The filing reached the docket in San Francisco federal court on Friday evening, three days before a hearing on whether Abdulrahman Alfozan waits for trial in custody. The argument inside it turns on a detail that has followed the case since his arrest: a one-way airline ticket to Saudi Arabia, booked for himself, his wife and a relative, departing from San Francisco.
Alfozan, 35, has been in federal custody since October 9, when FBI agents arrested him on a charge of intercepting oral communications. He asked the court on Friday to release him, and denied that he intended to leave the country. His lawyer, William Pernik, said the trip had been arranged before the federal investigation began, and that his client buys one-way tickets as a matter of habit so he can change his return date without paying a change fee.
Prosecutors described the bookings as evidence of a plan to leave. The complaint unsealed after his arrest lays out the case: a device found in an executive conference room at OpenAI’s San Francisco offices, video of Alfozan near that room, and a search history that reads like a shopping list for a listening device.
The charge is a single count carrying a maximum of five years in prison and a $250,000 fine. Prosecutors have not filed additional counts, and a complaint is an allegation rather than a finding. Alfozan has not entered a plea. His detention hearing is set for Monday before U.S. Magistrate Judge Alex G. Tse, who will weigh whether any conditions can keep him in the Bay Area until trial.
The device was discovered on September 30. According to the complaint, OpenAI staff found it inserted into a USB port on the back of a television in a conference room used for meetings about confidential technical, commercial and strategic matters, including government engagements and commercial relationships. It had been wrapped in toilet paper, and its contents were encrypted. Investigators concluded it had been installed about two days earlier, on September 28.
Alfozan joined OpenAI as an engineer in July 2025 and had no authority to enter that room or to attend the meetings held in it, according to the complaint. Closed-circuit video showed him near the conference room on multiple dates in September, which the government says is inconsistent with his lack of authority there.
The preparation described in the filing is what gives the case its shape. Between mid-August and mid-September, an account tied to Alfozan queried a workplace productivity tool about building addresses, meeting-room calendars and where external partners usually meet. Between September 24 and September 30, a chatbot account associated with his wife asked how to build a continuous audio recorder, customize its Wi-Fi connection, improve live listening and encrypt an SD card. The same account asked about the device’s custom header and its unique network address on the two days before it was installed.
On October 5, according to the complaint, Alfozan entered the conference room and appeared to look behind the television. Later that day he left a bag in another room, which security staff opened; inside were a second recording device of similar design, his wallet and his identification.
OpenAI said it found no indication that the employee accessed or removed model weights, source code or customer data, and that it used its own models to analyze the device. The company terminated his contract. Its statement is narrower than the government’s framing: the charge concerns recorded speech, not stolen technology.
That framing has been louder than the statute. The U.S. attorney for the Northern District of California described the case as a matter of national security, and the FBI director called the protection of American AI research one of the bureau’s highest counterintelligence priorities. Both statements were issued with the complaint, before any evidence had been tested in court.
The gap between the rhetoric and the charge is the thing defense lawyers will press. A wiretap count is a serious felony, but it is not an espionage charge, and it does not require the government to prove what was done with the recordings or who, if anyone, was meant to receive them. Alfozan’s lawyer said the allegations are out of character for a man who came to the United States as a young person, was educated here and has held permanent resident status since 2020.
Detention hearings are decided on two questions: whether the defendant poses a danger, and whether he will appear. Judges in the Northern District have released defendants facing comparable charges on conditions including home detention, electronic monitoring, passport surrender and a secured bond. In cases the government labels a national security matter, and where the defendant has ties abroad, magistrates have been less willing to accept them.
The ticket is the fact that makes release harder. A defense explanation that a one-way fare is cheaper or more flexible is plausible for a frequent traveler, and implausible enough to a judge that it may not survive without corroboration such as prior itineraries and booking records. The complaint already places the purchase before the arrest, which supports the defense’s timeline without answering the question of intent.
The case sits where two trends cross. AI laboratories hold information that governments treat as strategic, and they employ workforces drawn heavily from abroad, with access that is broad because the work requires it. Insider risk programs at those companies have grown accordingly, and the tools described in the complaint are the same assistants the companies sell.
What Monday’s hearing will produce is a decision about custody, not about guilt. If Alfozan is released, the case proceeds toward indictment and a trial that may take a year. If he is detained, his lawyers will appeal to a district judge, and the one-way ticket will be argued over again in a courtroom where the standard is risk rather than proof.
