Fake Marriott Bonvoy Points Redemption Flash Offer Scam
Criminals impersonate Marriott Bonvoy with fake flash-redemption offers — claiming limited free-night awards are available — to harvest account credentials and drain points balances.
Part of: Fake Loyalty Points Redemption Scams
Last reviewed: 8 June 2026
Marriott Bonvoy runs genuine flash free-night redemption promotions where members can book specific properties at reduced point costs for a limited window. Scammers monitor the timing of Marriott's real promotions and release fake versions days later, targeting members who may have missed the authentic offer and are eager for a second chance.
The fraudulent email looks almost identical to a real Bonvoy flash sale announcement — property photos, a dramatic points price, and a countdown. Victims who click and log in hand over their credentials, which are immediately used to redeem the victim's Bonvoy points for merchandise or cash-equivalent rewards.
Marriott Bonvoy flash redemptions, when genuine, are accessible only through the app or at marriott.com. Marriott does not host these promotions on external partner sites or require fresh credential entry through a one-click email deep link.
How this scam works on the Marriott brand
The phishing email subject reads: 'Flash Sale: 5 nights at [desirable resort name] for 50,000 Bonvoy points — 48 hours only.' The email body features property photography and a 'Book Now' button that leads to a convincing but fake Marriott sign-in page.
After credentials are captured, the scammer may redirect the victim to the real Marriott website, reducing immediate suspicion. In the background, the attacker uses the credentials to log in and redeem available points for Amazon gift cards or similar transferable value, completing the drain before the victim checks their account.
A second variant targets Marriott credit card holders, claiming a 'bonus points redemption' available exclusively to cardholders. The email instructs recipients to log in and enter their credit card number to 'link' the promotion — harvesting the card number in addition to the Bonvoy credentials.
Common red flags
- Email arrives from any domain other than '@marriott.com' or '@bonvoy.com'
- The flash offer references a property at a per-point value dramatically better than standard Marriott award prices
- You are asked to enter your credit card number to 'link' a cardholder promotion inside an email flow
- No matching flash promotion appears in the Marriott Bonvoy app or on marriott.com
- The email link does not resolve to marriott.com when the URL is examined
- A countdown timer of under 24 hours adds pressure to avoid independent verification
How to protect yourself
- Check all Bonvoy promotions directly in the Marriott Bonvoy app or at marriott.com — never via an email link
- Enable two-factor authentication on your Bonvoy account through profile settings at marriott.com
- If you entered credentials on a suspicious page, change your Marriott password immediately and review your points transaction history
- Contact Marriott Bonvoy customer care at 1-800-627-7468 to flag suspected fraudulent activity
- Set up transaction alerts on your Bonvoy account so any redemption triggers an immediate notification
- Alert your linked Marriott credit card issuer if you provided card details
How to report it
- Report phishing emails to Marriott at [email protected]
- File a complaint with the FTC at reportfraud.ftc.gov
- Contact Marriott Bonvoy customer care at 1-800-627-7468
- Report to the IC3 at ic3.gov if financial loss occurred
Frequently asked questions
How can I find real Marriott Bonvoy flash redemption deals?
Genuine flash promotions are featured on the Marriott Bonvoy app homepage and at marriott.com/bonvoy. Any email pointing to an external domain for a flash sale is fraudulent.
Can stolen Bonvoy points be recovered?
Contact Marriott Bonvoy fraud support at 1-800-627-7468 as soon as possible. Prompt reporting improves the chance of reversing fraudulent redemptions.
How do I turn on Bonvoy account activity alerts?
Log in at marriott.com, go to 'My Profile > Communication Preferences', and enable email alerts for account activity and redemptions.