On 30 September, passengers and crew aboard a flydubai flight to Tel Aviv with 182 people stopped an alleged hijacking attempt mid-air. The co-pilot, identified by multiple media outlets as Hammam al-Hammami, an Omani national, allegedly attacked the Indian captain Smit Machchhar with a crash axe. The UAE prosecutor general has characterised the incident as a terrorist attack. The Wall Street Journal has reported the critical upstream failure: Oman had previously barred al-Hammami from flying over concerns he had adopted extremist views. Rather than grounding him permanently, Oman Air moved him to an administrative role. He was subsequently hired by flydubai, the UAE-based budget carrier, apparently without that flag preventing employment in a cockpit. RMIT University in Melbourne confirmed on Monday that al-Hammami had been enrolled but "did not successfully complete an engineering qualification." He arrived in Australia on a student visa granted in 2014, commenced studies in 2015, left in 2017, and had his visa cancelled in 2019 after authorities confirmed he was no longer enrolled. The Victorian Joint Counter Terrorism Team — comprising the AFP, Victoria Police, and ASIO — is now investigating his links to Australia. Court records show that several Australians charged with terror offences or suspected of Islamic extremism studied at RMIT around the same period as al-Hammami, though there is no indication he knew any of them. A British institution, Buckinghamshire New University, confirmed he completed a distance-learning course in aviation management there but undertook no pilot training at the university. The structural question is not about any single institution. It is about the absence of a functioning cross-border vetting pipeline for commercial pilots. Oman flagged the risk. That flag did not propagate to flydubai's hiring process. Australia's visa system operated on enrolment status, not security intelligence. Britain's university processed a distance-learning student. Each node performed its own narrow function; none communicated laterally. flydubai suspended its Dubai–Tel Aviv route after the attack. The Omani co-pilot and the Indian captain were taken to the UAE, which is leading the investigation with participation from Israel and other countries. The airline declined further comment, citing the ongoing investigation. The incident exposes a gap that regulation has not closed: commercial aviation treats pilot credentialing as a licensing and training question, not a security intelligence question. When a sovereign government bars a pilot for extremism, that information must reach every airline that might subsequently employ him. It did not. The 182 people on that flight paid the cost of that gap.
