Prosecutors Say the OpenAI Bugging Suspect Exchanged WhatsApp Messages With a Saudi Royal Who Wanted Him for an AI Initiative - and They Want Him Held Without Bail

The OpenAI conference-room bugging case has taken a turn that prosecutors themselves were careful not to overstate. In a court filing unsealed on Sunday and reported by CNBC, the U.S. Attorney's Office in San Francisco revealed that Abdulrahman Alfozan - the 35-year-old Saudi national and former OpenAI engineer charged with planting a recording device behind a television in an executive conference room - was "in frequent communications via WhatsApp with a member of the Saudi Royal Family" throughout 2025 and 2026, with the last exchange coming on October 5, four days before his arrest.

The content of those messages is what made the filing newsworthy. Prosecutors write that the royal told Alfozan an artificial intelligence initiative was being launched in Saudi Arabia and wanted him to join it. In May 2026, the royal wrote "Saudi needs you more then [sic] the US!" - to which Alfozan replied "100," a response prosecutors read as agreement. The individual repeatedly tried to recruit him and asked when he planned to leave OpenAI; at the time, Alfozan said he would not leave until his stock vested. Significantly, the filing does not allege that the royal directed Alfozan to install the recording device or to steal anything from OpenAI, and prosecutors did not identify the royal or explain how the two knew each other.

The omission matters because the circumstantial texture is loaded. Alfozan is a venture partner at Raed Ventures, a Saudi venture capital firm where Prince Khalid bin Bader Al Saud, a member of the royal family, became a venture partner in 2025; prosecutors did not name the prince or claim the unnamed royal had ties to Raed. The same filing notes that in the days around September 28, when Alfozan allegedly installed the device, "OpenAI executives met with government officials in that very room" - a space used for discussions of highly confidential technical, commercial and strategic information. "Defendant's conduct could pose a danger to the national security of the United States," prosecutors argue in asking a judge to keep him detained without bail at his Monday morning appearance in San Francisco's federal district court.

The flight-risk argument leans on what happened after the arrest. Alfozan's October 9 detention derailed a planned family trip to Saudi Arabia on October 12; prosecutors say the Saudi government, and shortly afterward an unidentified member of the Saudi military, booked separate flights out of the United States for his wife, Lujain Alassaf, and their three-month-old son. On October 10 the two flew business class from San Francisco to Doha, Qatar, on a ticket paid for by the military member. Prosecutors frame this as "considerable support from a foreign government" that has no extradition treaty with the United States; an earlier filing had flagged Alfozan's own one-way ticket to Saudi Arabia for October 12.

The defense tells the same facts differently. Lawyer William Pernik is seeking release with home detention, GPS monitoring and a co-signed bond, writing that "nationality is not evidence of flight" and that the planned travel was for family and immigration reasons. He noted the Saudi Consulate General told U.S. Pretrial Services in writing that it would issue no travel documents to Alfozan during any supervised release. The Saudi embassy in Washington has not responded to press inquiries since the arrest was announced on October 13.

The underlying charge remains narrow: using or endeavoring to use an electronic, mechanical or other device to intercept oral communications, carrying up to five years in prison. What the case has already become is a test of how the American legal system handles an alleged insider threat at a frontier AI lab when the surrounding circumstances brush against a foreign government's recruitment drive - without, so far, any charge of espionage or theft of trade secrets. OpenAI, which says its own models helped identify both the device and the employee who planted it, has said there is no indication Alfozan accessed or exfiltrated model weights, source code or customer data.