Travel Expert Loses 50,000 Airline Miles to Account Theft

Travel expert Katy Nastro discovered that approximately 50,000 American Airlines AAdvantage miles had been redeemed from her account without her authorization. The miles were used to book a flight for someone else, leaving Nastro surprised and concerned, especially given her background in the travel industry.

Nastro, who works for the flight-tracking app Flighty, noticed the discrepancy in her account balance after a recent trip. Initially dismissing it as a potential app error, she soon realized the miles were genuinely missing. Upon contacting American Airlines, she learned that the stolen miles had been redeemed for a ticket in another individual's name, derailing her own travel plans.

Recovering Stolen Miles Proves Complicated

Attempting to reclaim the stolen miles involved a multi-step process. American Airlines required Nastro to submit a formal fraud complaint via email, file a police report, and provide documentation before her miles could be restored. She expressed that the requirement to involve law enforcement, even for an online theft, made the process unexpectedly cumbersome.

Following the recovery of her miles, Nastro also had to create a new American Airlines account and transfer her existing status. She noted that airline loyalty points may not have the same protections as funds stolen through unauthorized credit card transactions. American Airlines' AAdvantage terms state that the company is not generally obligated to restore miles redeemed without authorization, though they may review requests made within three months, with reimbursement remaining discretionary.

How Stolen Miles Are Exploited

Nastro was unsure of the exact method used to access her account, but she acknowledged the possibility of password reuse, a common vulnerability where a compromised password from one service is used across multiple accounts. This practice allows criminals to gain access to loyalty programs, which can then be exploited by booking flights for others, transferring points, or exchanging them for other rewards.

Rethinking Mile Accumulation Strategies

Nastro suggested that travelers might want to reconsider holding onto airline miles indefinitely. She cited the risk of depreciation, as airlines can alter award pricing, potentially increasing the mileage cost for future redemptions. She recommended considering redemptions within a year rather than waiting for a perfect, long-term redemption goal, while still advising users to ensure the award flight offers reasonable value.

Protecting Your Loyalty Accounts

To safeguard frequent flyer accounts, experts recommend several measures:

• Regularly check balances: Monitor loyalty accounts at least monthly for unusual activity and enable account alerts if available.
• Use unique passwords: Employ strong, unique passwords for each loyalty program and secure the associated email account.
• Enable two-factor authentication (2FA): Utilize extra security layers like 2FA or passkeys when offered by the program.
• Be wary of redemption alerts: Do not click links in unsolicited emails or texts claiming mileage redemptions. Verify activity directly through the airline's official app or website.
• Report suspicious activity immediately: Contact the loyalty program's customer service as soon as possible to report any unauthorized transactions.
• Consider a separate email: Using a dedicated email address for loyalty programs can help track notifications and reduce exposure.
• Limit personal data sharing: Be cautious about sharing boarding passes or travel confirmations online, as they can contain sensitive information.