--- title: "The crash of Aeroflot flight 964: causes, chronology and conclusions — OnlyPlanes" description: "The crash of Aeroflot flight 964 is not a short line in the chronology, but a related system of decisions and failures. This dossier separately analyzed the confirmed sequence, technique, crew training, flight organization and features of the available documentary database, the limits of available data and the practical changes that followed the incident." canonical_url: "https://onlyplanes.ru/en/plane-crashes/aeroflot-964-1973" locale: en meta: keywords: "aviation, aircraft, airlines, airports, flight" "og:description": "The crash of Aeroflot flight 964 is not a short line in the chronology, but a related system of decisions and failures. This dossier separately analyzed the confirmed sequence, technique, crew training, flight organization and features of the available documentary database, the limits of available data and the practical changes that followed the incident." "og:image": "https://onlyplanes.ru/images/aviation/aircraft/boeing-787.webp" "og:title": "The crash of Aeroflot flight 964 - a detailed analysis" --- > Index of every page on this site: [llms.txt](https://onlyplanes.ru/llms.txt) USSR and Russia, detailed dossier # Aeroflot Flight 964 accidentAeroflot Flight 964 accident The crash of Aeroflot flight 964 is not a short line in the chronology, but a related system of decisions and failures. This dossier separately analyzed the confirmed sequence, technique, crew training, flight organization and features of the available documentary database, the limits of available data and the practical changes that followed the incident.
Date
13 October 1973
Location
Domodedovo, USSR
Aircraft
Tu-104B
On board
122 people on board
Outcome
122 fatalities
Planned route · main points ## Tbilisi to Moscow Loading the geographical map… ***Event location**The mark refers to the place of the event, and not to the center of the nearest city or airport. The published coordinate does not mean geodetic accuracy.55°29′51″N 37°39′50″E**Planned route**Tbilisi to Moscow The line connects the main points of the planned route, and does not reproduce the actual track. The plane indicates the direction, not the position at the time of the incident. Emergency deviations and returns to this line are not included.*
Route
Tbilisi to Moscow
Flight phase
Night approach to landing
How events unfolded
From the first deviation to the end of the emergency sequence
Classification
Accident on approach
The full picture ## What happened 1973-10-13 Tu-104B aircraft, associated with the operator Aeroflot, was at the center of the event in the area of Domodedovo, USSR. The route and flight conditions are important for understanding: Tbilisi to Moscow. The official classification in the card is "Catastrophe at sunset", and behind it is the following outcome: 122 dead. These wordings are kept separate because the editorial category should not replace the legal or technical classification of the investigative body. At night at sunset, the crew received unreliable indications of spatial position and course. Tu-104 entered the roll and collided with the ground. This brief description captures the external sequence, but does not reduce the incident to one convenient reason. In aviation security, the immediate mechanism, conditions, decisions of people and organizational barriers are considered separately. Only such an analysis shows at what stage the risk could still be stopped and why the next protective layer did not fulfill its task. The initial event in the published reconstruction is the following circumstance: Violation of the power supply and unreliable indication of the course and position. Further development was as follows: In the clouds, the crew lost a reliable instrument picture, the aircraft deviated along the heel and went into a rapid decline. Between these phrases is the most important part of the analysis - the change in the condition of the aircraft, the information available to the crew, time limits and the quality of feedback from devices, controllers or people in the cabin. The reaction of the participants is not evaluated from the point of view of a person who already knows the final. The attempt to restore the situation began without sufficient height to complete the maneuver. Decisions should be placed in a real time scale, taking into account the workload, uncertainty and irreversibility of some actions. Therefore, not only mistakes or successful steps are noted below, but also what options actually remained achievable at each stage. The main practical lesson is formulated as follows: Reserve devices, recognition of display failure and transition to a safe procedure with conflicting data. It does not mean that one new instruction is able to eliminate repetition. Reliable protection is built in layers: design and maintenance, training, procedures, interfaces, dispatch support, airfield infrastructure, emergency response and independent supervision should compensate for inevitable human and technical deviations. Context and mechanisms ## Detailed account Background, technical details and decisions are examined separately to avoid reducing a complex event to a single explanation. 