Travel expert Katy Nastro experienced the unauthorized redemption of 50,000 American Airlines AAdvantage miles, highlighting the vulnerabilities of loyalty accounts as holiday travel approaches.
Travel expert Katy Nastro recently discovered that 50,000 American Airlines AAdvantage miles had vanished from her account after someone redeemed them without her permission. This unsettling experience serves as a cautionary tale for frequent flyers, especially as the holiday travel season approaches.
Nastro, who works with Flighty, a flight-tracking app that provides real-time updates on delays, cancellations, and gate changes, shared her story during an interview on “The CyberGuy Report” podcast. After returning to New York from a trip, she opened her American Airlines app to check her mileage balance, only to find a significant drop. Initially, she thought it was a glitch, as she had recently redeemed about 10,000 miles, but the app showed a loss of approximately 50,000 miles.
Upon contacting American Airlines for clarification, Nastro learned that someone had redeemed her miles for a ticket booked in another person’s name. This revelation was particularly shocking for her, as she had been saving those miles for a future trip to Asia. “I really had this just stomach drop moment,” she recounted. Despite her extensive knowledge of the travel industry, she never expected to become a victim of loyalty account theft.
Many might assume that airlines can easily reverse unauthorized redemptions, especially when the ticket is booked under a different name. However, Nastro discovered that recovering her miles was a complicated process. American Airlines instructed her to submit a formal fraud complaint via email, file a police report, and provide documentation before they would consider restoring her miles. “I had to have the police report filed with them before anything was credited,” she explained.
While Nastro eventually recovered her miles, the ordeal did not end there. She had to create a new email address and establish a replacement American Airlines AAdvantage account. Fortunately, the airline transferred her existing status along with her restored rewards. The requirement of a police report, despite the theft occurring online, raised questions for Nastro about the necessity of such a cumbersome process.
Another important consideration for travelers is that airline loyalty points typically do not carry the same protections as money lost through unauthorized credit card transactions. According to American Airlines’ AAdvantage terms, the airline has no general obligation to restore miles withdrawn without authorization. They may review requests submitted within three months of the unauthorized withdrawal, but reimbursement remains discretionary. This makes it crucial for travelers to monitor their accounts for suspicious activity promptly.
During the podcast, Nastro expressed her concern about who was using her stolen miles. Although the airline identified a redemption involving another person’s name, she had no information about the individual or their destination. Loyalty programs often allow members to book tickets for others, which can create opportunities for criminals who gain unauthorized access to an account. Nastro acknowledged that password reuse might have played a role in the breach, stating, “I think I fell into the trap of using the same password for everything.”
To safeguard against such incidents, Nastro advises travelers to avoid holding onto their rewards indefinitely. She cautions that airline miles can depreciate over time, as airlines may change their award pricing. “I would highly suggest that you should not be waiting on those miles,” she said, emphasizing the importance of redeeming them within a reasonable timeframe.
While travelers should aim for valuable redemptions, Nastro suggests that using miles for economy seats during busy travel periods can be a practical choice. Award tickets often provide more flexibility than certain cash fares, but it’s essential to review the airline’s cancellation and redeposit rules before booking.
As the conversation progressed, Nastro highlighted the increasing prevalence of scams targeting travelers. She noted that criminals often create fake airline alerts and customer service accounts on social media, luring individuals into providing personal information. To avoid falling victim to such scams, she recommends that travelers verify any suspicious notifications by directly accessing their airline’s official app rather than clicking on links in emails or messages.
To enhance the security of loyalty accounts, Nastro suggests several best practices. Travelers should regularly check their airline and hotel loyalty apps, review recent redemptions, and compare their current balance with expected amounts. Setting a recurring calendar reminder can help catch unusual activity sooner. Additionally, enabling account activity and redemption alerts can provide timely notifications of suspicious transactions.
Using unique passwords for each account is crucial, and a password manager can help generate and store strong passwords securely. Travelers should also protect the email account linked to their loyalty programs, as access to that inbox can allow unauthorized password resets. Implementing two-factor authentication (2FA) and monitoring any unfamiliar changes to contact information can further enhance account security.
In light of Nastro’s experience, it’s clear that loyalty accounts deserve the same attention as financial accounts. Regularly checking balances, using unique passwords, and being vigilant about unusual activity are essential steps for safeguarding hard-earned rewards. As Nastro aptly points out, while saving miles for a dream trip is tempting, enjoying those rewards while they still hold value is a wise strategy.
For more insights and strategies on maximizing travel rewards, listeners can tune into “The CyberGuy Report” podcast, where Nastro’s experience may inspire a reevaluation of how travelers approach their loyalty accounts. To learn more about protecting personal information and travel rewards, visit CyberGuyLive.com for upcoming webinars and resources.
As the holiday season approaches, travelers should remain vigilant against potential threats to their loyalty accounts. If you suspect unauthorized activity, contact your loyalty program’s verified customer service channels immediately and follow their instructions for securing your account.
For additional information on protecting your personal data and enhancing your online security, consider exploring data removal services and secure email providers. By taking proactive measures, travelers can enjoy their journeys with greater peace of mind.
According to CyberGuy, staying informed and prepared is the best defense against the growing threat of loyalty account theft.