U.S. and Israeli intelligence uncovered a credible Iranian plot to shoot down President Trump's aircraft as he left the NATO summit in Ankara, prompting a covert operation that smuggled the president off Air Force One in a catering truck.
The operation, carried out on July 8, 2026, at Ankara's Esenboğa Airport, involved secretly transferring Trump from the legacy Air Force One to a smaller C-32A military jet while the presidential aircraft flew home as a decoy, with senior Cabinet officials, White House staff, and the entire traveling press corps still aboard. The decision came roughly four to five hours before Trump's scheduled departure, after intelligence indicated an Iranian terror cell had entered Turkey carrying a man-portable air-defense system and had obtained specific details about the president's movements in the country.
Only a handful of people on the original plane knew what was happening. Reporters were told to keep their window shades closed for the duration of the flight. The decoy Air Force One's transponder was turned off after takeoff, and both aircraft received F-35 fighter jet escorts, an unusual step for a plane not carrying the president, and one designed to make the ruse convincing.
The threat was not abstract. The New York Post reported that an unidentified individual was spotted with a shoulder-launched rocket near the NATO summit site. Separately, U.S. intelligence learned that Iranian operatives had tracked down the specific hotel floor where Trump was staying, a level of operational detail that elevated the threat assessment well beyond routine concern.
The intelligence came from both American and Israeli sources. National Review cited Wall Street Journal reporting that U.S. and Israeli intelligence had uncovered a threat by Iranian proxies "to launch a lightweight, shoulder-fired missile at Trump's plane as he departed Ankara." The weapon in question, a Manpad, or man-portable air-defense system, is a shoulder-fired missile launcher capable of bringing down low-flying aircraft during takeoff or landing, when planes are slowest and most exposed.
That vulnerability mattered more than usual because of the aircraft Trump was flying. The legacy Air Force One carries advanced antimissile countermeasures built into its airframe over decades of upgrades. But the newer Qatari-donated Air Force One, which Trump had been using, lacks the same defensive capabilities, a gap multiple briefed officials have confirmed. ABC News had previously reported that Trump was advised not to take the Qatari-gifted jet to Turkey at all, given escalating tensions with Iran.
Trump told reporters the switch was straightforward. He said he was sending the newer plane to a United Kingdom base so service members could tour it, a cover story that held until the Washington Post broke the news of the covert operation weeks later.
The mechanics of the transfer were blunt. Trump was moved from the legacy Air Force One into an airport catering container, the kind of boxy, elevated truck used to load food onto commercial aircraft, and driven across the tarmac to the waiting C-32A. The C-32A is a military version of the Boeing 757, smaller and less conspicuous than the iconic blue-and-white 747 that the world recognizes as Air Force One.
Defense Secretary Pete Hegseth was the only Cabinet member who flew with Trump on the C-32A. Secretary of State Marco Rubio and Treasury Secretary Scott Bessent remained aboard the decoy Air Force One. Both Rubio and Bessent were aware of the switch and understood the threat, the Washington Examiner reported. They stayed on the larger plane deliberately, their presence helped maintain the illusion that the president was aboard.
The decoy plane took off without a call sign before assuming the "AF1" designation mid-flight, even though Trump was not on it. That detail, reported by Fox News, underscored the lengths to which the Secret Service and military went to sell the deception. F-35 escorts flanked both aircraft, adding another layer of protection, and another layer of theater.
The traveling press corps, sealed inside the decoy with their window shades drawn, had no idea the president was gone.
When Trump addressed the operation publicly, he framed it as a matter of following orders from the people responsible for keeping him alive. The New York Post quoted the president directly:
"I go by Secret Service and the military. They wanted me to go in a different flight, a different plane for safety. They wanted me to do it, so I did it. I did what they said."
A senior administration official with firsthand knowledge of the operation told ABC News's Jonathan Karl that Trump took the whole thing in stride. "He loved it," the official said.
The president also acknowledged the broader threat environment in characteristically direct terms. Speaking to reporters, Trump referenced the people behind the plot: "You're probably on a dangerous flight because of the sleaze bags that we have to deal with."
White House Communications Director Steven Cheung confirmed the seriousness of the situation without disclosing operational specifics. "There are many enemies of America who have their sights on him, and we use every tool at our disposal to address those threats," Cheung said.
The Iranian regime's hostility toward the Trump family is not new. Tehran has publicly targeted the president and his family with propaganda and threats for years, driven by U.S. military strikes against Iranian targets and the broader pressure campaign Trump has waged against the regime.
For all the operational detail that has emerged, significant gaps remain. No public accounting has been given of how many individuals made up the Iranian cell, whether any were apprehended, or whether the shoulder-fired missile was recovered. The intelligence that Iranian operatives had pinpointed Trump's hotel floor raises its own questions, chiefly, how that information was obtained and whether the breach has been closed.
The covert plane switch in Turkey also exposed a security vulnerability that the administration has been slow to resolve. The Qatari-donated Air Force One was rushed into presidential service without the full suite of defensive countermeasures that protect the older aircraft. That gap, between the plane the president was flying and the protection it could actually provide, is what made the Ankara operation necessary in the first place.
Trump has since confirmed that security upgrades to the newer aircraft are underway. But the fact remains that the president of the United States had to be smuggled off his own plane in a food truck because the aircraft he was using could not defend itself against a threat that U.S. and allied intelligence had already identified.
The broader security posture around the president has drawn renewed attention in the weeks since the Ankara incident became public. The Secret Service and military executed the deception flawlessly, no shots were fired, the president arrived home safely, and the ruse held for more than a month before reporters pieced it together.
That is the good news. The bad news is that it had to happen at all, and that Iran's proxies got close enough to force it.