01Context ### Flight to the point where everything has changed Analysis does not begin at the time of the emergency signal, but earlier - with the destination of the flight, the route and the normal waiting of the crew. For Tu-104B in this story was given the route "Tbilisi to Moscow". Before the threat, people performed normal tasks: pilots controlled the trajectory and systems, the cabin crew worked with passengers, traffic controllers led the flow of traffic, and the technical service was responsible for the aircraft released on the flight. It is the normality of the beginning that explains why early weak signs may not have looked like the beginning of a catastrophic chain. The phase in which the situation has become critical is designated as the "Night Landing Approach". Each phase of flight has its own reserve of time and space. At the cruising echelon, there may be more altitude, but the diagnosis is more difficult and further the airfield; when taking off or landing, the decision is measured in seconds; when capturing a technically sound aircraft is controlled by people whose freedom is limited by violence. Therefore, the same warning does not create the same options for action in different conditions. The card records 122 people on board. The number of people is important not as a dramatic reception, but as a parameter of the rescue task: the number of exits, the pace of evacuation, the need for medical care and the scale of the search operation directly depend on the download. The outcome of “122 Dead” can also not be read without context. Survival or death is determined not only by the force of the impact, but also by the integrity of the cabin, fire, water, relief, the availability of exits and the time of arrival of assistance. The operator of Aeroflot and the type Tu-104B are specified for the connection of the event with the operating system, and not for the general accusation of the brand or company. One case may reveal a specific vulnerability of the design, maintenance program, training or supervision, but to transfer this output to all aircraft of the type or all employees is incorrect. The task of the dossier is to show the checked chain and the limits of applicability of each conclusion. 02Initial Event ### The first barrier did not stop the threat. Confirmed starting point is formulated as follows: Violation of power supply and unreliable indication of the course and position. In the investigation, such an event is separated from the deep conditions. For example, the failure of the part explains what physically happened, but it does not yet answer why the defect appeared, why it was not detected, why the reservation did not keep control and why the procedure did not give the crew enough time. Similarly, a wrong action does not explain which interfaces, learning, or organizational stimuli made it likely. The first layer of protection usually exists before departure: design tolerances, technical documentation, inspection, mass and fuel calculation, route preparation, crew clearance or safety inspection. The second layer acts in flight - alarms, automation, control cards, mutual control and dispatch surveillance. The third reduces the consequences: emergency landing, evacuation, firefighting, search and medical care. In this case, the threat went through several layers in succession, rather than stemming from a single error. It is important to distinguish between the signal and its meaning. The device can show a deviation, but the crew must understand whether it refers to the sensor, the real state of the aircraft or the secondary consequence of another failure. Several simultaneous warnings increase the load and can hide the main thing. With illegal interference, contradictory information from invaders, services and airports plays a similar role: a technically possible solution is not always available to a person under immediate threat. In retrospect, the correct option often seems obvious. In real time, participants do not see the future sequence and work only with the available picture. Therefore, the analysis asks specific questions: what sign appeared first, to whom it was visible, how unambiguously it indicated the danger, what procedure should have been included and whether there was physical time to bring it to a result. This approach turns moral judgment into engineering. 