The alleged crime is knowingly interfering with a lawful search (by providing a duress password that deleted the phone). Location has nothing to do with it.
(The location was at the port of entry—the border—which is pretty much the definition of the CBP’s jurisdiction.)