50,000 airline miles stolen from a travel expert

Katy Nastro, a travel expert with Flighty, revealed that more than 50,000 American Airlines miles disappeared from her loyalty account after someone redeemed them for a ticket without her permission. The incident occurred as she checked her balance in an American Airlines app while returning home in New York.

American Airlines informed Katy that the miles had been redeemed in another person's name, effectively tying the flight to a traveler she did not know. The loss disrupted her plans for an Asia trip she had been saving toward for years.

Recovering the miles proved more complex than expected. Katy was asked to file a formal fraud complaint by email, provide police documentation, and submit those materials before the airline would reinstate the miles. She ultimately recovered the miles and had to create a replacement AAdvantage account, with her status and rewards transferred.

The case highlights that loyalty programs may not offer automatic protection for unauthorized redemptions. American Airlines notes that reimbursements are discretionary and may be reviewed only within three months of the withdrawal. The process can require a police report, though requirements vary by program and may not be universal.

Katy emphasized that loyalty accounts can be accessed through password compromises and suggested best practices: using unique passwords, enabling two-factor authentication where available, monitoring activity alerts, and avoiding sharing sensitive information via social media. She also recommended securing email accounts associated with loyalty programs and considering defensive steps like separate email addresses for travel accounts.