03Development ### How an individual deviation became a chain After the initial event, the sequence developed as follows: In the clouds, the crew lost a reliable instrument picture, the aircraft deviated along the roll and went into rapid decline. This phrase describes the direction of the process, but for safety, every transition is important. The failure or external threat changes the flight mode; the new mode creates additional warnings; the crew redistributes attention; the time to test hypotheses decreases; then one of the options becomes irreversible. The speed of these transitions determines whether the standard control card could help completely or only partially. The aircraft is a connected system. The change in thrust affects speed and power supply, damage to the structure - on hydraulics and aerodynamics, fire - on wiring and visibility, the wrong configuration - on lift and braking. Even when the initial failure is local, its consequences can cross the boundaries of several systems. That is why commissions study not only the broken part, but also the tracing of lines, the separation of reserves, the logic of warnings and the ability to isolate damage. The person in this chain is neither an ideal computer nor a passive victim of automation. Pilots build a working hypothesis, check the devices, control the trajectory, communicate and prepare the cabin. A diagnosis error can send actions to the wrong place, but the interface must also help distinguish the primary cause from the cascade of consequences. A good system is tolerant of one wrong step and does not require you to instantly guess the hidden mechanism. A critical point occurs when the stock of altitude, speed, fuel, lane length, or freedom of decision becomes less than needed for an alternative. After it, participants no longer choose the best outcome, but reduce the damage from the remaining options. In this event, this boundary should be sought between the circumstances of "Violation of power supply and unreliable indication of course and position." and the result of "122 dead." It is on the earlier side of the border that preventative changes have the greatest effect. 04Decisions ### What people can see and do The published picture of the reaction of the participants is as follows: The attempt to restore the situation began without sufficient height to complete the maneuver. It should be evaluated according to the information that was in front of people at that time. The crew could not know the actual depth of damage, the controller - the exact configuration of the aircraft, the flight attendant - the state of the cabin, and the rescuers - the suitability of each exit. Teamwork is needed precisely to combine incomplete pictures, but communication itself can become a damaged barrier. The first priority is to maintain a controlled trajectory. Even if the fault looks urgent, at least one pilot must continue to monitor the pitch, roll, speed, altitude and direction. The second participant diagnoses and reads the map, the third channel - radio - connects the aircraft with external resources. When everyone simultaneously solves one technical mystery, basic control can disappear unnoticed. This is a recurring lesson, not an indictment of a particular crew. Irreversible actions require confirmation if time allows: engine shutdown, mechanization cleaning, fire extinguishing composition release, power outage, start of run-up or site selection. But the confirmation rule should not paralyze the decision in case of fire, collision or threat in the cabin. Preparation is therefore not based on memorizing one answer, but on recognizing the type of threat and maintaining several safe options until the final choice. After the plane stops, the task changes. Evacuation depends on fire, smoke, water, fuselage position, operating engines, and availability of assistance. Exit, suitable in the training cabin, can lead to fire or to dangerous heights. Flight attendants are required to assess the situation and, if necessary, deviate from the usual sequence. It is critical for passengers to leave their luggage behind and follow short orders: one person’s delay affects the entire flow. 05Investigation ### How to restore the proven picture For this case, the direction of the investigation is described as follows: Electrical system, gyroscopic devices, approach scheme, radio communication and preparation for complex failure. This is not a list for the sake of formality. Each source answers a separate question. The parametric recorder shows modes and commands, the speech record shows interaction and sound warnings, the debris shows the physical path of destruction, the documents show the state before the flight, and the radar and control room record place the aircraft in the external environment. No source is complete. The sensor can record not the physical magnitude itself, but the signal to a certain block; the microphone does not capture thoughts; the destruction on impact masks earlier damage; the witness sees only part of the trajectory. Therefore, the commission compares independent data and checks whether the hypothesis explains all observations without additional unconfirmed assumptions. The conclusion of an investigation is usually built on levels. First, the facts are established: the configuration, weather, trajectory, damage and operation of the systems. Causal and contributing factors are then formulated. After that, recommendations are issued to those who are able to change the design, procedure, training or supervision. The recommendation is not equal to the proof of personal guilt, and the technical report does not replace the criminal or judicial process. There is no external link to the report inside this page: the user remains in the OnlyPlanes encyclopedia. At the same time, the text