Memorandum
- From
- Derek Weston via FOX News
- Date
- Filed
- Business·4 min to read
- Re
Travel expert Katy Nastro loses 50,000 American Airlines miles to unauthorized redemption
ReTravel expert Katy Nastro loses 50,000 American Airlines miles to unauthorized redemption
Flighty travel expert Katy Nastro discovered that about 50,000 American Airlines miles were redeemed for a ticket booked in someone else's name, and she had to file a police report to recover them.
Katy Nastro, a travel expert with the flight-tracking app Flighty, discovered that more than 50,000 American Airlines miles had vanished from her account after someone redeemed them for a flight she never authorized. She shared the experience during a conversation on "The CyberGuy Report" podcast, and her story is a warning for anyone who has spent years building up loyalty points.
Nastro had just landed in New York and was riding home in an Uber when she opened her American Airlines app to check how many miles her recent trip had earned. Instead, she saw a sharp drop in her balance. She had redeemed about 10,000 miles recently, but the total was off by roughly 50,000. She assumed the app had made an error and refreshed it, but the missing miles stayed missing, so she called the airline.
American Airlines told her that someone had redeemed the miles for a ticket booked in another person's name. Nastro had been saving the points for a trip to Asia, and they were now tied to a flight she knew nothing about. "I really had this just stomach drop moment," she said. She had earned much of the balance on long flights, including trips to Australia, and someone else had benefited from that travel.
Nastro said she had never expected the problem to reach her because she works in the travel industry. She had previously warned people about loyalty account theft, which made the experience especially striking to her. Recovering the miles was not automatic. American Airlines asked her to submit a formal fraud complaint by email and to file a police report, and the airline would not credit the miles until that report was on file. "I had to have the police report filed with them before anything was credited," she explained.
The process did not end with the restored miles. Nastro had to create a new email address and set up a replacement American Airlines AAdvantage account. The airline transferred her existing status and restored rewards to the new account. She noted that she had to involve local law enforcement even though the theft took place entirely online, and she questioned whether the process needed to be so cumbersome.
The episode also highlights a gap in protection for travelers. According to American Airlines' current AAdvantage terms, the airline has no general obligation to restore miles withdrawn without authorization. It may review requests submitted within three months of the unauthorized withdrawal, but reimbursement remains discretionary. That makes spotting suspicious activity quickly especially important, and loyalty programs each have their own fraud procedures, so a police report may be requested but is not universal.
Nastro never learned who had used her miles or where the traveler was headed, and she never found out exactly how the account was accessed. She acknowledged that password reuse may have played a role. "I think I fell into the trap of using the same password for everything," she said. Loyalty programs often allow members to book tickets for others or transfer points, features that can create openings for criminals who gain access to an account. For travelers, the lesson is that a loyalty balance can represent flights worth real money and deserves the same password care as a bank account.
5
