How easy is it to steal $10,000 from a locked phone?

Veritasium·7,382,457 views·Apr 15, 2026

Score and analysis

Summary

Derek Muller, with cybersecurity experts Ioana Boureanu and Tom Chothia, demonstrates a sophisticated hack that bypasses iPhone security to steal funds from a locked phone.They reveal how Apple's Express Transit Mode and specific Visa card vulnerabilities allow transactions without user verification, a loophole first disclosed in 2021. The video details the multi-layered technical exploit, including manipulating transaction data and bypassing cryptographic checks, highlighting the specific combination of an iPhone and a Visa card in transit mode as the key enabler.Muller concludes by questioning whether Visa's zero liability policy is sufficient protection, emphasizing the need for technical changes to prevent such vulnerabilities from being exploited.

Starring (2)

i

Derek Muller

Science Communicator · Educator · YouTuber

i

Marques Brownlee

Influencer · Tech Reviewer · Podcaster

8.4

VIDSCORE

Summary

Derek Muller, with cybersecurity experts Ioana Boureanu and Tom Chothia, demonstrates a sophisticated hack that bypasses iPhone security to steal funds from a locked phone.They reveal how Apple's Express Transit Mode and specific Visa card vulnerabilities allow transactions without user verification, a loophole first disclosed in 2021. The video details the multi-layered technical exploit, including manipulating transaction data and bypassing cryptographic checks, highlighting the specific combination of an iPhone and a Visa card in transit mode as the key enabler.Muller concludes by questioning whether Visa's zero liability policy is sufficient protection, emphasizing the need for technical changes to prevent such vulnerabilities from being exploited.

Breakdown

Deep Analysis

8.5

Derek Muller, Ioana Boureanu, and Tom Chothia meticulously break down the hack's three layers of defense bypass, explaining the technical nuances of Express Transit Mode, high-value transaction flags, and asymmetric cryptography.They detail how specific interactions between Visa and Apple systems create the vulnerability, offering a systemic view of the exploit.

Engaging Delivery

8.6

Derek Muller effectively builds tension throughout the demonstration of the hack, from the initial $5 transaction to the $10,000 attempt with Marques Brownlee.The narrative structure, combined with clear explanations from experts and dynamic visuals, keeps the audience invested in the outcome.

Fair & Balanced

8.5

Derek Muller presents the hack with clear demonstrations and expert interviews, while also seeking responses from Apple and Visa regarding their security protocols and the vulnerability.The video acknowledges the limitations and specific conditions required for the hack to succeed, presenting a balanced view of the issue.

Fresh Insights

9.0

Derek Muller, along with cybersecurity experts Ioana Boureanu and Tom Chothia, reveals a sophisticated man-in-the-middle attack that bypasses phone security to steal funds.They demonstrate how Express Transit Mode and specific Visa card vulnerabilities enable transactions without user verification, offering a novel perspective on mobile payment security.

Strong Evidence

8.5

The video relies on direct demonstrations with Marques Brownlee and detailed explanations from cybersecurity experts Ioana Boureanu and Tom Chothia.It references the hack's public disclosure in 2021 and discusses specific technical protocols like RSA encryption, providing a strong foundation for its claims.

Production Quality

7.3

The Veritasium video features clear visuals and audio throughout its 25-minute runtime, with professional animations explaining complex technical concepts.The production team effectively uses graphics and on-screen text to supplement the explanations provided by Derek Muller, Ioana Boureanu, and Tom Chothia.

Clear Takeaways

7.0

Derek Muller concludes by highlighting that while Visa offers refunds, the stress and inconvenience of a $10,000 theft are significant, questioning if this is sufficient protection.He emphasizes that technical changes are needed to prevent such vulnerabilities, leaving the audience with a clear call for better security measures.

Click any metric to see why it scored this way

Starring (2)

i

Derek Muller

Science Communicator · Educator · YouTuber

i

Marques Brownlee

Influencer · Tech Reviewer · Podcaster

Use VidScore on YouTube

Explore scores and profiles while you browse.

Get the Extension