should maintain the discipline of the original source - not to add fictitious negotiations, not to round up the disputed figures without reservation and not to raise the preliminary version to the final reason. Open materials allow you to confidently describe the main sequence, but do not give the right to attribute to individual people motives, thoughts or exact replicas that are not in the published records. This boundary is part of the content, not a flaw of the page. 06System analysis ### Why One Cause Is Not Enough The convenient formula “the technique failed” or “the crew made a mistake” shortens the story, but does little to prevent it. Technical failure occurs within the program of design, manufacture, maintenance and control of the resource. A human error appears inside the interface, training, graphics, report culture, and available procedures. An external threat goes through a risk assessment, space closure, inspection, dispatch protection, or airfield infrastructure. Each branch provides a separate opportunity for prevention. The systematic approach does not remove responsibility, but makes it more accurate. He asks who owned the particular barrier, what data was available, why the deviation was not detected, and what control could have stopped it earlier. Sometimes the answer refers to the manufacturer, sometimes to the operator, the regulator, the airport, the security service or several participants at the same time. The drafting text does not designate the perpetrator where there is a separate legal procedure for doing so. A reliable recommendation should be verifiable. The phrase “be careful” does not explain how to measure change. A specific barrier is much more useful: a separate sensor, a new warning logic, a mandatory map item, a minimum fuel supply, a ban on a certain operation, an independent repair check, a scenario training or a change in the airport security zone. Such measures can be implemented, checked and, if necessary, revised. However, the new protection can create side effects. Additional warning increases the noise in the cabin, a complex card takes time, a reinforced door changes access to the cabin, and the automatic function creates a new mode that you need to understand. Therefore, post-incident changes undergo risk assessment and testing. The goal is not to add the maximum number of rules, but to make the right action the most understandable and physically achievable. 07Consequences ### What the Air Force learned from the event The recorded impact on safety is formulated as follows: The disaster emphasizes the need for independent sources of spatial information and partial panel training. Usually the change does not occur by one order the next day. First, the commission publishes a recommendation, then the regulator evaluates the scope, the manufacturer prepares a technical solution, the operator changes documents and training, and supervision checks compliance. Years can pass between an event and a sustainable outcome. Some measures are directly related to type Tu-104B, others are more applicable. A design defect can lead to a directive of airworthiness for a family of aircraft; a problem of interaction - to changes in CRM for many operators; an event on the strip - to new marking and airport control systems; capture - to a revision of the inspection and protection of the cabin around the world. The magnitude of the withdrawal must be consistent with the evidence. The main lesson of this card is “Reserve devices, detection of display failure and transition to a safe procedure with conflicting data.” The practical meaning is not to remember a slogan, but to recognize an early condition. While the chain is at the stage of preparation, parameter control or first warning, simple actions are available. After losing control, major fire, fuel generation, collision or physical capture of the cab, the price of the solution increases, and the number of safe options decreases dramatically. The story remains relevant if the reader understands not only the final, but also the work of protective barriers today. Modern passenger flight is safer due to many small changes accumulated after different incidents: more accurate alarms, mandatory cross-checks, improved materials, rare failure training and transparent data transmission. No measure is perfect, but their combination does not automatically become a disaster. Sequence ## Event timeline Rather than isolated episodes, this was an unfolding system: each stage inherited the constraints of the one before it. 1. 01Before the event ### Normal flight and hidden conditions The Tu-104B aircraft was carrying out the Tbilisi-Moscow route. Preparation, design, maintenance, dispatching environment and safety rules formed the initial set of protective barriers. 2. 02First Signal ### Emergence of threat Disruption of power supply and unreliable indication of the course and position. 3. 03Development ### The chain accelerates. In the clouds, the crew lost a reliable instrument picture, the aircraft deviated along the roll and went into a rapid decline. 4. 