Travel rewards can feel like a small fortune sitting quietly in an account until the day they vanish. That is exactly the kind of jolt one travel expert experienced after discovering a huge chunk of American Airlines miles had been spent without permission. The story is part warning, part wake-up call, and it hits especially hard because loyalty balances are often treated like harmless perks instead of real targets.
Katy Nastro, who works in the travel world and knows the game better than most, noticed the problem right after landing in New York. She checked her app during a ride home and saw her balance had dropped by more than 50,000 miles, even though she had only recently used about 10,000. At first it looked like a glitch, but the missing points were real, and the airline confirmed someone had used them to book a flight in another person’s name.
That kind of theft stings in a very specific way because miles are earned over time, usually one trip at a time. For Nastro, the loss was tied to years of travel, including long-haul flights and careful saving for a future trip to Asia. The whole thing landed with the kind of sickening punch most travelers dread but rarely expect to face.
Getting the miles back turned out to be more annoying than many people would guess. Instead of a quick reversal, she had to file a fraud complaint, submit a police report, and provide paperwork before the airline would restore the rewards. Even after that, she had to set up a new email address and a new AAdvantage account, though her elite status did come back with the recovered miles.
What makes this even more frustrating is that loyalty programs do not always treat stolen points like stolen cash. In many cases, the rules leave room for the airline to decide what happens next. American Airlines says it may review claims filed within three months of an unauthorized redemption, but that still leaves plenty of room for delays, confusion, and a lot of back-and-forth for the customer.
The route thieves take is not always obvious, either. Sometimes they book tickets in someone else’s name, and sometimes they may move points or use redemption options that are built into the program. Nastro suspects password reuse may have played a role, which is the sort of mistake many people make without thinking twice, especially when one login starts to feel easier than managing a dozen unique ones.
There is also a bigger lesson here about hoarding miles for the perfect future trip. Nastro argues that waiting too long can backfire because award pricing can climb while your balance sits untouched. A trip that once looked doable can suddenly demand far more miles, which turns careful saving into a losing bet.
That is why stolen points are only part of the risk. Even if nobody gets into your account, the value of the rewards can slip away over time as airline pricing changes. Using miles while they still deliver solid value can be smarter than letting them sit for years, especially if a travel window is already on the calendar.
Another problem is how believable airline scams have become. Fake redemption alerts and phony support messages can look close enough to the real thing that people panic and click without thinking. Scammers also set up imitation support accounts on social platforms, then push the conversation into private messages where they can fish for login details, verification codes, or other sensitive information.
The safest move is simple, even if the message feels urgent. Open the airline’s official app or site on your own and check the account directly instead of following any link in the email or text. If something looks off, treat it as a security issue first and a customer service issue second.
Regular checkups help too. Loyalty balances should not be something travelers glance at once a year and forget about until redemption time. A quick review of account activity, strong unique passwords, and extra login protections can make a big difference when someone is trying to sneak in.
It also helps to keep travel-related information from spilling all over the internet. Boarding passes, confirmation numbers, and frequent flyer details can reveal more than people realize if they are posted carelessly. Keeping those details private makes it harder for scammers to build convincing attacks or impersonate a traveler with just a few pieces of leaked data.
None of this means travel rewards are not worth collecting. They absolutely can be, especially for people who fly often and know how to squeeze real value from them. But stories like this show that miles deserve the same attention as a bank account, because once they are gone, getting them back can be anything but simple.
