A man boarded an Air France flight at Phoenix Sky Harbor International Airport without a valid boarding pass and refused repeated commands to leave, prompting the captain to deplane passengers before police escorted him off the jet, according to an FBI affidavit filed this week. The man, identified in court records as Qais Ahmad Tillawi, faces federal counts of interfering with flight crew and entering an aircraft in violation of security requirements.
Investigators said the incident unfolded Monday at Terminal 4 ahead of Air France Flight 69 to Paris. The case is drawing scrutiny because it combined a payment fraud alert, a successful trip through the TSA checkpoint and an onboard refusal that forced a full reset of an international departure. Court documents say Tillawi bought a ticket online around midafternoon, but the airline immediately canceled the boarding pass after flagging an unauthorized credit card. Despite that, he cleared security, reached the gate area, and got onto the aircraft. The captain halted departure preparations after crews could not confirm his identity and he declined to comply with instructions in the cabin.
The affidavit describes a sequence in which a gate representative recalled the man holding a passport “unnecessarily close” to her face during check-in while his name didn’t appear on the passenger list. Once on board, he paced briefly in the economy cabin rather than sit. When approached by flight attendants and the captain, he would not speak or provide identification, the filing says. At one point, he typed a message on his phone that read, “Send the USA marshal,” according to the affidavit. The captain then contacted the ground, ordered a deplaning, and asked for law enforcement. Phoenix police boarded and escorted the man off after the cabin was cleared.
Agents later interviewed airline staff, the captain and passengers who reported delays and confusion as the widebody aircraft emptied back into the terminal. The flight had been scheduled to depart around 3:50 p.m. local time. After the removal, officers took the man into custody for questioning and notified federal investigators. The FBI said the captain’s decision to deplane aligned with standard procedures when an unmanifested person is on board and won’t comply. No injuries were reported, and there was no indication of weapons in the cabin based on initial sweeps described in the records.
During a subsequent search tied to the arrest, agents cataloged items they said raised additional concerns about identity and access: multiple credit cards, several driver’s licenses from different states, two passports, and identification-style cards resembling private employee badges. The filing also references a Jordanian military booklet among his possessions. Investigators said they were working to verify whether the documents were authentic, stolen or altered, and to determine how the airline transaction was initiated before the card was declined and the boarding pass canceled.
The filing notes that Tillawi’s brother told investigators about prior mental health struggles and a past detention overseas, details the court characterized as background information rather than part of the charging decision. Prosecutors filed two counts: interference with flight crew, which covers conduct that impedes crewmembers’ duties, and entering an aircraft in violation of security requirements, a charge used when a person boards without meeting federal access rules. A U.S. magistrate judge scheduled an initial appearance following the arrest; detention and counsel rulings are expected in coming days. The government said it would present airport video, gate logs and crew statements at later stages.
Security at Sky Harbor, one of the nation’s busiest airports, relies on a layered system that includes ID checks, electronic verification at checkpoints and secondary checks at gates. In this instance, investigators said a canceled credential did not prevent the man from entering the sterile area. TSA officials were notified after the incident and began a review of how the individual passed the checkpoint. Airlines also conduct final reconciliations between the manifest and those physically on board. The captain’s order to unload the aircraft restarted that process, which often involves a full cabin search and bag matching before reboarding can resume.
Passengers described a tense but orderly evacuation back into the terminal. Some recounted announcements asking for patience while officers boarded the jet. Others said they watched crews confer at the forward galley as the aisle was kept clear. After the man was escorted off, ground staff began the time-consuming work of revalidating documents and reboarding those still eligible to travel. Flight status systems showed a significant delay, and travelers said they received updated departure times once security sweeps were completed. Air France referred questions about the case to law enforcement while confirming that the crew followed company procedures for an unmanifested individual on board.
Investigators are assembling a minute-by-minute timeline beginning with the online purchase, the immediate cancellation triggered by the payment screening, and the man’s arrival at Terminal 4, where records show he abandoned a rental car before entering the checkpoint. Detectives pulled surveillance footage from curbside to jet bridge and collected gate logs showing when boarding groups were processed. The affidavit says a bystander in the waiting area had flagged the man’s behavior as suspicious before boarding, but the report was not relayed to supervisors until after the cabin encounter. Agents seized the phone he used to display messages to the captain and sent it for forensic imaging.
Recent cases around the country have highlighted how breaches or attempted breaches can ripple through airline operations. In one high-profile example last year, a man who evaded screening in Philadelphia was ordered to pay tens of thousands in restitution after a canceled flight and mass re-screening. In Phoenix, authorities emphasized that the Air France crew and police took the safer, slower route: stop, unload, search, and start again. The records filed this week do not specify the total delay or tally the cost of the reset. They also do not indicate that the incident led to cancellations elsewhere in the terminal, though passengers reported crowded gate areas as the international departure paused.
What remains unclear in the Phoenix case is how the man’s canceled pass evaded detection at the checkpoint, how close gate agents came to catching the discrepancy before the jet bridge, and whether any forged or borrowed credentials were used at interim steps. TSA and airline reviews typically produce internal memos on device scans, manual checks and staff decision points. Those findings may inform additional training, software flags, or procedural changes at Sky Harbor and other airports. The court record indicates federal agents requested system logs and plan to interview checkpoint personnel as part of the broader inquiry into access control and identity verification that Monday.
As of Wednesday, federal authorities said Tillawi remained under investigation following his initial arrest, with formal charging documents filed and a preliminary hearing to be scheduled. The FBI said it would continue examining the seized IDs and financial cards, track the origin of the canceled ticket, and analyze the phone for account details, message history and any images used near the gate. Further public updates are expected after the first court appearance and once security-review findings are complete.
Author note: Last updated January 28, 2026.