04Response ### Actions of people and systems The attempt to restore the situation began without sufficient height to complete the maneuver. 5. 05Outcome ### Accident on approach 122 killed. Place of event: Domodedovo, USSR. These data describe the result but do not replace the causal chain analysis. 6. 06After the event ### Investigations and changes Electrical system, gyroscopic devices, approach circuit, radio communication and preparation for complex failure. The disaster emphasizes the need for independent sources of spatial information and partial panel training. More than one cause ## Chain of contributing factors An incident develops when several weaknesses come together along the same path. 01 ### Initial condition Disruption of power supply and unreliable indication of the course and position. 02 ### Flight phase Night landing approach. The available margin of time, altitude, speed, or freedom of decision determined the practical set of options. 03 ### Cascade In the clouds, the crew lost a reliable instrument picture, the aircraft deviated along the roll and went into a rapid decline. 04 ### Human Capabilities Participants worked with incomplete information and increasing workload. The attempt to restore the situation began without sufficient height to complete the maneuver. 05 ### Organizational protection The preparation, procedures, maintenance, dispatch or protection system was supposed to prevent one deviation from becoming the result of “122 dead”. 06 ### Boundaries of knowledge Open materials allow you to confidently describe the main sequence, but do not give the right to attribute to individual people motives, thoughts or exact replicas that are not in the published records. From the flight deck ## Decisions and constraints Decisions are assessed against the information, altitude, time and aircraft condition at that moment, rather than what became known later. 01 ### First the trajectory Control of speed, height, heel, pitch and direction remains the first task even with a complex diagnosis. If the plane is controlled, one pilot flies, the other works with failure and communication. 02 ### Confirm irreversible action Disabling the system, changing the configuration or abandoning the reachable site is confirmed by the second crew member, if the time scale of the threat allows for verification. 03 ### Declare a real priority The emergency status gives dispatchers the opportunity to free the route, prepare the lane and services. Late or unclear transmission reduces outside assistance, although not always dependent on the crew. 04 ### Prepare people after landing A safe run does not complete the event yet. Fire, smoke, water and damaged exits require quick assessment and short commands, and hand luggage should not delay the flow. Summary ## Investigation findings - The confirmed external sequence begins with the circumstance: a power failure and an unreliable indication of the course and position. - Critical phase: Night approach. - Further development: In the clouds, the crew lost a reliable instrument picture, the aircraft deviated along the roll and went into a rapid decline. - Reaction of participants: The attempt to restore the situation began without sufficient height to complete the maneuver. - The investigation focused on the following data set: Electrical system, gyroscopic devices, approach circuitry, radio communication and preparation for complex failure. - Official classification of the card: Catastrophe at sunset. - Confirmed death toll: 122. - The boundary of a confident conclusion: Open materials allow you to confidently describe the main sequence, but do not give the right to attribute to individual people motives, thoughts or exact replicas that are not in the published records. After the investigation ## What aviation learned A lesson becomes useful when it leads to a procedure, training, a design change or a new safety barrier. Lesson 01 ### Early detection The barrier should be triggered before the deviation deprives the crew of time and controllability: through inspection, sensor, alarm, dispatch control or security procedure. Lesson 02 ### Clear procedure Practical lesson of the page - Backup devices, recognition of display failure and transition to a safe procedure with conflicting data. The procedure should be short, training and feasible in real conditions. Lesson 03 ### Sustainability of design and organization One error, one sensor or one missed item should not immediately destroy all levels of protection. Reserve independence is more important than the formal number of systems. Lesson 04 ### Preparation of a rare scenario The simulator and the analysis of events allow you to meet an unusual combination in advance, distribute duties and recognize early signs without knowing the future outcome. Lesson 05 ### Checking the result The disaster highlights the need for independent sources of spatial information and partial panel training. Its relevance today ## The memory of an event is measured by modified barriers The crash of Aeroflot flight 964 remains part of the history of aviation not because of the scale of the title, but because it allows you to see the work of a complex system