What happened
On August 21, 2026, the 421C departed Arkansas International Airport (BYH) in Blytheville, Arkansas, on an IFR flight to Lima, Ohio, with four people aboard. The pilot was 73.
The airplane had been fueled at Blytheville. The pilot told investigators he did not specifically request 100LL; he asked only for a top-off. The fueler said he assumed the airplane needed Jet A, because pilots who wanted 100LL at that airport usually used a nearby self-service pump. He added about 70 gallons to the right wing and 75 to the left — roughly 145 gallons of what he called "pre-mixed Jet-A."
The receipt showed Jet A. The pilot signed it, and told investigators he read it after fueling and saw that Jet A had been supplied. He also said he did not inspect or sump the fuel afterward, because the group "wanted to get home" — so they "got in the airplane and left."
Shortly after takeoff, the No. 1 cylinder on the right engine began running hot. The pilot leveled at 5,000 feet and troubleshot, but the temperature kept climbing. He shut down the right engine, feathered the propeller, and headed for Fulton Airport (1M7), Kentucky. Then the left engine began to deteriorate. Unable to hold altitude, he made a forced landing in a cornfield about two miles from the airport.
The right engine mount, fuselage, and empennage were substantially damaged. The pilot and one passenger were seriously injured; the other two had minor injuries. A first responder sampled fuel from one tank with a paper towel and reported it had no color and smelled like diesel.
What the NTSB found
In the Board’s words: "The National Transportation Safety Board determines the probable cause(s) of this accident to be: The misfuelling of the airplane by the refueler. Contributing to the accident was the pilot’s failure to verify that the airplane had been properly fueled prior to departing on the accident flight."
- The order never contained the one fact that mattered. The pilot asked for a top-off without stating the grade. The fueler’s choice came from a local habit, not from the order, the aircraft, or a confirmation.
- The paperwork was right, and it changed nothing. The receipt correctly showed 145 gallons of Jet A. The error was not hidden; it was in the pilot’s hands before engine start.
- The physical check was skipped. No fuel sample was taken after fueling.
- The engines told the story in sequence. One cylinder ran hot, that engine was shut down, then the second engine failed on the same fuel from the same tanks.
- The airport’s fix came afterward. The airport manager said the fueler no longer worked there and the airport had begun creating a form for pilots to specify fuel type and quantity.
(NTSB Final Report ERA26LA314, Cessna 421C N28RH, August 21, 2026; published October 1, 2026. Case facts are drawn from the report and its public docket.)
This has happened before. In 2014 at Las Cruces, New Mexico, a Cessna 421C air-ambulance flight lost both engines on initial climb after being fueled with Jet A. The pilot was present during fueling and signed a ticket showing Jet A; all four aboard were killed (NTSB CEN14FA462, cited in Safety Alert SA-051). Same airplane type, same signed receipt — a different outcome only by luck.
Why this matters to operators who "don’t fuel their own airplanes"
Most small operators do not own a fuel farm. Fueling happens to the airplane — at home by a local FBO, away from base by strangers, often at night, in weather, on a schedule. That makes it a classic SMS blind spot: a safety-critical task done by someone else’s employee, under someone else’s procedures, that the operator’s manual never mentions.
But the risk does not transfer with the task. The Board’s contributing factor named the pilot’s verification, not the FBO’s training. Read the case as an interface problem: two organizations each held half of the defense, and neither half was written down. The fueler worked from a habit. The pilot worked from a signature. The space between them was empty.
That seam is exactly what a small SMS closes — with paper so light it fits on an index card.
The barrier map
Accidents rarely happen because one thing failed. They happen because every layer that could have stopped the sequence was missing, weak, or pointed elsewhere.
