Uh Oh: Fraud On My American AAdvantage Account

I need a new American AAdvantage account, and I’m kind of confused…

Corporate security locked my AAdvantage account

Yesterday afternoon I received a phone call from American AAdvantage customer service. The agent stated that American corporate security had identified fraud in my AAdvantage account. You don’t usually want to hear “corporate security” and “fraud” in the same sentence, but I know that I’ve done nothing to violate the terms of AAdvantage, so I assumed the issue wasn’t with me.

She explained that I needed to create a new AAdvantage account. I was confused, naturally. I check my AAdvantage account daily, and hadn’t received any suspicious emails, or noticed anything unusual. I asked if I could just change my password, or if I really needed a new account, and the agent said a new account number was necessary, and that I should also use a new email address if possible. I asked if this was triggered by something specific, and she indicated that corporate security doesn’t give reasons, but that they had identified something.

She asked if I had 15 minutes to set up a new account. I said no, partly because I wanted to make sure that the phone call was legitimate, given that I’d presumably have to provide all kinds of personal details. She offered to send me an email, so that I can call back at any time. That email had the subject line “Please Contact Us to Secure Your Account,” and did indeed come from an American Airlines email address. It read as follows:

Please contact AAdvantage Customer Service regarding the unauthorized access to your AAdvantage account. American Airlines takes claims of identity theft very seriously, and we investigate each matter thoroughly to ensure no AAdvantage policies were violated.

We will need to speak with you in order to secure your account and file an award dispute. Please contact us at your earliest convenience by calling XXX-XXX-XXXX, Monday through Friday, 8:00 am to 7:00 pm CST, to complete this process. This process will take approximately 15-30 minutes. We will need to complete this process within 3 months of the date of the unauthorized redemption. We look forward to assisting you with this matter.

Furthermore, at this point I tried to log into my AAdvantage account, and noticed that it was locked.

I hope someone was at least trying to book something good!

I’m confused by what triggered this?

There’s quite a bit of fraud with both airline and hotel loyalty programs, whereby people manage to steal points and make redemptions. So it makes sense for airlines to manage this proactively, to minimize the loss associated with these activities. What I find strange here is that I didn’t notice anything suspicious:

  • I didn’t receive any emails about information on my AAdvantage account being updated, or about an itinerary I didn’t book
  • As recently as a few hours before I got this call from American, all my miles were still in my account

That leads me to believe that someone wasn’t actually successful with what they were trying to do?

I’m also confused by the need to create a new AAdvantage account? Couldn’t I just change my account password, or was someone attempting to steal my miles by making a booking by phone? I’m only hesitant to do this because I’ve had my AAdvantage number committed to memory for 15+ years, and I don’t love the prospect of having to remember a new one. You might as well give me a new Social Security Number, while you’re at it!

I’m sure American knows something that I don’t, but I’m curious if anyone else has dealt with something similar, and knows what could have triggered this, given the lack of obvious signs?

Over the years I’ve had my fair share of “unauthorized” access to my travel reservations, in the form of people trying to change my flights or hotel reservations (I’m not sure I understand why someone cares enough about me to do that, but…).

I do think airlines and hotels should do a better job “protecting” reservations, since it’s easy enough to figure out a confirmation code by calling, and with that information you can make quite a few changes. But I suspect that’s unrelated to this issue.

It’s going to take me a long time to remember a new account number

Bottom line

Apparently I need a new American AAdvantage account number, as corporate security has decided that there was unauthorized access and/or fraud on my account. I have to set up a new account by phone, and I’m guessing it will take me years to not just naturally rattle off my old AAdvantage number when it’s needed.

While I know that unauthorized access to frequent flyer accounts is common, I find this to be a rather unusual situation, given the lack of any signs.

Has anyone dealt with something similar from AAdvantage?

Conversations (96)
The comments on this page have not been provided, reviewed, approved or otherwise endorsed by any advertiser, and it is not an advertiser's responsibility to ensure posts and/or questions are answered.
Comment as a member

Membership is free and takes no more information than commenting as a guest. Earn status points for good contributions, and see fewer ads as your status grows.

Type your response here.

If you'd like to participate in the discussion, please adhere to our commenting guidelines. Anyone can comment, and your email address will not be published. Register to save your unique username and earn special OMAAT reputation perks!

  1. Loading comments…
Recent Comments
The latest from the OMAAT community.

The comments on this page have not been provided, reviewed, approved or otherwise endorsed by any advertiser, and it is not an advertiser's responsibility to ensure posts and/or questions are answered.

Jenny Guest

I received an email at 6am EST , congratulating me on booking award travel. Someone booked a 55,000 business class trip from ABJ to CMN (cote d iviore – morocco). Called AA, waiting for the “security department” to call me back. Agent blocked my account and I can’t login now. Bummer that I am due to receive a 60,000 AA bonus miles promo any day now.

0
‼ 0
GR Guest

A similar situation just happened to me. Someone logged into my Advantage account, changed my email, and stole 35,000 miles to book two tickets from Dallas to Indianapolis. I live in D.C. When I called American, they locked my account and had me go through the process to create a new account. The catch is they won't return the $1000 worth of reward miles unless I provide them with a police report listing the names of the passengers who used my miles (which American obviously knows, since they allowed the purchase). I then provided a police report, but American didn't read it - they continue to delay helping me saying they need more information from me about the incident (all of which is actually on the report I sent). I have since been on hold for several hours waiting on an American Airlines representative to answer the phone, only to transfer me to someone else who can't help.

0
‼ 0
Carrie Guest

This just happened to me, but not by way of a phone call. I was trying to log into my Aadvantage account and could not get in. So I tried resetting my password, and it showed an unfamiliar email address (it only showed a portion of the email address, but it had unfamiliar letters and digits). Also, my security questions were different. Then I called Aadvantage and they asked me to verify the address. The address I gave them didn't match the one they had on file (they couldn't tell me what it was, but apparently it didn't match). Then they told me they couldn't do anything to help me, which was alarming. I persuaded the rep to look into it further and he put me on hold. I then searched my emails to see what else may have come in that I missed. And that's when I realized that American locked my account due to unspecified activity. And then I noticed that someone used miles to book a flight and a seat, as well as resetting my password. I have no idea how this person got the token in my email address to change the account unless he hacked my email. So now I have to call the fraud unit on Monday to find out how I get the miles back and resecure my account. I'll probably have to get a new FF number, which is irritating because I've had the same one for about 30 years.

0
‼ 0
Kimberly Case Guest

Received 3 emails from AA that 200,000 miles stolen by three from Africa in July, 2023; contacted immediately to cancel flights booked using my miles. Filed the required police report but have yet to get confirmation that miles will be returned. Very frustrated as numerous emails not responded to.

0
‼ 0
Michael Nazario Guest

I received the same email and instead of clicking anything I opened the app and found it was locked. I had to call the customer service line which did confirm that my email and other information had been changed and all my points redeemed last month. After the 15 minutes of talking with the security department, I did get a new account and had to file a police report...

0
‼ 0

Save posts to read later

Saving posts is a member feature. Become an OMAAT member to build a reading list you can come back to from any device.

Become a member
Meet Ben Schlappig, OMAAT Founder
5,883,136 Miles Traveled

43,914,800 Words Written

47,187 Posts Published

Keep Exploring OMAAT