theft
From what I’ve gathered, looking at the July 21, 2026, post by @wrss29, the incident happened at a beach club in Bali. Apparently, after his friends departed, Magrehbi continued socializing with a group of Australian women and bought several rounds of drinks for them. One of the women asked to follow him on Instagram, and he handed her his phone – which was already unlocked. She held onto it for a surprisingly long time, and then she and the other women said they were going to the restroom and left shortly after.
I was robbed of around $14,000 worth of Solana (SOL) at a beach club in Bali. What followed was so strange I wouldn’t have believed it if it hadn’t happened to me. The night ended with the involvement of plainclothes intelligence officers, arrests, and a police interrogation. Here’s what happened…
— 29 (@wrss29) July 21, 2026
As an analyst, I’ve been following a case where someone reported 189 SOL being drained from their Phantom wallet to an unidentified address. They immediately notified friends and the police. What’s particularly interesting is the claim circulating online: that 8 to 12 plainclothes intelligence officers were deployed to the area, located the individuals involved using what appeared to be surveillance photos, coordinated their movements, and then made the arrests. It’s a pretty detailed account, and we’re currently working to verify these claims.
Maghrebi posted brief videos of the nightclub scene, including people making toasts and eventually a heated argument. He said the women involved could face legal trouble and be sent home, while he claimed to be left without any money.
As an analyst, I’ve been following a recent post that really resonated with users. It cautioned against handing your unlocked phone to anyone – even for something as small as adding a contact. The post sparked a lot of discussion, with people sharing their own security advice and expressing frustration that more phones don’t have simple, built-in security like facial recognition. It really highlighted how vulnerable people feel and the need for better basic security measures.
Identity Unmasked on X
On July 22nd, @StarPlatinum_ shared a thread linking @wrss29 to Ronnie Magrehbi, who previously used the name Ronny Fargo. The thread included a promotional photo of a young man with a white Lamborghini, identified as “Ronny Fargo, the E-Commerce Consultant,” and a screenshot of a discussion about a robbery in Bali. The post detailed previous allegations against him, including charges from the Department of Justice and accusations of running crypto scams (rug pulls).
You’ve likely heard about the trader who lost around $14,000 worth of Solana (SOL) while in Bali. But there’s a much bigger story behind this incident. It involves a controversial figure in the crypto world, known as “29” on Twitter, who has a problematic history.
— StarPlatinum (@StarPlatinum_) July 22, 2026
A recent online discussion identified someone named Magrehbi as a major figure in cryptocurrency scams and malicious activity. The post outlined accusations of account hacking, blackmail, and fraudulent memecoin schemes. As users compared this information with previous reports, the discussion gained traction. This context was then linked to a recent incident in Bali, sparking a range of reactions from shock to comments about justice being served.
Criminal and Crypto Record
In January 2020, 19-year-old Magrehbi of Florida was charged with armed robbery and burglary in Miami Beach, according to public records. Police say he was part of a group of four men who robbed someone at gunpoint on New Year’s Day, stealing a jacket, cash, and a passport. The robbers forced the victim out of their car and then crashed while being chased by police. Magrehbi and another man were arrested at the scene, and authorities recovered both weapons and the stolen goods.
In late 2020, federal officials in New Jersey accused Magrehbi of conspiring to commit wire fraud and hacking. They claim he and another person illegally accessed the social media accounts of several professional athletes, including one from the NFL.
I recently came across a case that really shook me up. Apparently, someone hacked into an Instagram and email account, then demanded money to give access back. They actually *received* the ransom, but didn’t fully restore access – can you believe that? To make things even worse, they reportedly posted explicit content to pressure the victim. It looks like the hacker pled guilty, which is good to hear, but it’s a scary reminder of the risks out there in the crypto space and beyond.
As a researcher, I began focusing on Magrehbi’s online behavior in 2025, particularly within the Solana ecosystem. My investigations revealed connections between the accounts “wheres29” and “29” and several new memecoins launched on Pump.fun. Disturbingly, these coins appeared to be referencing actual GoFundMe campaigns created for children fighting cancer.
The scam typically worked by pretending to be a victim’s family member, creating online spaces to collect money, building up interest, and then disappearing with the funds – a practice known as a ‘rug pull’. Some online posts linked to the scam even appeared to make fun of those who lost money or bragged about the profits made. This individual was also involved in another scam, broadcast live, that targeted an Uber driver, and admitted to methods used to empty people’s digital wallets.
Records show Ronny Fargo was connected to efforts to create brands for online businesses. Photos and online accounts linked these different identities together.
Reactions and Broader Implications
The story of the Bali attack victim quickly spread online, sparking intense debate when details about Magrehbi’s past surfaced. Many people pointed out a contradiction between his warnings about security and accusations that he had previously exploited others. The discussions covered various topics including safety concerns for cryptocurrency users, how quickly personal information was revealed, and whether or not he deserved support considering his history.
People pointed out that previous victims of similar scams and hacked accounts hadn’t seen such a clear resolution. While some cautioned against publicly identifying individuals involved, they admitted the information was already publicly available. As of July 23, 2026, there’s been no confirmation that the stolen cryptocurrency has been recovered, nor any final legal decisions regarding the women arrested in Bali.
This story highlights ongoing problems in the cryptocurrency world. Traders tend to worry about risks within the blockchain itself, but often miss simpler, real-world security threats – like phones or computers being left unattended where others can access them. Personal incidents can quickly go viral online before anyone has a chance to verify the facts. And once someone’s identity is confirmed through public records, news reports, and their activity on the blockchain, the situation can change very fast.
2026-07-23 14:15