| Barrier | What the record shows | What a small SMS adds | Part 5 component |
|---|---|---|---|
| The fuel order | "Top off" — quantity implied, grade never stated | A standard order that always states grade and quantity, spoken and read back | Safety risk management |
| The fueler’s selection | Grade chosen from local habit | Grade confirmed against the order and the aircraft, never inferred — on both sides of the hose | Safety risk management |
| The receipt | Correctly showed Jet A; read and signed; no action | Receipt checked as a verification document — grade, quantity, tail number — before engine start | Safety assurance |
| The fuel sample | No sample after fueling | Mandatory post-fueling sample — color, smell, clarity, water — whenever fuel is added | Safety risk management |
| Time pressure | The group "wanted to get home" | A written rule: a ground discrepancy stops the clock; pressure after a discrepancy is a reportable hazard | Safety policy + safety promotion |
| The interface | The airport’s fuel-order form came only after the accident | The operator’s own fueling standard, carried in the airplane — the barrier travels with the aircraft | Safety risk management |
| Checking the system | No record of anyone tracking fueling discrepancies | Three numbers, tracked quarterly | Safety assurance |
Not one layer required new equipment. Each is a sentence someone could have written down — and the most important one takes about ninety seconds.
The SMS lesson (Hank’s teaching layer)
1. An assumption is not an order
Pilots read back clearances from their first lesson. Then they walk up to a fuel truck and place the vaguest order in aviation: "top it off" — a quantity with no grade in it. Treat the fuel order like a clearance, because it authorizes someone to put into your aircraft the substance that decides whether the engines run. Say the whole thing, every time, in the same order: aircraft, engine type, grade, quantity. "Cessna 421, piston twin — top off with 100LL, both mains." Then have the fueler read it back. A wrong read-back catches the accident at the cheapest moment it will ever offer. It costs nothing, and you don’t need any airport to print a form first.
2. The receipt is a safety document, not a bill
The most uncomfortable sentence in this report is not about the fueler. It is that the pilot read the receipt, saw Jet A, and departed. The information barrier worked; the action barrier did not. So build the action into the procedure: signing a fuel receipt ends a check, not a purchase. Three items — grade (does it match what this aircraft burns?), quantity (does it match the order and the gauges?), aircraft (is this your tail number?). If any item disagrees, the flight does not depart until it is resolved — and "resolved" never means "explained away." A wrong grade on a receipt is not a billing error. It is a stop.
3. Get-home-itis is a hazard with a name — put it in the register
Unnamed hazards get handled by mood. Schedule pressure at the end of a long day does its damage precisely at verification steps, because that is when they feel optional. Write it down as a known hazard with a standing control. Hank’s version: any discrepancy found on the ground — fuel, paperwork, weather, a gauge that looks wrong — resets the departure. When the rule is written before the trip, nobody has to win an argument with themselves on the ramp.
4. The last check belongs to the pilot — and it takes ninety seconds
However good the order and however careful the fueler, one barrier is entirely in the pilot’s own hands and travels everywhere the airplane goes: the fuel sample. After fueling, draw from each tank and look at what is in the cup. 100LL is dyed blue; Jet A is colorless to straw-colored and smells of kerosene. Two cautions: a top-off mixes new fuel with what was already in the tank, and the NTSB warns that a Jet A/avgas mix can still look like avgas. So check color and smell, and read the sample together with the receipt. A first responder made the same observation after the accident with a paper towel. Defense in depth is not a slogan; it is four small habits stacked — order, read-back, receipt, sample.
5. Your vendor’s habit is not your procedure
The fueler’s assumption was a local system speaking: at that airport, avgas customers usually self-served, so a request at the truck usually meant Jet A. Local habits are invisible to visitors. Operators who buy services — fueling, ground handling, deicing, contract maintenance — tend to assume the vendor’s SMS covers the task. It covers the vendor’s task. Your exposure begins where their procedure ends. So write the one line your operation owns — our pilots state the grade, confirm the read-back, check the receipt, and sample the fuel, at every fueling, at every airport — and the barrier exists at fields you have never visited.
6. Fix the process, not just the person
The record states the fueler no longer worked at the airport. It also states the durable change: a form that makes the next order specific. Only one of those protects the next airplane. If the lesson is "remove the person," the process that produced the error waits for the next new hire and the next busy evening. If the lesson is "the order was ambiguous, so orders are now written," the fix survives every staffing change. Ask the second question first: what in our process made this error easy to make and hard to catch?
The fueling standard, sketched
One page, laminated, kept with the aircraft documents next to the route cards from Issue No. 4.
