In a cautionary tale for travelers, Katy Nastro, a well-known travel expert, recently discovered that over 50,000 of her hard-earned American Airlines miles had been stolen from her account and used to book a flight without her consent. This experience, shared during a podcast conversation, highlights the vulnerabilities many frequent travelers face, particularly as the holiday season approaches. With accumulating miles often viewed as an added bonus for business travelers and vacationers alike, Nastro’s misfortune raises serious questions about the security of loyalty accounts and the necessary precautions travelers should take to protect their rewards.
| Article Subheadings |
|---|
| 1) How a travel expert discovered 50,000 stolen airline miles |
| 2) Getting stolen airline miles back was surprisingly complicated |
| 3) How thieves turn stolen airline miles into real trips |
| 4) Why saving airline miles forever could cost you |
| 5) How to protect your airline miles and hotel points |
How a travel expert discovered 50,000 stolen airline miles
It was after a recent trip that Katy Nastro had her shocking revelation. After landing in New York and during a ride in an Uber, she opened her American Airlines app to check her rewards balance, only to find that her miles had significantly decreased. Initially thinking it was a glitch, Nastro refreshed her app, but the missing miles were still unaccounted for. Concerned, she quickly reached out to American Airlines and learned that someone had redeemed her miles for a flight booked in another person’s name. Her anticipation for a trip to Asia was suddenly marred by this frustrating theft.
Nastro described her reaction as a “stomach drop moment,” filled with disbelief, especially as she had spent years accumulating these points through her extensive travels. Despite her expertise in the travel industry, facing what she initially perceived as an impossibility was a harsh lesson in vulnerability for Nastro. This experience serves as a reminder that identity theft in loyalty programs is a real threat, which can occur even to the most informed individuals.
Getting stolen airline miles back was surprisingly complicated
Upon discovering the theft, Nastro assumed that rectifying the situation would be a straightforward process, involving a quick reversal by the airline since the ticket had been booked in someone else’s name. Unfortunately, she found that restoring her stolen miles was anything but simple. American Airlines instructed her to file a formal fraud complaint via email, necessitating a police report and significant documentation before they would consider crediting her account.
Katy expressed her frustration about the bureaucratic complexity of recovering her miles, stating,
“I had to have the police report filed with them before anything was credited.”
After a prolonged effort, Nastro was successful in getting her miles reinstated, but she was also required to establish a new email account alongside a replacement AAdvantage account. The airline was accommodating in transferring her status and rewards, but the inclusion of law enforcement in the process left her questioning the necessity of such an arduous procedure.
A deeper concern emerged about the lack of protections loyalty programs offer compared to conventional bank accounts. Under American Airlines’ AAdvantage terms, there is a lack of obligation to restore miles withdrawn without authorization. While the airline does allow for reviews on unauthorized transactions submitted within a three-month window, the decision to return the mileage remains discretionary. This scenario underscores the critical importance for travelers to monitor their accounts actively and promptly report any suspicious activity.
How thieves turn stolen airline miles into real trips
An intriguing aspect of Nastro’s situation is the identity of the individual who ultimately benefited from her stolen miles. Although American Airlines identified that the miles were redeemed for a ticket booked under someone else’s name, Nastro was left in the dark regarding who that individual was or their travel destination. Loyalty programs permit members to book tickets for others, opening up avenues for dishonest activity if account security is compromised.
Criminals who gain access to loyalty accounts can redeem miles for flights or exchange points for other rewards, ultimately exploiting the system in various ways. Nastro suspected that password reuse across platforms may have facilitated the breach.
“I think I fell into the trap of using the same password for everything,”
she admitted. This highlights the ongoing challenge of password security in an age where breaches are common, and many individuals opt for convenience over security. The challenge remains for users to ensure unique passwords are managed safely, especially for financially tied accounts like loyalty programs where stolen rewards can have significant monetary value.
Why saving airline miles forever could cost you
Another surprising and valuable insight from Nastro was her advice regarding the practice of holding onto airline miles indefinitely. She encouraged travelers to consider redeeming their rewards sooner rather than later, as the value of miles can depreciate over time due to changing award pricing. Nastro compared this trend to purchasing a new vehicle that depreciates significantly once driven off the lot, stating that waiting too long could result in obtaining less value from the miles.
The importance of evaluating whether an award flight provides reasonable value is not to be overlooked. For example, if travelers can use their miles effectively during peak holiday periods, they may find redeeming points for economy seats could be practical. Awareness of the airline’s cancellation and redeposit rules can also offer more flexibility than some fixed cash fares, granting travelers more options.
How to protect your airline miles and hotel points
Given the experiences shared by Nastro, travelers are urged to take proactive measures to secure their loyalty accounts. Regularly checking reward balances, at least once a month, is essential in early detection of unauthorized activity. Setting up alerts for account activity can also provide ongoing oversight.
Ensuring that every loyalty account is secured with a unique password is a vital part of safeguarding travel rewards. Utilizing a password manager can help in creating and maintaining strong passwords across various platforms. Additionally, enabling two-factor authentication when available adds another layer of security against breaches.
Travelers should also be cautious with redemption alerts and unsolicited messages from social media, which may appear legitimate but could lead to phishing attempts. To bolster protection, maintaining privacy regarding boarding passes and loyalty numbers is essential, as sharing such information can lead to potential impersonation or unauthorized access to accounts. Implementing these strategies can significantly reduce the likelihood of falling victim to loyalty account theft.
| No. | Key Points |
|---|---|
| 1 | Over 50,000 airline miles were stolen from travel expert Katy Nastro’s account without her permission. |
| 2 | Recovering the miles was a challenging process involving a formal complaint and a police report. |
| 3 | Loyalty programs have fewer protections against unauthorized activity compared to traditional bank accounts. |
| 4 | Travelers are encouraged to redeem airline miles sooner to avoid depreciation in value. |
| 5 | Proactive measures can significantly enhance account security and reduce the risk of theft. |
Summary
The experience recounted by Katy Nastro serves as a stark reminder of the vulnerabilities that frequent travelers face regarding loyalty accounts. The complexities surrounding the recovery of stolen miles reveal the inadequate protections many loyalty programs offer. Therefore, fostering awareness in account security practices is crucial for anyone wishing to safeguard their travel rewards effectively. As the holiday travel season approaches, travelers are advised to remain vigilant, reassess their strategies regarding the redemption of miles, and implement necessary security measures to protect their accounts against potential threats.
Frequently Asked Questions
Question: What are the essential steps to protect airline miles?
Essential steps include regularly checking rewards balances, using unique passwords across accounts, enabling two-factor authentication where available, and being cautious with unexpected redemption alerts.
Question: Why should travelers avoid saving airline miles indefinitely?
Travelers should avoid saving airline miles indefinitely because the miles can depreciate in value over time due to changes in award pricing, potentially resulting in lost opportunities for valuable redemptions.
Question: How can I report unauthorized activity on my airline loyalty account?
You should contact your airline’s customer service through verified channels immediately upon noticing unauthorized activity and follow their procedures to secure your account and investigate the transaction.

