Why loyalty point scams matter
When’s the last time you checked your loyalty point accounts? If you can’t remember, you’re not alone. Airline miles, hotel points, and credit card rewards tend to sit quietly until you need them. Unfortunately, that lack of attention is exactly what scammers want.
Loyalty points may not feel like real money, but scammers treat them like cash. Experts estimate that scammers steal more than $1 billion in rewards points each year, largely due to reduced security measures and lack of attention.
How loyalty point scams work
A common loyalty point scam starts with an email or text that looks like it's from your airline, hotel, or credit card company. The message might claim your points are about to expire and urge you to act fast. If you click the link and enter your username and password, you could be handing over the keys to your rewards account without realizing it.
Scammers have more than one way to get into a rewards account. They may use passwords exposed in past data breaches or steal login credentials through malware-infected websites. Even though points are valuable, rewards accounts often aren't protected as well as bank accounts. Without security features like two-factor authentication, a single stolen password may be all a scammer needs to access your points.
Once a scammer gains access to a rewards account, they usually don't waste any time. They may transfer points to another account, redeem them for gift cards, or use them to book travel. The faster they act, the less likely the account owner is to notice that anything is missing.
How you can protect your points
Before clicking a link to check your points or "save" a reward that's supposedly about to expire, take a closer look. Scammers are experts at creating messages that appear to come from trusted companies. If a message asks you to log in, it's often safer to visit the company's website directly. When in doubt, don't click—the few minutes you save aren't worth risking your hard-earned rewards.
One of the best ways to protect your rewards points is also one of the simplest: use a strong, unique password for every account. That way, if a password is exposed in a data breach, scammers can't use it to unlock your other accounts. Adding multi-factor authentication provides an extra layer of protection by requiring a second form of verification before anyone can log in.
It's also a good idea to check your rewards accounts regularly. Many loyalty programs offer alerts that notify you when points are redeemed, balances change, or account information is updated. These notifications can serve as an early warning sign if something isn't right. The sooner you spot suspicious activity, the better your chances of stopping further losses and securing your account.
Reacting to a loyalty points scam
When suspicious activity appears in a loyalty account, it is important to act quickly. Contacting the rewards program provider through a verified website, app, or phone number helps ensure the issue is handled through a legitimate source.
If you or a loved one has been targeted by a scam or fraud, you are not alone. You can call the AARP Fraud Watch Network Helpline at 877-908-3360 (open 4 a.m. to 4 p.m. Alaska time Monday through Friday) to talk to a fraud specialist who can provide support and guidance on next steps. Whether you’ve lost money, shared personal information, or have a question, you can call.
You can also find tools, alerts, and prevention tips through the AARP Fraud Watch Network. Visit aarp.org/fraud for more resources. Remember: if you can spot a scam, you can stop a scam.
Aidan Smith is an intern for AARP Alaska.
