Fake Delta SkyMiles Points Transfer Scam
Scammers impersonate Delta Air Lines to send fake SkyMiles expiry notices or partner-transfer offers, stealing account credentials and draining miles balances.
Part of: Fake Travel Loyalty Points Transfer Scam
Last reviewed: 8 June 2026
Delta SkyMiles is one of the most-impersonated airline loyalty programmes in phishing campaigns because the miles have tangible redemption value for flights and upgrades. Many SkyMiles members hold large balances accumulated over years of travel, making a single successful account takeover lucrative for fraudsters.
A common attack exploits the real-but-misunderstood fact that SkyMiles never officially expire for active members. Scammers send emails claiming that due to a 'policy change', the recipient's miles will expire imminently unless transferred to a partner programme — creating urgency around something that should not be urgent.
Delta SkyMiles transfers to partner programmes are a real feature, but they are initiated only by logging in to your SkyMiles account at delta.com. Any email link claiming to facilitate a transfer should be treated as suspect until independently verified.
How this scam works on the Delta Air Lines brand
The phishing email replicates Delta's widget-style email layout with flight status graphics and a SkyMiles balance prominently displayed. The subject line reads: 'Action Required: Your SkyMiles are at risk — transfer now to preserve them.' The balance shown may be fabricated or may match data obtained from a breach.
Clicking the transfer link leads to a convincing Delta.com sign-in replica. Captured credentials allow the scammer to immediately access the real account and redeem miles for gift cards, travel vouchers, or flight upgrades through Delta's rewards catalogue — liquidating the balance quickly.
A parallel variant sells discounted SkyMiles through unofficial reseller sites, promising 50,000 miles for a small dollar amount. Buyers pay but receive nothing, and may also have their card details used for further fraud.
Common red flags
- Email arrives from a domain other than '@delta.com' — Delta SkyMiles communications arrive only from official Delta addresses
- An urgent miles-expiry warning, especially one claiming SkyMiles now expire under a new policy — SkyMiles officially do not expire for active accounts
- A link to transfer or sell your miles to a third party at a discounted rate
- The miles balance in the email does not match your real balance visible in the Fly Delta app
- The sign-in page URL is not delta.com
- Any request to confirm your SkyMiles number and password in reply to an email
How to protect yourself
- Open the Fly Delta app or go directly to delta.com to check your real SkyMiles balance and any genuine account notifications
- SkyMiles do not expire for active accounts — treat any expiry urgency as a red flag
- Enable two-factor authentication on your SkyMiles account via 'My Profile > Security Settings' at delta.com
- Review 'Recent Activity' in your SkyMiles account weekly when travelling frequently
- If you provided credentials through a suspicious link, change your Delta password immediately and contact Delta at 1-800-221-1212
- Check whether your linked credit card (e.g., a Delta SkyMiles Amex) shows any unauthorised charges
How to report it
- Report phishing emails to Delta at [email protected]
- File a report with the FTC at reportfraud.ftc.gov
- Contact Delta SkyMiles support at 1-800-323-2323 to freeze pending redemptions
- Report to ic3.gov if financial loss occurred
Frequently asked questions
Is it safe to buy SkyMiles from a third-party reseller site if the price looks good?
No — Delta does not authorise resale of SkyMiles between individuals, and third-party 'discount miles' sites are almost always scams that either deliver nothing or misuse your payment for further fraud. Only buy miles directly through Delta's own 'Buy Miles' feature on delta.com.
What should I do if I think my SkyMiles account was accessed through a phishing email?
Change your Delta password immediately from delta.com or the Fly Delta app, check 'Recent Activity' for any redemptions you didn't make, and call Delta SkyMiles support at 1-800-323-2323 to flag the account. The sooner you report it, the better the chance of freezing any pending redemption.
How do I know if a Delta SkyMiles email asking me to log in is genuine?
Genuine Delta emails come from an '@delta.com' address and direct you to the Fly Delta app or delta.com without requiring you to re-enter your SkyMiles number and password through a special link. If a message insists your miles will be lost unless you act within hours, treat that urgency as a warning sign.
Do Delta SkyMiles ever expire?
Delta SkyMiles do not expire for active SkyMiles members. Any message claiming otherwise is almost certainly a scam.
Can I transfer my SkyMiles to someone else?
Delta does not allow direct mile transfers between accounts, but miles can be pooled with household members. Any offer to 'transfer' miles to save them from expiry is fraudulent.
How quickly can a scammer drain my SkyMiles?
Scammers who access a SkyMiles account can immediately redeem miles for gift cards or other rewards available in Delta's shop. Change your password the moment you suspect compromise.