under load. At night at sunset, the crew received unreliable indications of the spatial position and course. Tu-104 entered the roll and collided with the ground." becomes useful only after the separation of mechanism, conditions, decisions and consequences. Then the reader sees not an inevitable tragedy, but a sequence of points at which another design or procedure could change the result. The main heritable conclusion is Reserve devices, recognition of display failure and the transition to a safe procedure with conflicting data. It does not only apply to the crew of a particular flight. The manufacturer is responsible for clear and sustainable equipment, the operator is responsible for maintenance and training, the airport and dispatch service is responsible for a safe environment, the regulator is responsible for independent control, and the passenger is responsible for executing evacuation commands. Security arises at the intersection of these responsibilities. The disaster highlights the need for independent sources of spatial information and partial panel training. It is important not to attribute all subsequent improvements to one incident: major changes are usually shaped by multiple investigations, studies, and trials. But the concrete case provides evidence that makes abstract risk a measurable task and makes postponing protection more difficult. Continue exploring ## More analyses [Browse the archive](https://onlyplanes.ru/en/plane-crashes) [USSR and Russia · 2019

Aeroflot Flight 1492 accident

Energy management without normal automation, a go-around after a bounce and evacuation without cabin baggage.](https://onlyplanes.ru/en/plane-crashes/aeroflot-1492-2019) [USSR and Russia · 2018

Saratov Airlines Flight 703 accident

Checking sensor heating, using unreliable-airspeed procedures and managing the cockpit during conflicting indications.](https://onlyplanes.ru/en/plane-crashes/saratov-airlines-703-2018) [USSR and Russia · 2015

Metrojet Flight 9268 accident

Airport perimeter and personnel security, baggage screening and threat-information sharing.](https://onlyplanes.ru/en/plane-crashes/metrojet-9268-2015) ```json {"@context":"https://schema.org","@graph":[{"@id":"https://onlyplanes.ru/en#website","@type":"WebSite","description":"News, stories and rare images from the world of aviation","inLanguage":"en-GB","name":"OnlyPlanes","url":"https://onlyplanes.ru/en","publisher":{"@id":"https://onlyplanes.ru/en#identity"},"translationOfWork":{"@id":"https://onlyplanes.ru/en#website"}},{"@id":"https://onlyplanes.ru/en/plane-crashes/aeroflot-964-1973#webpage","@type":"WebPage","datePublished":"1973-10-13","description":"The crash of Aeroflot flight 964 is not a short line in the chronology, but a related system of decisions and failures. This dossier separately analyzed the confirmed sequence, technique, crew training, flight organization and features of the available documentary database, the limits of available data and the practical changes that followed the incident.","name":"The crash of Aeroflot flight 964: causes, chronology and conclusions","url":"https://onlyplanes.ru/en/plane-crashes/aeroflot-964-1973","isPartOf":{"@id":"https://onlyplanes.ru/en#website"},"potentialAction":[{"@type":"ReadAction","target":["https://onlyplanes.ru/plane-crashes/aeroflot-964-1973"]}],"primaryImageOfPage":{"@id":"https://onlyplanes.ru/en#logo"}},{"@id":"https://onlyplanes.ru/en#identity","@type":"Organization","name":"OnlyPlanes","url":"https://onlyplanes.ru/en","logo":{"@id":"https://onlyplanes.ru/en#logo"},"sameAs":["https://t.me/legkoenebo"]},{"@id":"https://onlyplanes.ru/en/plane-crashes/aeroflot-964-1973#article","@type":"Article","datePublished":"1973-10-13","description":"The crash of Aeroflot flight 964 is not a short line in the chronology, but a related system of decisions and failures. This dossier separately analyzed the confirmed sequence, technique, crew training, flight organization and features of the available documentary database, the limits of available data and the practical changes that followed the incident.","headline":"The crash of Aeroflot flight 964: causes, chronology and conclusions","inLanguage":"en-GB","thumbnailUrl":"https://onlyplanes.ru/images/aviation/aircraft/boeing-787.webp","author":{"@id":"https://onlyplanes.ru/en#identity"},"image":{"@id":"https://onlyplanes.ru/en#/schema/image/1"},"isPartOf":{"@id":"https://onlyplanes.ru/en/plane-crashes/aeroflot-964-1973#webpage"},"mainEntityOfPage":{"@id":"https://onlyplanes.ru/en/plane-crashes/aeroflot-964-1973#webpage"},"publisher":{"@id":"https://onlyplanes.ru/en#identity"}},{"@id":"https://onlyplanes.ru/en#logo","@type":"ImageObject","caption":"OnlyPlanes","contentUrl":"https://onlyplanes.ru/search-logo.png","inLanguage":"en-GB","url":"https://onlyplanes.ru/search-logo.png"},{"@id":"https://onlyplanes.ru/en#/schema/image/1","@type":"ImageObject","contentUrl":"https://onlyplanes.ru/images/aviation/aircraft/boeing-787.webp","inLanguage":"en-GB","url":"https://onlyplanes.ru/images/aviation/aircraft/boeing-787.webp"}]} ``` ## Sitemap See the full [sitemap](https://onlyplanes.ru/sitemap.md) for all pages.