The order (spoken, every time):
The confirmation: the fueler reads the grade back before the cap comes off. No read-back, no fuel.
After fueling, before engine start — the pilot checks:
- Receipt: grade matches the order; quantity matches the gauges; tail number is yours.
- Caps and placards: caps secure; filler placards legible, and anti-misfueling filler restrictors in place where your aircraft has them (FAA AC 20-122A).
- Sample: every tank fueled — color, smell, clarity, no water.
- Discrepancy rule: anything that does not match stops the departure until it is resolved on the ground. The schedule does not argue.
The airport in this report arrived at the first line after its accident. The rest are yours to add before yours.
Assurance, in miniature
Safety assurance means checking that your own system works, and fueling gives a clean loop because every fueling leaves paper. Once a quarter, pull your fuel receipts and compare them with the standard: was the grade stated? Does the receipt match the aircraft? Any discrepancies, and were they caught on the ground? Write down what you found — including "nothing wrong" — and date it.
Track three numbers:
- Orders with the grade stated. Target: all of them.
- Discrepancies caught on the ground. Count these with pride — each is the system working. A quarter with zero may mean a perfect operation, or that nobody is looking.
- Samples taken after away-from-base fueling. If it isn’t done at strange airports at the end of long days, it isn’t done where it matters most.
Had this operation run that loop once, the finding would have been "our fuel orders don’t state the grade" — fixed in a five-minute briefing on a quiet Tuesday, not in a final report.
Make it safe to say "stop"
The fourth SMS component is safety promotion, and here it comes down to the passengers. They "wanted to get home." Passengers don’t have to say a word for that pressure to exist; the pilot carries it for them. So lift it in advance. Brief it as part of the trip: if something on the ground doesn’t check out — fuel, weather, paperwork — we fix it on the ground, and that can mean a delay or a night stop. Said calmly before departure day, it is professionalism. Improvised on the ramp, it feels like failure. That, too, is a system — and it costs one sentence.
Hank’s Take
A fuel truck is the only place in aviation where we hand a stranger the power to stop both engines — then wave him off with two words and a signature. "Top it off" is not an order. A signature is not a check. The defenses that would have saved this flight were a sentence spoken aloud, a receipt read as a warning, and ninety seconds with a sample cup. Write them down, stack them up, and let the next misfueling die on the ramp — where accidents are still cheap.
Your move — ten minutes
- Minute one: think about your last fueling away from home. Did anyone say the grade out loud? Did anyone sample afterward? If not, that gap is your next safety project.
- Minutes two to five: write your fuel order and your four-line post-fueling check. Print it, laminate it, put it with the aircraft documents.
- Minutes six to ten: brief every pilot and every line person who fuels for you — the order, the read-back, the receipt check, the sample, and the rule that a discrepancy stops the clock. Then pull last quarter’s receipts and see what the paper says.
Order, confirm, check, sample, stop. It fits on one laminated page — and you get to build it before an investigator asks to see it.
Sources
- NTSB, Aviation Investigation Final Report ERA26LA314 (Cessna 421C, N28RH, Blytheville, Arkansas / Fulton, Kentucky, August 21, 2026), published October 1, 2026; docket: https://data.ntsb.gov/Docket?ProjectID=203660
- NTSB docket items for ERA26LA314: fueler interview, airport manager interview, pilot interview.
- NTSB Safety Alerts SA-050 (Pilots: Fueling Mistakes) and SA-051 (Line Personnel: Fueling Matters), March 2016; NTSB CEN14FA462 (Cessna 421C, Las Cruces, NM, August 27, 2014).
- FAA Advisory Circular 20-122A, Anti-Misfueling Devices: Their Availability and Use.
- FAA, Safety Management Systems final rule, 89 FR 33068 (April 26, 2024); 14 CFR Part 5.
Hank’s Classroom is published by HAN Aviation Safety Consulting for educational purposes. Case facts are drawn from the NTSB’s public record; the analysis and recommendations in the teaching layer are ours, not the Board’s. Nothing here is legal advice or a substitute for your own operation’s risk assessment.
HAN Safety Original
Want the full lesson?
Hank's Classroom is the appetizer. Our live training programs go deep — 16 to 24 hours, built around your operation.